Top all-time · #8301
MrBruh's Epic Blog
Personal blog · mrbruh.comsecurityprogramming
MrBruh's Epic Blog is a personal blog at mrbruh.com about security and programming. Since 2023, 9 different Hacker News readers have linked it 23 times, most often “The RCE that AMD wouldn't fix”. It is still writing: the last post was on 2026-10-22, and you can follow it by feed.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN commenters link this blog's security write-ups on vulnerabilities such as a Samsung TV root shell, localhost tracking, and the AMD updater bug bounty dispute. They are cited as primary sources.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- The RCE that AMD wouldn't fix4 people · 4 mentions · first linked 2026-06-11
- I pwned half of America's fast food chains simultaneously3 people · 3 mentions · first linked 2024-01-09
- The Up Phone Is a Fucking Disaster2 people · 2 mentions · first linked 2023-12-26
- One-Click RCE in Asus's Preinstalled Driver Software2 people · 2 mentions · first linked 2025-05-11
What Hacker News says?
https://mrbruh.com/asusrouter/ If you avoided downloading the app for whatever reason, you can be proud because it just saved you from potentially getting hacked. Nice.
Comment linking /asusrouter/
on “Root shell on Samsung TV”Submitted I pwned half of America's fast food chains simultaneously as a story · 1081 points
HN discussionThe technical details roughly boil down to "your browser lets internet sites talk to local services"; in this case if they cooperate they can identify each other, but cf. https://mrbruh.com/asusdriverhub/ In practical terms this is a privacy leak a couple bits more informative but slightly less robust than "these requests are coming from the same IP address."
Comment linking /asusdriverhub/
on “"Localhost tracking" explained. It could cost Meta €32B”Submitted One-Click RCE in Asus's Preinstalled Driver Software as a story · 523 points
HN discussionThis reminds me of "How I pwned half of America’s fast food chains, simultaneously." https://mrbruh.com/chattr/ HN: https://news.ycombinator.com/item?id=38933999
Comment linking /chattr/
on “900 Sites, 125M accounts, 1 Vulnerability”Submitted ASUSpicious Flaw – Users' Information Exposed Since 2022 as a story · 73 points
HN discussionIt’s definitely games that are the problem. There’s no way that websites are still embedding third party code that is just slopped together shit and wildly vulnerable [0]. Or that domain registrars, one of the core points of trust of the internet would lie about their security practices and be sued by the FTC almost a decade after it[1]. Or that an endpoint management system would take down multiple airports due to…
Comment linking /chattr/
on “Remote Code Execution in Marvel Rivals Game”Submitted How I pwned a major New Zealand service provider as a story · 55 points
HN discussionActual write-up rather than overwrought YouTube drama: https://mrbruh.com/amd2/ A non-default-installation set of AMD tools (Ryzen Master and probably others) had an auto-updater which used HTTP instead of HTTPS. It's clear this is a feature they'd basically forgotten about; it even pointed to an ATI domain. A third-party bug bounty company rejected it because MITM was out of scope. AMD are incompetent at making sof…
Comment linking /amd2/
on “AMD Gaslights Security Researcher, Changes Rules Retroactively [video]”Submitted The RCE that AMD wouldn't fix as a story · 31 points
HN discussionThe original post [1] now includes an update: UPDATE! Within a day of this blowing up on Hacker News, AMD reached back out to me and said they would be looking into the matter after all. [1] https://mrbruh.com/amd2/
Comment linking /amd2/
on “AMD Gaslights Security Researcher, Changes Rules Retroactively [video]”Submitted The RCE that AMD won't fix as a story · 4 points
HN discussionPost from researcher: https://mrbruh.com/amd2/
Comment linking /amd2/
on “AMD Stiffs Researcher $10k Bug Bounty”Submitted 1.4 Billion user records exposed by insecure Firebase instances in Android apps as a story · 4 points
HN discussionSubmitted Unauthenticated RCE in Motorola's MR2600 Router as a story · 3 points
HN discussionSubmitted MSI's full mailbox is leaving critical vulnerabilities unpatched as a story · 3 points
HN discussionSubmitted Finding a RCE in my old TP-Link router as a story · 3 points
HN discussionSubmitted The Up Phone Is a Fucking Disaster as a story · 3 points
HN discussionSubmitted MSI Center – How to gain SYSTEM privileges in seconds as a story · 2 points
HN discussionSubmitted Remote Code Execution Vulnerability in Fooocus as a story · 2 points
HN discussionSubmitted 1.4 Billion user records exposed by insecure Firebase instances in mobile apps as a story · 1 points
HN discussionSubmitted The Up Phone Is a Disaster as a story · 1 points
HN discussionSubmitted Dismantling a Crappy Malware Operation as a story · 1 points
HN discussion