Hacker Blogs
Work in progress: 82,651 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #2525

C

Calif Newsletter

Company blog · blog.calif.iosecurityprogramming

Calif Newsletter is the company blog at blog.calif.io, writing about security and programming. Since 2023, 29 different Hacker News readers have linked it 37 times, most often “Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)”. It is still writing: the last post was on 2026-10-16, and you can follow it by feed.

Visit the blog
37mentions?
29HN people?
2023–2026first – last linked?
Links on Hacker News per year · peak 34 in 2026

Click to read Calif Newsletter, a Substack publication with thousands of subscribers.

Most-linked posts?

  1. Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)
    5 people · 5 mentions · first linked 2026-03-31
  2. Apple Internals: Swift in the Kernel – By Josh Maine
    4 people · 5 mentions · first linked 2026-06-21
  3. Mad Bugs: Vim vs. Emacs vs. Claude
    4 people · 4 mentions · first linked 2026-03-31
  4. Squidbleed (CVE-2026-47729)
    3 people · 3 mentions · first linked 2026-06-18
  5. First public macOS kernel memory corruption exploit on Apple M5
    3 people · 3 mentions · first linked 2026-05-14
  6. Privilege Escalation in AWS Elastic Kubernetes Service
    2 people · 2 mentions · first linked 2023-04-04
  7. An AI Audit of FreeBSD
    2 people · 2 mentions · first linked 2026-05-29

What Hacker News says?

  1. adamckay · 2026-05-23
    Calif.io have access to Mythos Preview which they've used to find a macOS kernel memory corruption exploit on Apple M5: https://blog.calif.io/p/first-public-kernel-memory-corruptio... It's probably the right approach to onboard a few independent security companies and task them with reviewing multiple OSS projects than it is to onboard each project individually.

    Comment linking /p/first-public-kernel-memory-corruption

    on “Project Glasswing: An Initial Update”
  2. pavel_lishin · 2026-10-23

    Submitted Today, we hacked what we'd set out to hack: the iPhone as a story · 1123 points

    HN discussion
  3. cryptbe · 2026-05-09
    Nice to randomly encounter our own work here. Check out our blog post for a fun walkthrough: https://blog.calif.io/p/cve-2026-7270-how-i-get-root-on-free... AI-generated working exploit, write-up and prompts: https://github.com/califio/publications/tree/main/MADBugs/fr...

    Comment linking /p/cve-2026-7270-how-i-get-root-on-freebsd

    on “FreeBSD: Local Privilege Escalation via Execve()”
  4. favadi · 2024-05-02

    Submitted Dissecting LockBit v3 Ransomware as a story · 36 points

    HN discussion
  5. cryptbe · 2026-05-26
    Oh hey, this is our work! We helped Anthropic analyze and report this bug. For the record, this bug has nothing to do with our recent MIE attack [1] [2], which exploited two different kernel bugs. Our bugs are not fixed yet. [1] https://blog.calif.io/p/first-public-kernel-memory-corruptio... [2] https://news.ycombinator.com/item?id=48139219

    Comment linking /p/first-public-kernel-memory-corruption

    on “CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude”
  6. Munksgaard · 2026-04-01

    Submitted Mad Bugs: Vim vs. Emacs vs. Claude as a story · 25 points

    HN discussion
  7. tptacek · 2026-04-01
    Calif (Thai Duong's firm) did a writeup on this, which should probably be the link here; it includes the prompts they used: https://blog.calif.io/p/mad-bugs-claude-wrote-a-full-freebsd A reminder: this bug was also found by Claude (specifically, by Nicholas Carlini at Anthropic).

    Comment linking /p/mad-bugs-claude-wrote-a-full-freebsd

    on “Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)”
  8. quadrige · 2026-05-14

    Submitted First public macOS kernel memory corruption exploit on Apple M5 as a story · 10 points

    HN discussion
  9. tln · 2026-04-01
    Or even better, the blog post. https://blog.calif.io/p/mad-bugs-claude-wrote-a-full-freebsd But I found the exploit writeup pretty interesting

    Comment linking /p/mad-bugs-claude-wrote-a-full-freebsd

    on “Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)”
  10. quyleanh · 2026-09-08

    Submitted WeWorm – First zero-click worm to spread through WeChat calls as a story · 9 points

    HN discussion
  11. mtlynch · 2026-05-03
    Worth noting that at this point, it's still somewhat trivial to find exploitable remote code execution bugs in Ladybird using AI tools.[0] The userbase of Ladybug users is so small that it's probably not worth the attackers' time, but keep in mind that it's an enormous step down in security from the mainstream browsers who are actively searching for bugs using the latest tools and paying bug bounties on external rep…

    Comment linking /p/mad-bugs-rce-in-ladybird

    on “This Month in Ladybird - April 2026”
  12. quyleanh · 2026-06-18

    Submitted Squidbleed (CVE-2026-47729) as a story · 4 points

    HN discussion
  13. kurtoid · 2026-03-31
    Claimed to have been discovered with/by Claude: https://blog.calif.io/p/mad-bugs-vim-vs-emacs-vs-claude

    Comment linking /p/mad-bugs-vim-vs-emacs-vs-claude

    on “1-day RCE vulnerability in vim”
  14. arkadiyt · 2026-04-17

    Submitted Even "cat readme.txt" is not safe as a story · 4 points

    HN discussion
  15. raquuk · 2026-07-01

    Submitted How to format a ciphertext as a story · 3 points

    HN discussion
  16. rbanffy · 2026-06-22

    Submitted Apple Internals: Swift in the Kernel – By Josh Maine as a story · 3 points

    HN discussion
  17. dnw · 2026-06-22

    Submitted (Reverse Engineering) Apple Internals: Swift in the Kernel as a story · 3 points

    HN discussion
  18. campuscodi · 2026-04-16

    Submitted Codex Hacked a Samsung TV as a story · 3 points

    HN discussion
  19. unacorner · 2026-03-31

    Submitted Mad Bugs: Vim vs. Emacs vs. Claude as a story · 3 points

    HN discussion
  20. WalterSobchak · 2026-03-03

    Submitted A Race Within a Race: Exploiting CVE-2025-38617 in Linux Packet Sockets as a story · 3 points

    HN discussion
  21. akyuu · 2026-06-27

    Submitted Apple Internals: Swift in the Kernel as a story · 2 points

    HN discussion
  22. chillax · 2026-06-19

    Submitted Squidbleed (CVE-2026-47729) Heartbleeds ancient cousin, hiding in Squid since 97 as a story · 2 points

    HN discussion
  23. matt_d · 2026-06-09

    Submitted OOBdump: Relocation Oriented Programming: Arbitrary code execution in objdump -g as a story · 2 points

    HN discussion
  24. wglb · 2026-04-01

    Submitted Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747) as a story · 2 points

    HN discussion
  25. dnqthao · 2026-04-01

    Submitted Mad Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell as a story · 2 points

    HN discussion
  26. wslh · 2026-03-31

    Submitted MAD (RCE) Bugs: Vim vs. Emacs vs. Claude as a story · 2 points

    HN discussion
  27. 882542F3884314B · 2026-07-31

    Submitted Privilege Escalation in AWS Elastic Kubernetes Service (2023) as a story · 1 points

    HN discussion
  28. akyuu · 2026-06-26

    Submitted Apple Internals: Swift in the Kernel as a story · 1 points

    HN discussion
  29. Tomte · 2026-06-22

    Submitted Squidbleed as a story · 1 points

    HN discussion
  30. haeseong · 2026-06-21

    Submitted Apple Internals: Swift in the Kernel as a story · 1 points

    HN discussion

Search all of HN for blog.calif.io

Linked by the same people?