surface codes

IEEE Spectrum reports that AI tools are exposing long-standing flaws in legacy software, illustrated by the php2shell vulnerability class, where decades-old insecure coding patterns in PHP applications let attackers turn input into shell commands. The argument is that AI-assisted discovery and exploitation of such weaknesses is compounding an accumulated security debt from 40 years of software practices, forcing organizations to finally remediate old code.

A developer launched Hnrepos.com, a browsing site for GitHub repositories shared on Hacker News, describing it as a HackerTube-style interface for code projects. The launch was posted on Hacker News, where users are trying it out and commenting on how useful it is for discovering projects that surface there.

Russian media report on the drawbacks of paying for purchases via QR-code, a method widely promoted for its cashback benefits. The coverage highlights risks and disadvantages for consumers when using QR payments in shops. The topic is drawing attention as QR payments become more common in Russian retail, with shoppers weighing convenience and cashback rewards against the newly flagged downsides.