Yes? ShellExecute opens a url if you pass in a url, opens a file if you pass in a path, and runs an .exe if that file is an .exe. Windows also supports SMB paths, so combine that together and you have a RCE
But is it running ShellExecute on URIs?
Readit Newseugenekolo commented on Windows Notepad App Remote Code Execution Vulnerability cve.org/CVERecord?id=CVE-... · Posted by u/riffraff
eugenekolo commented on Cellebrite to Acquire Corellium corellium.com/blog/celleb... · Posted by u/Fnoord
June 5, 2025
eugenekolo commented on John Carmack on mutable variables twitter.com/id_aa_carmack... · Posted by u/azhenley
You're using really generic terms which I have to think is mostly because you're talking about it in the abstract. In most scenarios I find there are obvious non-generic names I can use for each step of a calculation.
I disagree you'd find "obvious" non-generic names easily. After all, "naming" is one of the hardest things in computer science.
There are certain things that Kagi gets very right. Having the ability to (de)prioritize websites, or to right-click to save images, or to automatically rewrite website URLs…
Still, I think paying for search remains a taboo and this is unlikely to change in the near future. So Kagi seems poised to remain a service for the tech-literate — which is precisely the kind of audience that already knows how to use ad-blocking, avoid Google’s AI snippets and so forth.
I think paying for search is becoming more acceptable when you look at the amount of people paying $20/mo for their AI subs, which to many people are just search engines.
There will always be users who refuse (not going to convince my parents ever), but for many power users, or semi-power users, it's becoming more acceptable to just pay the $20/mo and get a better product.
Meta question, but why do these AI apps always have pink-to-blue gradients on buttons? I see it all over the place!
So you can detect if it's AI slop quickly.. but they might be catching on to this.
eugenekolo commented on Chrome's SSL Bypass Cheatcode thomascountz.com/2025/07/... · Posted by u/thomascountz
It's possible they changed it from "thisisunsafe" to the b64 version to avoid automatic scanners finding "unsafe" keyword usage.
eugenekolo commented on How to live on $432 a month in America shagbark.substack.com/p/h... · Posted by u/cactusplant7374
Confused by his portrayal of Massena, NY. I don't live there and have never driven through, but looking on Google Maps it doesn't seem that bad or depressing as the author (and I guess commentators) make it out to be.
It has a Walmart, Home Depot, BJs (similar to Costco), a main street with several businesses. A walkable grid with sidewalks in that main town area....
Feels like reaching that this place is so desolate and depressing.
eugenekolo commented on Gemini 2.5 Pro vs. Claude 3.7 Sonnet: Coding Comparison composio.dev/blog/gemini-... · Posted by u/mraniki
It's definitely an attempt to compare models, and Gemini clearly won in the tests. But, I don't think the tests are particularly good or showcasing. It's generally an easy problem to ask AI to give you greenfields JS code for common tasks, and Leetcode's been done 1000 times on Github and stackoverflow, so the solutions are all right there.
I'd like to see tests that are more complicated for AI things like refactoring an existing codebase, writing a program to auto play God of War for you, improving the response time of a keyboard driver and so on.
Not gonna lie, I expected Apple to just kind of roll over and take the blow on this one. Interesting.
They heavily compete on "privacy" and "security", so I wouldn't expect them to. Additionally, once you start rolling with one government, every one wants you to do something for them while offering you no additional money for the work and weakening of your project.
I use PyPy regularly on an app of mine, and very often when I need to do some compute heavy load. Typically over 5x faster than CPython. It makes some stuff that takes impossibly long with CPython (nobody wants to wait 5 minutes...), to returning a response in a few seconds.