Top all-time · #8388
Theori
Company blog · theori.io/blogsecurityai
Theori is the company blog at theori.io, writing about security and ai. Since 2017, 9 different Hacker News readers have linked it 13 times, most often “The brain of a 0day finding hacking bot”. It is still writing: the last post was on 2026-04-16, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link Theori's security research posts on sandbox escapes, a Clubhouse app analysis, AI-driven vulnerability discovery, and a V8 sandbox escape deep dive as examples and sources.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Empowering Innovation with Security
Most-linked posts?
- The brain of a 0day finding hacking bot3 people · 3 mentions · first linked 2025-08-09
What Hacker News says?
Obligatory unrolled thread: https://threadreaderapp.com/thread/1361866446427488256.html Link to the original (Korean) article: https://theori.io/research/korean/analyzing-clubhouse/ The real tl;dr: Clubhouse made some weird security decisions and seems like you shouldn't trust them with state secrets. Also, weird traffic going to China.
Comment linking /research/korean/analyzing-clubhouse/
on “A TL;DR after analyzing Clubhouse app”Submitted Autonomous code analyzer beats all human teams at OSS zero-day competition as a story · 8 points
HN discussionThe first example I looked up needed a UAF in something that clearly should have been ported from Java to any memory safe language, instead C++ had to be used: https://theori.io/research/escaping-chrome-sandbox/
Comment linking /research/escaping-chrome-sandbox/
on “Long Live Sandboxing”Submitted Lessons learned building an AI hacker as a story · 4 points
HN discussionThis is fair, and we will gladly share the extraordinary evidence as soon as we can. If you're curious, we have already released the full traces of finding a sqlite3 0day with an early version of Xint Code (submitted to the AIxCC competition and now open sourced): https://theori.io/blog/exploring-traces-63950
Comment linking /blog/exploring-traces-63950
on “Autonomous code analyzer beats all human teams at OSS zero-day competition”Submitted The brain of a 0day finding hacking bot as a story · 3 points
HN discussionYou mean this one? https://theori.io/blog/a-deep-dive-into-v8-sandbox-escape-te... I dunno, one sandbox escape in nine years is a pretty solid track record IMO. Any reason WASM is more dangerous than regular JavaScript?
Comment linking /blog/a-deep-dive-into-v8-sandbox-escape-technique-used-in-in-the-wild-exploit
on “Pyodide 314.0: Python packages can now publish WebAssembly wheels to PyPI”Submitted What we learned building AI hacker agents as a story · 2 points
HN discussionSubmitted AIxCC and RoboDuck as a story · 2 points
HN discussionSubmitted Exploring Traces: Agent trajectory walkthroughs from interesting examples as a story · 2 points
HN discussionSubmitted Receiving NRSC-5 as a story · 2 points
HN discussionSubmitted Building LLM Agents for Hacking as a story · 1 points
HN discussionSubmitted Public Response to Everspin's Warning Letter as a story · 1 points
HN discussion