bmit's comments

On: 1-Click RCE to steal your Moltbot data and keys

[bmit]

Looking at their website, depthfirst seems to offer an product that essentially solves this problem.

[ejcho → bmit]

Seems like a space that is really heating up. I recall most of the foundational labs announced some kind of agentic security product last year (OpenAI's Aardvark, Claude Code security reviewer, etc.)

On: 1-Click RCE to steal your Moltbot data and keys

[bmit]

So many people are giving keys to the kingdom to this thing. What is happening with humanity?

[lxgr → bmit]

Humanity is the same it's always been. Some people are just inherently curious despite the obvious dangers.

Also, if you think about it, billions of people aren't running Moltbot at all.

[bmit → lxgr]

X is full of people including Karpathy, Jason C and others boasting about this.

[hyperadvanced → bmit]

Presumably one of these high profile people will eventually get pwned if the risks really are that high.

On: Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)

[bmit]

It is surreal to see a zero day like this being caught entirely by AI. What was the toughest part about building this?

[bmit → bmit]

Also, a clever title.