HNHacker News
TopNewBestAskShowJobs

pawanjswal

25 karma · joined October 26, 2020

Product Security Engineer | Cybersecurity Blogger at OpenExploit.in
submissionscomments
pawanjswal··on [dead]
A critical LangChain core bug can turn a single LLM prompt into a secret-exfiltration or object-instantiation exploit. If you run LangChain in production, this is urgent.
pawanjswal··on [dead]
Learn how to use Hakrawler, a fast Golang web crawler, for bug bounty and recon. Step-by-step tutorial with real examples and pro tips.
pawanjswal··on [dead]
Step-by-step ToolHive tutorial to deploy and manage MCP servers securely with real examples. Perfect for developers and AI tool users.
pawanjswal··on Standard Completions
I have seen many LLM devs' encountered this at some point. Good to see that you are not only pointing out the inconsistency but also actively advocating a common benchmark.
pawanjswal··on Streaming HTML out of order without JavaScript
This is a great new way to think about progressive enhancement! It's really cool to see Shadow DOM and streaming HTML work together so well.
pawanjswal··on [dead]
Enhance Kubernetes security with kubectl-rexec an audited alternative to kubectl exec. Log user actions inside pods for better visibility.
pawanjswal··on OneDrive File Picker Flaw Provides Apps Full Read Access Entire OneDrive
It's hard to believe that the OneDrive File Picker still doesn't have fine grained OAuth scopes in 2025. Allowing read access to the whole drive just to upload one file goes against the principle of least privilege.
pawanjswal··on Read-it-later app Pocket is shutting down – here are the best alternatives
Sad to see Pocket go. It's been part of my daily routine. That said, this list of alternatives is gold. I'm leaning toward Matter or Readwise Reader right now, but curious what others are switching to. Anyone found a hidden gem worth trying?
pawanjswal··on Mac browser Arc being discontinued in favor of new Dia app
I just got used to Arc and now it’s getting sunsetted already? I get the learning curve bit, but Arc really felt like a fresh take on browsing. I hope Dia lives up to the hype — anyone here tried the alpha yet? Would love to hear your impressions!
pawanjswal··on Show HN: MCP Server SDK in Bash
[flagged]
pawanjswal··on [dead]
Learn how to set up a SOCKS5 proxy using ProxyBlob and Azure Blob Storage to bypass network restrictions securely and efficiently.
pawanjswal··on DeepSeek-R1-0528 is now live on Hyperbolic
These are pretty aggressive prices for H100s and A100s. $0.99/hr for H100 SXM is kind of wild compared to what other cloud providers are charging.
pawanjswal··on 3D Simulation of the Bombe Machine
This is such a cool interactive sim. Took me a minute to figure out the controls, but once you get the hang of it, it’s weirdly immersive.
pawanjswal··on [dead]
Learn how to use SQLMap-AI for smarter, AI-driven SQL injection testing with adaptive scans, WAF bypass, and DBMS-specific attack strategies.
pawanjswal··on The Ingredients of a Productive Monorepo
I felt like a pep talk and reality check rolled into one.
pawanjswal··on Negotiating PoE+ Power in the Pre‑Boot Environment
Solving PoE+ power negotiation before the OS boots is next-level. This is good and a clever workaround.
pawanjswal··on Show HN: My LLM CLI tool can run tools now, from Python code or plugins
I think, this LLM 0.26 just turned every terminal into a playground for AI-powered tools.
pawanjswal··on Yes-rs: A fast, memory-safe rewrite of the classic Unix yes command
Loved it. This is the kind of over-the-top Rust energy I signed up.
pawanjswal··on FromSoft's singular mech game Chromehounds is back online
This is such a wild and heartfelt resurrection.
pawanjswal··on GitHub MCP exploited: Accessing private repositories via MCP
That’s a wild find. I can’t believe a simple GitHub issue could end up leaking private repo data like that.
pawanjswal··on [dead]
Discover 5 powerful hacking tools every beginner should know. From web app testing to recon and decoding, these tools will boost your skills.
pawanjswal··on Lottie is an open format for animated vector graphics
Love how Lottie makes animations super sleek and lightweight.
pawanjswal··on Open Source Society University – Path to a free self-taught education in CS
It's an ultimate roadmap for self-taught CS students!
pawanjswal··on Ten years of JSON Web Token and preparing for the future
JWT has really shaped the modern web!
pawanjswal··on [dead]
Learn how to build a secure password manager using Python, SQLite, and encryption. Step-by-step guide for beginners and cybersecurity enthusiast.
pawanjswal··on [dead]
80% of cyberattacks begin with publicly available information. And most of us give it away… for free. Learn the ethics and real dangers of online oversharing.
pawanjswal··on The Windows Subsystem for Linux is now open source
WSL going open source is a huge win for devs. Can’t wait to see what the community builds with it!
pawanjswal··on I got fooled by AI-for-science hype–here's what it taught me
Appreciate the honesty. AI isn’t magic, and it’s refreshing to see someone actually say it out loud.
pawanjswal··on DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage
Wow, this whole TeleMessage leak feels like a spy thriller.
pawanjswal··on Show HN: I modeled the Voynich Manuscript with SBERT to test for structure
This is hands-down the nerdiest and coolest deep-dive into the Voynich I’ve seen.
Page 1 of 2Next →