Top all-time · #15247
Ethiack
Company blog · ethiack.com/newssecurityai
Ethiack is the company blog at ethiack.com, writing about security and ai. Since 2023, 5 different Hacker News readers have linked it 9 times. It is still writing: the last post was on 2026-10-25, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this Ethiack research write-up on a Rails ActiveStorage vulnerability (kindarails2shell). One commenter cites its preconditions recap to answer whether the issue affects default Rails apps.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Ethiack is the Adversarial Exposure Validation platform. Hackian continuously tests your attack surface, validates exploitability with proof-of-exploit, and eliminates 90% of scanner noise. See your exposure. Test continuously. Act on what matters.
What Hacker News says?
I think the answer is no - this would affect any Rails app with default settings that uses ActiveStorage. The "Preconditions" recap at the bottom here has all the appropriate caveats: https://ethiack.com/info-hub/research/kindarails2shell-how-a...
Comment linking /info-hub/research/kindarails2shell-how-a-matlab-file-reads-your-secrets-and-pops-a-shell-on-ruby-on-rails
on “Government Rails Site Hit Hours After CVE Patch”Submitted KindaRails2Shell – Critical RCE in Rails via Active Storage as a story · 3 points
HN discussionSubmitted Johann Rehberger: Agentic Problems and the Rise of Zombie AIs as a story · 2 points
HN discussionSubmitted Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE as a story · 1 points
HN discussionSubmitted Dangers of Homogeneity: 48% of European Telcos use Nginx, report finds as a story · 1 points
HN discussionSubmitted The State of Digital Exposure to Cybercrime for European Telecoms as a story · 1 points
HN discussionSubmitted Finding a CVSS 8.8 vulnerability on OpenClaw with AI as a story · 1 points
HN discussionSubmitted One-Click RCE on Clawd/Moltbot in 2 Hours with an AI Hacking Agent as a story · 1 points
HN discussionSubmitted Show HN: Ethiack – 24/7 offensive security testing with 99& accuracy as a story · 1 points
HN discussion