EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Jul 24·5 min read
I got into YC by hacking it
TL;DR
A software engineer discovered a vulnerability in Y Combinator's Paxel scoring system, allowing score forgery. YC responded promptly, patched the issue, and invited him to Startup School.
✦ Why It Matters
Review your application's security measures to prevent similar vulnerabilities from being exploited.
Key Takeaways
- Investigate your applications for cryptographic weaknesses.
- Implement nonce validation to secure data submissions.
- Regularly audit third-party tools for security flaws.
- Stay informed about security best practices in decentralized apps.
How It Works
The Paxel tool's installation script downloaded a Ruby app that processed user coding data. It lacked proper cryptographic validation, allowing users to submit altered scores without detection.
The absence of a secure signature for the nonce meant that manipulated data could be accepted by the server.