All issues

Search results

I can't lose my gh streak

Status: Open.

#177 In vmihalis/hacker-bob;

· vmihalis opened on Jul 13, 2026

Flaky CI: offensive-oob-collector poll IDEMPOTENT re-poll (timing-sensitive idempotency key)

Status: Open.

#174 In vmihalis/hacker-bob;

· vmihalis opened on Jun 27, 2026

IDOR producer: durable close for laundering-class residual (bind finding subject to row.target in claims gate)

Status: Open.

#173 In vmihalis/hacker-bob;

· vmihalis opened on Jun 27, 2026

Mass-read v2 HIGH: replace email-overlap with canary-injection (escape the synthetic-victim invariant)

Status: Open.

#161 In vmihalis/hacker-bob;

· vmihalis opened on Jun 24, 2026

Mass-read producer v2: second-victim arm for HIGH (cross-tenant BFLA) + close v1 residuals

Status: Open.

#157 In vmihalis/hacker-bob;

· vmihalis opened on Jun 23, 2026

npm pack: exclude hacker-bob-social.png (dual-copy ~1.8 MB) from published tarball

Status: Open.

#154 In vmihalis/hacker-bob;

· coderabbitai opened on Jun 21, 2026

de-flake: oobMint nonce can spuriously trip SECRET_SHAPE_RES / sensitiveShapesPresent PII screen

Status: Open.

#153 In vmihalis/hacker-bob;

· coderabbitai opened on Jun 21, 2026

Trim docs/hacker-bob-social.png (921 KB) from the npm package to reclaim pack-size headroom

Status: Open.

#152 In vmihalis/hacker-bob;

· vmihalis opened on Jun 21, 2026

Offensive sandbox: close the BEDROCK same-UID in-process signing-key forge boundary (UID/container/network separation)

Status: Open.

#131 In vmihalis/hacker-bob;

· vmihalis opened on Jun 19, 2026

Generator: reconsider auto-approving global_preapproval:false live/signing tools in permissions.allow

Status: Open.

#122 In vmihalis/hacker-bob;

· vmihalis opened on Jun 17, 2026

Harden run_id path-join in claim-freeze projections (read-oracle): source validators + live repo_command_run twin

securitySecurity posture or vulnerability-reporting flowSecurity posture or vulnerability-reporting flow

Status: Open.

#114 In vmihalis/hacker-bob;

· vmihalis opened on Jun 16, 2026

Write-guard hook coverage: protect claim ledgers + bash-redirect-grammar gaps + resync Kimi hook to main

Status: Open.

#113 In vmihalis/hacker-bob;

· vmihalis opened on Jun 15, 2026