You're viewing the mastodonapp.uk public feed.

Federated feed Local feed

Jimmy Wyliemayahustle@infosec.exchange
Oct 22, 2026, 5:11 PM
Framing the php2shell story as "AI uncovered php2shell" is like hearing an awesome song and crediting the guitar instead of the player. It's just incorrect and steals credit from a good researcher.
The underlying bug was discovered in 2020, a related one in 2024, and they were both rediscovered again through exploitation in 2026 by a human researcher. The researcher used LLM tech to help with parts of the process, not all of it, and says so in the writeup.
https://calif.io/php2shell/
💬 10🔄 171⭐ 190

Replies

shellsharksshellsharks@shellsharks.social
Oct 22, 2026, 5:43 PM
@mayahustle Yeah. This this this. Google and OpenAI out here crediting themselves for finding the vuln because their models were used as part of the process is only a hair less absurd than the manufacturers of the chair Ryan sat on while he was expertly crafting this exploit taking credit for php2shell as well. Hell, get everyone involved taking credit! The electric company for providing power to his computer, bakery for providing Ryans breakfast that morning, etc… etc…
💬 2🔄 1⭐ 16
Corsaccorsac@mastodon.social
Oct 22, 2026, 6:05 PM
@shellsharks @mayahustle to be honest I’d be ok with crediting @taviso shower
💬 0🔄 0⭐ 1
Jeff GriggJeffGrigg@mastodon.social
Oct 22, 2026, 7:25 PM
@shellsharks @mayahustle
My dog deserves all the credit for all the work I do. He's an enabler!
🐕
💖
💬 1🔄 0⭐ 1
shellsharksshellsharks@shellsharks.social
Oct 22, 2026, 8:25 PM
@JeffGrigg @mayahustle Shoutout to the pups of tech pros! 💻 🐶
The real heroes.
💬 0🔄 0⭐ 0
Bellegray Lanebellegraylane@universeodon.com
Oct 22, 2026, 6:18 PM
@mayahustle nice music analogy.
💬 0🔄 0⭐ 0
hal8999hal8999@infosec.exchange
Oct 22, 2026, 6:45 PM
@mayahustle php2shell, brought to you by Carl's Jr.
💬 0🔄 0⭐ 0
scrottie (he/him/them)scrottie@bsd.network
Oct 22, 2026, 10:45 PM
@mayahustle yeah... after a point in LLM companies trying to take credit for things, it started to sound suspiciously like "Mussolini will make the trains run on time". He didn't, but the press was unable or unwilling to print otherwise. If anything, he robbed resources. Actual work related to that was done by people working in worse and worse conditions. And even if there was some improvement to the trains running on time, it was extremely not worth it.
💬 0🔄 0⭐ 0
Adam Millerchipadam@toots.adamu.jp
Oct 22, 2026, 11:06 PM
@mayahustle the Wiz version: "AI uncovers critical RCE vulnerabilities affecting 70% of the Internet"

https://www.wiz.io/blog/php2shell-php-rce
💬 0🔄 0⭐ 0
Gabriel Nwtrmt@mastodon.social
Oct 22, 2026, 11:43 PM
@mayahustle right now, I’m channeling the unknown webmasters and sys admins of the world by doing my slowest clapping
👏🏼
💬 0🔄 0⭐ 0
Ultra Verified 🇺🇦 🇬🇱🇨🇦Ultraverified@mastodon.sdf.org
Oct 23, 2026, 1:58 AM
@mayahustle
It's attributed to "AI", so it must be newsworthy
💬 0🔄 0⭐ 1
nessness@ioc.exchange
Oct 23, 2026, 6:05 AM
@mayahustle i heard npr (or bbc on world service) interviewing a researcher and asking him "does it concern you that ai is doing this major hacking and finding vulnerabilities that humans couldnt" and this researcher (who did not sound media trained whatsoever or even like he was regularly using english aloud much) tries to point out "no because a human *did* find it and ai is just another tool he was using" and this fucking interviewer is just like "well i guess if *thats* how you wanna frame it 🤷 "
its not just the shameless marketing its that its fucking working😭
💬 1🔄 0⭐ 2
Jimmy Wyliemayahustle@infosec.exchange
Oct 25, 2026, 4:35 AM
@ness oof. Crap like that is why programs like AI Spotlight exist.
https://pulitzercenter.org/focus-areas/information-and-artificial-intelligence/ai-spotlight-series
💬 0🔄 1⭐ 0
puppybutchrobot@shork.nerdmusic.net
Oct 23, 2026, 7:25 AM
@mayahustle@infosec.exchange are you telling me the plagiarism machine plagiarized?
💬 0🔄 0⭐ 0
Lynn McAlister UE :mstdn:lmgenealogy@mstdn.ca
Oct 23, 2026, 4:01 PM
@mayahustle The whole purpose of AI is to steal skill and creativity from the people who have it and ensure that credit and profit accrue to the tech companies. That's that whole model.
💬 0🔄 1⭐ 0