This House is Haunted: a decade-old RCE in the AION client

Comments (1)

_zeta · 2h ago

Exploring how AION’s old housing system, introduced over 10 years ago, left the client vulnerable to remote code execution through Lua scripting. Even though official servers removed the feature years ago, it’s still alive (and exploitable) in legacy versions. Write-up: https://appsec.space/posts/aion-housing-exploit/

Alexis Ohanian's Next Social Platform Has One Rule: Don't Act Like an Asshole (wired.com)

Show HN: Gemini flash image – Image Editing (geminiflashimage.live)

The rise of humanlike chatbots detracts from developing AI for the human good (techxplore.com)

Ovas We Love (zimmerit.moe)

Making MCP Tool Use Feel Natural with Context-Aware Tools (ragie.ai)

Onlook: The Cursor for Designers (onlook.com)

ChatGPT saved me from years of suicidal thoughts (old.reddit.com)

Show HN: Sip: Alternative to Git Clone (github.com)

How The Martian was written, with Andy Weir [video] (youtube.com)

White Rose (en.wikipedia.org)

Intel's Clearwater Forest E-Core Server Chip at Hot Chips 2025 (chipsandcheese.com)

France may need IMF bailout, warns finance minister (telegraph.co.uk)

OmniFocus 4.7 supports Planned Dates (omnigroup.com)

Big Tech's next major political battle may be brewing in your backyard (politico.com)

Biotech Dividend Arrived Early (bloomberg.com)

Armor Alley: Remastered – modern, browser-based version of a classic Mac/PC game (armor-alley.net)

Rudy Was a Fluke (ninjasandrobots.com)

Show HN: I built a tool to create fast, beautiful QR code menus for restaurants (getmorel.com)

A 'Third Way' Between Buying or Renting? Swiss Co-Ops Say They've Found It (nytimes.com)

Show HN: Chrome Extension to Copy, Paste & Autofill Web Forms (multifield-copycat.com)

The new Framework Laptop 16 with Nvidia (frame.work)

Haboob (en.wikipedia.org)

Maybe our imagination is limited by what we know (offpeaklog.bearblog.dev)

I built a free fast-paced match-3 game I think you'll like (sqrz.app)

Judge Dismisses Trump Administration Suit Against Federal Bench in Maryland (nytimes.com)

Why do people keep writing about the imaginary compound Cr2Gr2Te6? (righto.com)

Linearizability testing S2 with deterministic simulation (s2.dev)

Survivor: Remaking A Commodore 64 Game In HTML (2012) (schillmania.com)

Engineering Fantasy into Reality (robohub.org)

From Chrome renderer code exec to kernel with MSG_OOB (googleprojectzero.blogspot.com)

Patient Lisp Hacker Seeks Same for Long Walks Through IPL-V Code

Haikou Gaoxingli Insun Cinema / One Plus Partnership (archdaily.com)

JUNO completes liquid filling and begins taking data (phys.org)

Show HN: Git Well Soon – A beginner's guide to Git with a medical twist (github.com)

AI Lead Generation (dealmayker.com)

Framework selling first GPU-upgradable laptop, with Nvidia's blessing (theverge.com)

15-Fold increase in solar thermoelectric generator performance (nature.com)

Ask HN: Has anyone else used online communities that are archetypically "savvy"?

Make and SQL: An old new way for Data Science workloads (vasvir.wordpress.com)

Why America Still Needs Punk Rock (currentaffairs.org)

More on Seed Phrase Words (johndcook.com)

Apple Event on September 9: 'Awe Dropping' (macrumors.com)

Novelty Is the Secret Ingredient to Product Success, Thriving Teams,Happiness (spin.atomicobject.com)

Show HN: Enterprise MCP Bridge – Solving the MCP Chaos for IT (blog.inxm.ai)

Principles of great DX for data infrastructure (clickhouse.com)

Delta Lake: Transform Pandas Prototypes into Production (codecut.ai)

Google says China-linked cyber operations targeted Southeast Asia diplomats (cnn.com)

Intel and the Foundry State of Play (d2d.substack.com)

This House is Haunted: a decade-old RCE in the AION client

Comments (1)