Hacker News new | ask | show | jobs
by Thorrez 78 days ago
For CVE-2026-0755, that's a vulnerability in gemini-mcp-tool. gemini-mcp-tool's Github repo says "This is an unofficial, third-party tool and is not affiliated with, endorsed, or sponsored by Google." but this list shows the Google logo next to the vulnerability.

Also, it's not entirely obvious to me that the vulnerability was introduced by vibe coding.

https://github.com/jamubc/gemini-mcp-tool

Disclosure: I work at Google, but not on anything related to this.

2 comments

The first link claims the 6-hour outage wiped 99% of order volume. I went to the "source" and found an (AI generated?) ad by a company that wants to sell a product, where I cannot find the 99% number.

This whole website and everything around it are almost ironic.

This site, especially if you look at all the previous posts from this domain, is almost assuredly AI generated.

One of the "fun" hallmarks of many of these LLM assisted websites is that they seem to completely disregard basic accessibility (especially Web Content Accessibility Guidelines [1]). That small dark gray subtext on a black background is just horrific.

[1] - https://webaim.org/resources/contrastchecker

Yea, I was about to comment the same thing. I have noticed a lot of people weaponizing people's hatred of AI/slop and using rage baiting to drive views. No doubt someone would have looked at that entry of "Amazon lost 6M orders due to slop!" at face value and come away thinking it was true.
>Also, it's not entirely obvious to me that the vulnerability was introduced by vibe coding.

IDK why people act as if vibe coding invented software bugs that lead to vulnerabilities, as if those weren't already a thing by human programmers.

The same reason some use crime committed by illegal immigrants to push action, while ignoring the fact that citizens are more likely percentage-wise to commit those same crimes. It's confirmation bias at the least, and intellectual dishonesty at the worst, but either way, they want their worldview to be validated.
I know this is extremely off topic, but illegal immigrants are far more likely to commit crimes than citizens, not that this has anything to do with software bugs...
You got that exactly the wrong way round.

Here's one set of numbers from the CATO institute: https://www.cato.org/policy-analysis/illegal-immigrant-murde...

The only way your statement holds up is if you treat the act of existing while undocumented as a crime for this comparison, in which case sure - it's a tautology.

First of all, the link you provided mixes illegal migration with legal migration, a classic trick trying to downplay the effects of illegal immigration.

Second, it compares murder rates only, in the state of Texas, a state well known to have extreme amounts of legal guns. You can hardly generalise from this data.

Here is some interesting data. https://en.wikipedia.org/wiki/Crime_in_Denmark

FWIW I don’t live in the USA.

> First of all, the link you provided mixes illegal migration with legal migration

No it doesn't. I chose that article specifically because it provides figures for native-born citizens, legal immigrants and illegal immigrants:

> Over the 10-year period from 2013 to 2022, the homicide conviction rate in Texas for illegal immigrants was 2.2 per 100,000, compared to 3.0 per 100,000 for native-born Americans. The homicide conviction rate for legal immigrants in Texas was 1.2 per 100,000.

I accept that the figures in other countries may not work out the same way as figures in the USA.

I probably won't comment further, since as you said this is very off-topic (I only meant to draw out an analogy as to why discussions about AI tend to be ideologically skewed), but every statistic I've seen shows far lower crime rates among illegal immigrants versus citizens (aside from the statutory crime of being in the country illegally).