8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification

Hacker News Highlights · Aug 20, 2025 · 12m

This is a recap of the top 10 posts on Hacker News on Aug 20, 2025.

(00:00) - Intro

(00:21) - How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos

(01:40) - AGENTS.md – Open format for guiding coding agents

(02:58) - Copilot broke audit logs, but Microsoft won't tell customers

(04:15) - How to Draw a Space Invader

(05:13) - D2 (text to diagram tool) now supports ASCII renders

(06:09) - Candle Flame Oscillations as a Clock

(07:12) - Custom telescope mount using harmonic drives and ESP32

(08:29) - Without the futex, it's futile

(09:46) - Emacs as your video-trimming…