"This statement stood out to me.> I have a similar thought about "there's no reason for software to be slow" BTW; in many cases, if you use AI to speed up some flow, you will add a bunch of messy code that will be overfit for the use case you tested on and will neither generalize, perf-wise, for all the use cases you should care about, nor will be maintainable upon future changes.LLMs have hardened hundreds of apps where I work.Maybe it's a language-specific thing. Most of the time, in Java, LLMs take into consideration tradeoffs (especially if they are part of the initial prompt) and actively explains them. It generally won't make messy workarounds, without a lot of extra prompting forcing it to do so.Ofc, if you have:- Functional tests - you'll be able to see it in the execution times of specific APIs- Stress testing - performance profiling is the most important output artifact"

"More than ambitious, I can now build things I had no time for but had the idea and architecture in place since long. A cool side project for me recently has been to allow reading more than books on my Kobo reader. I built an SDK and apps that allows e-ink apps with sandboxing and permissions model, auto-updates, shared capabilities etc. to be built for Kobo https://github.com/BandarLabs/Cobalt"

"We should be more diverse with the software we build.Any prompt jockey can make a faster ripgrep. The spec is "faster ripgrep".What is the one thing that only you can specify, where your competitive advantage is maximized? Find that thing and pursue it with all your energy!"

"Btw I made the language, AMA. repo: https://github.com/aardappel/goose"

"The very first point under your tutorial is factually incorrect. var words: u8[][>..] = []; for i in 5 { words.push(str("word", i)); } In C++ that is a vector<string>: one heap allocation for the vector, one per string, a pointer and a capacity per element, and a walk over all of them when it goes out of scope. The example you've provided uses strings that are eligible for small string optimization, which avoids per-string allocation. All mainstream STL implementations perform this optimization. You can read about several implementations here: https://devblogs.microsoft.com/oldnewthing/20230803-00/?p=10..."

"I'm curious, for someone more familiar with Goose: how do you represent an arbitrary number of dynamically sized values? If you have a fixed number of stacks, it seems like only a fixed number of values can change size at any given time.For instance, how would you represent a hash table where the values are strings and at random, the program inserts or deletes a random string?This doesn't seem like something you could easily represent. The only way I can think of is to keep a stack that holds all of your strings, and you periodically compact it.Edit: Maybe you could also have a separate stack for strings of various sizes. One each for strings less than 8, 16, ... bytes. But at that point you're basically implementing your own malloc by hand.Edit: Fwiw I do think Goose is very cool! I've had to hand-roll a lot of similar stuff in Rust before to speed up memory management"

"I liked this article. I appreciate that it didn't try to say it is or isn't AI.To me, the entertainment industry suffers from a lot of the same problems in most other industries that chase "efficiency", in terms of resources used and profit made. Economies and industries and labor are interdependent and more "alive" than balance sheets and bank accounts.For the film industry, when you start moving things away from LA to "save money", it has knock on effects that happen over long periods of time. Multiple Quarterly Earnings Reports long, if you will. Local businesses that depend on the film industry close due to less work, so then there is less expertise available. Less expertise means it can command high prices. Suddenly it's too expensive to film in LA altogether. So the rest of the jobs leave too.This pattern seems super common, not just in the film industry.It is a narrative that interweaves with AI, too. AI is supposedly an efficiency boom. In the macroeconomy, who is the "efficiency" we are chasing for, who benefits? Who is getting the money that was "saved"? Regular people do not have more more money or time. The "efficiency" is for people who are already very rich, to get richer. Is that worth the price we're paying? I know my answer. The article gets close to it by mentioning the consolidation in Hollywood, but I do not see how we fix this without enforcing our antitrust laws. It is embarrassing what we let rich people do in the name of stock price go up."

"The quality of Hollywood movies has gone down substantially.I can barely watch anything on Netflix due to issues like this:"Matt Damon Says Netflix Wants Movies to Restate the ‘Plot Three or Four Times in the Dialogue’ Because Viewers are on ‘Their Phones While They’re Watching’"https://variety.com/2026/film/news/matt-damon-netflix-movies..."

"Before AI showed up the UN released a report on the Attention Economy. It said Supply of content had vastly outstripped Demand. It decoupled because entertainment/media was being used to push other products. The telcos, amazon, google/fb and many others were all subsidizing content to push some other product. Exploding info chasing finite non growing eyeballs and time."

"This is an example of why I'm a little stumped about why people are excited about Jev-style decision models. For any application at scale it'd be way more accurate to have a dedicated classifier using the right architecture (neural net, bayesian, etc.) LLMs drive the cost of making those models down to near zero.Just use the LLM to make a thing that's actually good at what you need it to do."

"> I compared to a 10-year old CNN and to my surprise found that this was superior.I'm surprised he's surprised.> A small, old, specialised network using an outdated architecture recognises skin lesions far better than two frontier LLMs.Yes of course. A 30m params Katago network with one playout is superhuman in playing go, while frontier LLMs have over 10,000 times more parameters and aren't any good at playing go. They're good at other things (such as helping you create a network that's good at playing go)."

"> I used Inception v3 pretrained on everyday photographs and then fine-tuned all layers on 68,011 dermoscopic and clinical images from the ISIC Archive on a single H100 GPU.>These 200 test lesions, and every other photograph of the same lesion or patient, were removed from its data (including the validation set) before training, so it had never seen them, and they were not used to choose the model or set its threshold.This is just benchmaxxing. A benchmaxxed model will always beat an unbenchmaxxed model, but it will be brittle.You can always beat a specific dataset with a small model by finetuning on a train/test split. But it doesn't generalize well to 'wild' images, because they are out-of-domain."

"My daughter receives books through this program and I was curious how it was sustained at a $2.5/book wholesale cost.Interestingly, the coordinating body that selects books, facilitates distribution, and negotiates wholesale pricing is the Dolly Parton Imagination Library, but per-book funding is actually entirely through local charities and so on. This means that where charities are unable to act as partners, children will not receive books, but it also means that the program can operate by growing and shrinking as local support (including from state and local government grants) comes online and goes offline while keeping the overhead for local partners low.Dolly Parton came up with the initial local structure for her region in Tennessee and David Dotson of Dollywood scaled the operation using this decentralized model. Very impressive structure that makes this sustainable.Here’s the interview where he talks about it: https://www.endbookdeserts.com/dolly-parton-imagination-libr..."

"In Tennessee hospitals a nurse, staff member, or authorized volunteer will swing by your room in the mother-baby unit and sign you up. Then you start receiving free books by mail each month until age 5. An amazing program by an amazing person!"

"My 5 year old just got his last imagination library book. It showed up right after Dolly passed away.There was a letter from Dolly to him that ended “I will always love you”. Made my wife tear up."

"> According to the petition, two people asked [Meta AI] to pick a number between 1 and 25. They gave no instructions and made no reference to the election. In one attempt, the AI answered 13. In the other, it answered 22. Those are the party ballot numbers of Lula and Flávio Bolsonaro, respectively. The groups question the coincidence.My confidence in the validity of their claims tanked right about here.I'm all for regulating transparency into social media algorithms. Meta most certainly is compromised by foreign actors. But can we choose less stupid hills to die on than numerology and GIFs? Headline is not remotely supported by the evidence."

"It's the same here. AfD content gets pushed on YT. No matter how often I ignore channels.Big tech is so rigged (intensional or not), the question if it is socially net negative has become rhetorical."

"My impression is, some Bolsonaro favoritism is real, but is it Meta’s fault or a generally-neutral algorithm (e.g. ranking based on upvotes) favoring Bolsonaro because of his supporters (or bots)? If it’s the latter, what should Facebook do?“End algorithms”? Even a firehouse of newest comment (or most upvoted as suggested) would benefit Bolsonaro if his online support outnumbers opposition. Ban both candidates from the platform, or make every search show them both? That will probably not work; confuse Brazilian citizens why their politicians are being censored (which will influence them because their politician is being attacked by Lula’s court, or even Facebook acknowledges their opponent politician is dangerous); and not end the lawsuits if they continue bringing “evidence” like Meta AI randomly generating Bolsonaro-related numbers.The most egregious evidence against Meta are suspending Lula’s official accounts. This can also be attributed to a neutral system processing opponents’ mass reports, but has an obvious solution: give every official account immunity from suspension except by the highest level admins, because they’re supposed to only be suspected according to guidelines, and a $trillion company has enough resources to closely monitor high-level official accounts."

"Some agencies have a different tactic: go really slowly.I sent a public records request to my local school district on March 9th 2026.They responded on 19th March 2026 saying they'd respond on in late April.Since then, every month they've sent an email with some small portion of the records, with a PDF letter saying they'll send a follow up a month later.I've received 8 of those responses so far, and there's no indication when, if ever, I will have received all the records responsive to my request."

"> the Eugene Police Department claimed searching for records and processing the request would take at least 44,816 hours of staff time and cost approximately $2,484,599.04.44k hours is ~21 years. Beyond absurd"

"Worth pointing out that Germany is having an ongoing battle over our FOIA equivalent, in which a host of people who were bitten badly by it (most notably Jens Spahn) are proposing to allow exactly this kind of prohibitive fee, as well as reducing access to natural persons (so the individual reporter, not the newspaper) and only to people who have a reasonable interest, etc.Sure, the current form of the law has some issues on the receiving end, but boy is this an obvious move to cover their own corruption better..."

"Is there an uncensored intetnet, because i dont think there is. if there is any, it can be turned off because its being routed on the censored net wrapped in encryption.that being said, that makes me pretty interested in this talk. outside of hacking sattelites and such things and/or infra i really dont see any opportunities to break free of the will of corporations as they can simply pay infra providers to do their bidding.I dont think software can solve all problems because internet exists essentially as informaiton transported over infrastructure. the software surely helps enable that but its a helper not the actual network.happy to learn otherwise from anyone here ofc :-)"

"Most people prefer censored internet as long as it aligns with their political leaning. Maybe that wasn't the case 15 years ago but it's pretty much true nowadays. I myself consider this as a fact."

"FOSDEM is a great conference!If you ever get the chance to go, please go! Especially if you're an American I recommend it. It is so different than any other conference I've ever been to in the US.It doesn't have a lot of sales pitches, the technical content is top notch, and overall it is really fun and interesting to see what everybody is talking about and working on."

"I see some irony here. For a period of time, Google chose not to include JPEG XL in Chrome because vulnerabilities in the library could compromise the software - a legitimate concern. Yet, Google is the author of the Brotli data compression format a decade before the JPEG XL drama, and was happy to use it in Chrome and encourage others to use the library, despite the fact that it also increases the attack surface."

"> reported it as unauthenticated remote code execution that works in both directions> but it wasn't recognized as a security issue at the time and no release shipped with the fix until nowI'm always getting my dangerous RCE bugs mixed up with my harmless RCE bugs.I'm curious how this was reported and fixed back in Feb but nobody recognized the importance. A case of AI automation and nobody at the wheel?"

"To me, the surprising part is how many of these implement brotli compression of request (not just response) bodies, given how obscure a feature that is.In any case all this sensationalism is starting to get annoying. Patch your stuff and move on.Edit: actually, between all the sensationalism, its hard to tell from the article how many of these actually support brotli compressed request bodies in common configs vs some other use of brotli (which is bad but nowhere near as critical)"

"So many entry-level explanations of quantum mechanics start with classical physics, waves, particles, the double-slit experiment, etc. and then jump straight to infinite-dimensional Hilbert spaces. In my opinion, there's way too much conceptual baggage that comes with these concepts [0].As a non-physicist, QM only clicked for me when I learned the linear algebra of one- and two-qubit systems and observables on those systems [1]. The math is accessible at a pre-calculus level, and the most "counter-intuitive" aspects of QM (interference, the uncertainty principle, entanglement) make perfect sense in this framework. I think it's the best starting point for understanding what QM really says.[0] That's not to say they aren't important historically or for a complete understanding of QM. I'm talking about conceptual understanding for someone, especially an amateur, encountering QM for the first time.[1] Chapter 2 of Nielsen and Chuang is what did it for me. It's heavygoing if you've never seen linear algebra before, but I don't know of a clearer explanation of the postulates of quantum mechanics."

"Of possible interestBasic Concepts Of Quantum Mechanics by L. V. Tarasovhttps://archive.org/details/tarasov-basic-concepts-of-quantu...The dialogues of the author engages with various personas and the reader that are interspersed as Prelude and Interludes are really enlightening.For example:Classical Physicist: Can one seriously speak about an object without having an idea of what it looks like? Isn’t it strange that we study, for example, the behaviour of an electron in a crystal while we don’ t even know what an electron actually is?Author: I don’t agree that we don’t even know what an electron is. I have just indicated a number of precisely determined characteristics and properties of an electron. More detailed properties of microparticles in general and electrons in particular were considered in the preceding sections of the book (and will be considered in the following sections). In fact, we know quite a lot about the electron and know, in particular, about its behaviour in a crystal. This is evidenced by the large number of semiconducting devices fabricated and used by us in practice. As you will see, the absence of a “physically intuitive” model of the electron has in no way turned out to be a serious obstacle. We may even go a step further and state that an understanding of natural phenomena in which Planck’s constant plays an important role is possible only through a significant rejection of a graphic description. By the way, this idea was given by Heisenberg, in whose works much attention was given to questions of the use of physically intuitive methods."

"Somewhat related: a book that really helped me is Picturing Quantum Processes by Bob Coecke. It's a visual representation of quantum processes, which really helped me understand the concept"

"Thanks, but no thanks?I use GrapheneOS, but if you as a bank want to gate access to my money via some kind of technology, you better be including it as part of the account.For example, HSBC continues to let me manage my bank account via the web browser, and continues to offer a battery powered hardware token as the means of authentication.I let you hold my money, for whatever reason. Why do you expect me to be your distributed infrastructure provider? I am not going to let you require that I run your proprietary malware in order to access my own money.The idea where you are effectively _expected_ to constantly provide free compute for companies to run their complete garbage on hardware _you own_ just for the privilege of giving them money is one of the most absurd trend in recent times.I'd say that JS webapps are the same but at least there you run things on your terms in a sandbox that you can inspect and look at the requests, and there's no effective enclave carved out of your hardware (except for EME but that's another topic for another day and I'd be complaining if banks started to use it too)."

"In my experience with UK banks & financial institutions, GrapheneOS support can be roughly divided into four types.None. Explicitly banned. And, though I feel bad for saying it, I can't blame them. If some idiot roots their phone and downloads malware, the bank may be responsible for refunding them. I can see why they don't want that headache.Some. App works, but some functionality is unavailable. I've got a credit card app which works, but refuses to set up virtual cards or use "remember me". That's good enough for my use. Similarly, I had a merchant account which let me see my balance, but I couldn't use my phone as a credit card reader.Works, but only in main profile. I'd rather keep financial things in a locked profile. But lots of banks disallow that.Full. Everything works (although you may need to toggle some exploit protection off).Some banks are reasonably good at letting you pass on technical queries to their developers - mostly the smaller ones. The nice thing about the UK banking sector is that it is trivial to move banks. So I switched accounts to providers which worked with my phone and let the old ones know why I was moving."

"By GrapheneOS, they mean "official builds of GrapheneOS". If you build GrapheneOS yourself, you won't be allowed to use these banking apps due to remote attestation."

"Starting in 2027, a silent update, nonconsensually pushed by Google, will block every Android app whose developer hasn't registered with Google, signed their contract, paid up, and handed over government ID.Every app and every device, worldwide, with no opt-out.This includes apps shared between friends, distributed through F-Droid, built by hobbyists for personal use.Independent developers, church and community groups, and hobbyists alike will all be frozen out of being able to develop and distribute their software.Registration requires:- Paying a fee to Google - Agreeing to Google's Terms and Conditions - Surrendering your government-issued identification - Providing evidence of your private signing key - Listing all current and all future application identifiersIf a developer does not comply, their apps get silently blocked on every Android device worldwide."

"This sort of breathless outrage rhetoric would be a lot easier to take seriously if it spent even a minute acknowledging the very real risk to users that this is meant to mitigate: tech support scams where people are walked through installing an app that takes over their phone and steals their money, private data, and identity.You can disagree with the tradeoff, but if you don't acknowledge it you're just doing propaganda.Personally, I think the 24h cooldown is an excellent compromise to allow user freedom while slowing down attackers sufficiently to mitigate the harm.Tech is cool, but it's not an end in itself. Serving people should be. And if people are getting hurt, it's not working well, even if those people are not the ones that read Hacker News."

"IMO a more precise framing is that what is being removed is the ability of anonymous developers to have wide distribution on Android devices. That is, after these changes, you (as an app developer) can either:- be a registered developer, and target all Android users (Google Play Store, F-Droid, distributing .apk files, etc), or- remain anonymous, and target only a subset of Android users (all "power users" who do the one-time 24-hour cooldown, or a small number of users if you use the student/hobbyist path, and of course anyone can install their own apps on their own device with adb).This is definitely an unfortunate step backwards from Android's prior openness, but is still more open than iOS (my comparison from a previous discussion: https://news.ycombinator.com/item?id=47939361), and is basically Google being forced by the governments of certain countries (Brazil, Indonesia, Singapore, Thailand) where malicious-app phone scams have led to a lot of people losing their savings (https://news.ycombinator.com/item?id=47152069 https://news.ycombinator.com/item?id=45909348)."

"The tech sector is the most software-defined and virtual of all sectors, it's natural that they are first to change. Other industries need to make capital investments to adapt to change.You can see a similar history with electrification. A few industries went quickly, but then it took like a decade of little growth before the true benefits showed up. As an example, take a factory that was built around hyrdo-power like a grain mill. You can't just take an electric motor and drop it in in place of the water wheel. It doesn't fit, the wheel is outside, there isn't room between the mill and the wall, etc. Only when you completely rebuild a new mill building designed around the features and limitations of the electric motor do you see the major benefits.Same thing here; it will be new factories and new companies that are designed from the ground up around AI and its benefits and limitations that really move the needle."

"Well, of course not. If you borrow a trillion dollars to build a 1¢ aspirin machine to compete with $1 generic aspirin, you are strongly incentivized to sell your aspirin for 99¢. We don’t see productivity gains, because approximately all of the gain is captured as revenue for AI companies.It’s weird that this has to be spelled out for so many engineers and economists, but to be very clear: OpenAI et al wants your token spend to go to one-minus-epsilon of what you previously spent on payroll, and wants your productivity to go to one-plus-epsilon of what it previously was. If you want 10x productivity, spend 9.9x more on tokens.They are in the business of enclosure and rent extraction, and any innovation that comes out of their research and development - regardless of how real an innovation it is - will be completely contained and bent totally towards that business. Any leakage of the innovation that you experience as a productivity boost is literally felt as lost profits by them."

"I don't see why a payoff would have appeared yet. Many (but certainly not all) software companies have increased their output without hiring more people. But having software with more features doesn't necessarily drive immediate productivity gains in the rest of the economy. It will take time for those benefits to percolate. We've only had access to models good enough to majorly accelerate code writing since early-2026. I feel like we're in the very beginnings of the first part of this wave.For sake of comparison, consider e-commerce. As a proxy for "impact on the economy", we can use Amazon's revenue. They went public in 1997 and that year had revenue of $148M (just 0.14% of Walmart's revenue that year). By 2000, revenue was $2.76B (1.65% of Walmart). Bricks and mortar didn't start feeling anything until probably 2011, when Amazon crossed 11% of Walmart's revenue. And it wasn't until 2025 that Amazon finally surpassed Walmart.But, if you worked in tech in the e-commerce business, things were already feeling pretty hot by 2007. And at that point in time, the e-commerce sector was still miniscule compared to traditional retail (~4%). Software is very exciting these days and the most fantastic things are happening. They will eventually percolate out to the rest of the economy. But it will take many years before everyone notices the difference."

"The conversation examples are impressive but this made me say holy shit out loud: "it runs locally on a MacBook Pro M4 Max or better. And we figured out how to train Dessa on only one NVIDIA GB200 NVL72."If it really can replicate that low latency + that expressiveness on local devices, that's one heck of an accomplishment for "indie" AI."

"These bidi/duplex demos always come off as overly artificial to me. It's cool that the model can speak at the same time as you instead of taking turns, but training it to interrupt as much as possible isn't the way to do it. In the very first example, did anyone here find the laugh after the "winter" answer to be convincing? What was the need for it? Why did the human speaker not get to finish a single sentence or finish a thought before the model took over with a monologue?"

"These full-duplex models are getting very "Her"-ish lately. gpt-live-1 is fantastic. Dessa, though, seems to be aiming at full human parity. There's a huge market for AI girlfriends that they should be looking into in earnest..."

"Some version of this has been posted a dozen times now. The dog barking and baby crying detection are advertised features of this product range which is used for SmartThings integration.Swarms of RE-hopefuls are now using tools they don't understand to work on projects they don't understand. Anyone doing RE knows step 1 is read public documentation, FCC filing, patent applications, etc. That step would tell you what the device does out of the box, no RE required to find everything the OP has actually uncovered.Instead they busted out Claude and have been gaslit by their own AI into thinking they've discovered something. They just discovered features that Samsung has been pitching for years."

"There is a Rick and Morty episode where Rick opens up a store that removes the curses from free items the Devil is handing out.(Surprisingly, the Devil does not consider lawyering up, which is odd because I would expect the Devil to be pretty familiar with lots of lawyers. It’s fiction of course.)It would be great to use AI to do something analogous with these spy TVs. I would be very interested in stripping the “smart” crap out of my TV to turn it into a kiosk."

"If OpenAI really banned him for that reason, that would be pretty stupid. If you can no longer use an LLM for reverse engineering without worrying about your account, that drastically reduces its value."

"Update: Did not expect the amount of traffic! Every time I scale the VPS, y'all immediately blow through the extra compute. Should be up again, hopefully will be more stable once this drops off the front page.Any attempt at logging so I can make a blog about the successful solve is gonna be best effort, don't have disk capacity to keep up with the traffic (at peak it was rotating every 12 min...). If you win the challenge, write-ups are definitely welcome.For those who are saying that the nginx config is unfairly difficult, intention was just to replicate a fairly normal config that was more realistic than you'd get in a lab environment. If we get to 24 hr+ with no solves I'll see about making it easier. In the meantime, seems like you can perhaps mitigate PHP2Shell with the right nginx config, so that's pretty neat!"

"There is a lot of cynicism in this thread but the fact this is still open and hour later ends the narrative in my view. There are not "thousands of swarms of agents autonomously compromising every site for its authors" or any the other x / LinkedIn dribble ive been reading.It clearly isnt happening."

"The server is getting overloaded, so here's the text for reference: Steal my Bitcoin 0.65 hours without a successful hack There is a bitcoin key hidden on this server worth about $502. It is accessible to the PHP user account through the print-flag binary. This PHP version was selected from before the PHP2SHELL CVEs were released. First person to get the wallet wins. If you don’t need the money, consider donating it to those who do: givewell.org. All traffic is logged. This is a known vulnerable machine, so we cannot guarantee privacy. Other attackers may access or monitor activity and data beyond our control. Do not submit anything you want to keep private. Challenge wallet Explorer ↗ bc1qlnu5…t3cxqy 0.00625104 BTC ≈ $502.35 USD stealmybitcoin.com · Terms of participation"

"I haven't spent much time in the video processing/streaming space, but I was delighted to discover OBS Studio this week while putting together what has turned out to be an incredibly cozy little entertainment setup by feeding the two gaming consoles and geriatric gaming desktop I've acquired over the years into an HDMI switcher and USB HDMI capture box that in turn streams the feed into an OBS Studio preview (launched from Steam) running on a dummy display.Launching OBS Studio through Steam lets me stream that preview to my VR headset over a 6GHz WiFi dongle and play games wirelessly in what feels like my own little private theatre. OBS Studio was the puzzle piece I hadn't figured out when the headset showed up last weekend, and I've been really impressed by its performance so far... I think this setup even shaved some latency off when playing online, since consolidating the consoles next to the router let me hardwire them.Many many thanks to the OBS Studio team for making software that's helping me live out a small part of what I remember hoping technology could be like back in the 90s. I am grateful (:"

"Adjacent to OBS, I want to give an unsolicited shoutout to VDO.ninja.It's a very lightweight way to push low latency video between devices via the browser. I've used it to turn my phone into a webcam, to jointly watch movies remotely (with simultaneous voice chat included), to make a multi-person video call, to stream my phone's screen to my desktop, etc All kinds of cool uses.Of course, it can feed into OBS, which was sort of the original purpose, but it is so more flexible than that. Of those above examples, only using my phone as a webcam involved OBS.There's a linked series of videos demoing it at the page, if you scroll down.[1] https://vdo.ninja/"

"> Updated CEF from 127/6533 to 150/7871Finally... The CEF they used was 2 years out of date, and after RCE exploits [0] occuring in the wild getting big enough that they got picked up in the media [1], we finally have a fix 1 month later.[0] https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-...[1] https://news.ycombinator.com/item?id=49852143[2] https://www.scworld.com/brief/vulnerable-obs-overlay-and-chr..."

"From this point on, every year "physical media & a Jellyfin install" is going to be more sensible.Assuming you even care about legality, of course.Yeah, it's harder. But you can get a lot of "harder" things done in the amount of time you otherwise spend watching ads, after all. Because to me one of the worst things about ads is they're stealing dollars from me to make cents, if not fractions of a cent. This makes them on the dumb end of the bandit classification by the Basic Laws of Human Stupidity metric: https://harmful.cat-v.org/people/basic-laws-of-human-stupidi... It's so dumb.And as long as we keep letting them give us an option to buy out the ads, but then they get to stick ads on that option anyhow, we can never get our way out of ads on these things. I don't mind buying them out because they make so little money anyhow but by simple game theory "buy out ads + put ads on anyhow" is always > "buy out ads". You need to cancel if they do this to you. I can't, because I don't have a Disney+ subscription. But you really need to. You need to turn the option into either "let us buy out the ads" or "lose the subscription" for them."

"I've always been frustrated by the intense focus the modern economy has on advertising. If I am interested in a product, I would much rather discover it by searching. Having advertisements forced upon me at every turn is a massive waste of resources (time and attention) given only a fraction of a percent of the products have any relevance to my life. I block every form of advertising I can reasonably block. If a company raises the friction sufficiently, I'll find a way around it. I'm mostly an amoral participant in the economy. I pay for YouTube, Disney, etc. but if they make giving them money an unpleasant experience, I have no qualms employing a usenet subscription and *arr stack to dodge the whole thing."

"This is not an option for everyone, but as someone who gave up TV several years ago (not entirely, just mostly), not feeling the draw of these platforms or having to put up with their costs and changes is really nice.TV is sort of like caffeine (another thing I gave up - though that one wasn't by choice, but required by my doctors) in that you cannot imagine yourself living without it and wouldn't want to. And the first few months of abstinence are genuinely very difficult.But eventually it gets easier, and then it gets completely easy, and then you actually feel as good or better than before. And once you finally become accustomed to it, you can't imagine going back to the old way."

"In a normal world, this would be treason by an illegal immigrant to the US. In today's world it's a blip in news. Sad state of affairs :(Europe will absolutely build alternatives. They'll bicker for some time, but in the end, they build. To Americans it looks like they don't but they do. Quality of life, life expectancy, and many factors have outpaced US in the last few years. The tech industry in the US is still important, but the importance will start waning soon."

" Starshield systems are owned and controlled by the US government. Any limits on speed or usage are decided by the US military and ultimately POTUS. Starlink is a commercial service owned and controlled by SpaceX. Usage of Starlink is limited to civilian or defensive activities and cannot be used for offensive military action, as doing so would be inappropriate for a commercial company. https://x.com/elonmusk/status/2110445577184133456"

"ICEYE and Nokia are already working on a replacement for starlink: https://www.iceye.com/newsroom/press-releases/iceye-and-noki...Isar is working hard on commercial launch capabilities: https://www.theguardian.com/business/2026/sep/06/german-star..."

"> About DMA & your linked services> The Digital Markets Act (DMA) is a European Union (EU) law that took effect on March 6, 2024. As a result of Article 5(2) of the DMA, in the EU, Google offers you the choice to link certain Google services.> Those Google services include: Search YouTube Ad services Google Play Chrome Google Shopping Google Maps > You can choose to link all these services, choose to have none of these services linked, or choose which of these individual services you want to link.https://support.google.com/accounts/answer/14202510?hl=enSo at least European users will be able to get personalized search and photos results without also having to share that data for personalized ads."

"PSA: Getting out of Google Photos is both easy and super rewarding if you can run Immich and use Google Takeout. It’s also better than Google Photos.https://jaisenmathai.com/articles/my-ridiculously-robust-pho..."

"Turn it off here: https://google.com/search-personalization"

"The nearest Wikipedia entry to me is about a 3 hours 15 minute walk away, the nearest town. But there are so many interesting things closer, perhaps I should add them to the wiki. Twenty minutes to the north there's a pleasant shady area at the bottom of a canyon with a fallen log with a curve that fits my buttocks nicely. Fifteen minutes to the southeast there is a dead elk cow that has only been 3/4 eaten by the local coyotes, etc., and has a quite remarkable odor. To the northeast is the spot where I found a perfect arrowhead, the prize of my collection. But maybe it's better for me to horde these places to myself."

"Weird psychological quirk: otherwise banal articles seem much more pertinent when they happen to be nearby (I just read about a random plane crash from decades ago but felt very invested in it, due to proximity).Wonder if this is related to the biological phenomena of humans tending to care more about humans who resemble themselves than those who don't (homophily)"

"This is a great idea but I'd definitely make the distance configurable. Where I am right now would need several hours walking to reach anywhere Wikipedia worthy but if I expanded to say a 15km circle there's probably a couple of places of interest.Meanwhile if someone lives in a city they'll get loads of results.EDIT: actually this is just a wrapper around wikipedia's nearby feature I think. I tried a couple of places and they give identical results.https://en.wikipedia.org/wiki/Special:Nearby#/coord/15.90721..."

"I did some tests. I found it interesting that in the reasoning content the model identifies itself as Kimi by moonshot and sometimes it assumes ChatGPT as identity. Then sometimes it references the need to be approved by "the evaluator", other times it references global system guidelines / moonshot guidelines, and something about an phantom instruction line being "you are an assistant responding in an API" or something like that."

"Fascinating that we’re converging on AI safety and alignment in time across jurisdictions. The cybersecurity approach taken here is interesting because should the model be opened it’s still not dealignable because it just doesn’t know enough.The slow warming of the water is a good approach. I’ve been using abliteration.ai’s cybersecurity models to pentest my own software and it produces much more usable defensive results. Opus 5.5 can fix everything but the guardrails trigger too easily.The Fable ban affair was a nightmare for defensive cybersecurity. As far as I’m concerned we’re already in the world of Void Star and Cloudbreaker is here."

"There is a ton of questions to ask regarding their removal of cybersecurity data.First, how much “cybersecurity data” is just standard software knowledge that one can derive cyber security exploits from?Did they also get rid of all references to hacking in general?Are they implying that all the recent exploits are just things that were already in the data?For a model it doesn’t seem that far fetched to make the leap from “I have the knowledge of what hacking is” and “I know how computer systems work” to just being able to exploit stuff anyways."

"Hi, I'm the creator of Docker and came across this post. It's always fun to see other engineers think about how you designed a system. I haven't been involved in developing Docker in many years, but it's a fun trip down memory lane.I'm happy to answer any questions you may have."

"What made Docker unique IMO is not the container technology itself. I used chroot 20 years ago and it worked just fine. Yes, no network namespaces; no process namespaces, but I don't even think these are that important.What made Docker unique were there things:1. Dockerfile concept. Building images layer by layer. Caching layers. Everything in a single file. It made possible to iterate on image quickly. It made possible to implement CI builds efficiently.2. Docker network registry concept. Putting universal images onto a server and share them with the world.3. Momentum. A lot of software that was traditionally complicated to deploy, suddenly appeared in docker servers. I remember how fascinated I was, when I could deploy wordpress website with tiny docker-compose. And how contained it was. I could just delete every trace of it from my host. I always felt uneasy installing various things onto my host and docker just solved that uneasiness."

"I prefer Podman most of the time, but Docker is/was amazing and a great DX put on top of the so called "5 different linux kernel features in trenchcoat". That's the selling point, it's super lightweight and takes full advantage of the OS features that were already there (or being developed) but were awkward to use and required tons of specialized knowledge."

"Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness."

"What's with iOS and pdfs pwning them? Reminds me of the ForcedEntry in Pegasus.https://projectzero.google/2022/03/forcedentry-sandbox-escap...https://www.trendmicro.com/en_gb/research/21/i/analyzing-peg..."

"#3 is so nice, I want root access to my phone. Does anyone know if doing this can lock Apple out from updating/removing it?"

"I can't believe no one I've seen has called out the secret game! Go to Settings>About and then hold the center button for 5 seconds. I used to play so much of this bricks game in college when procrastinating from studying in the library."

"Really is heartbreaking that the click wheel is such an incredible and satisfying user interface but technology has evolved such that we have no need for it anymore."

"I chuckle knowing that somewhere in Apple there is an SRE or engineer who is getting paged for elevated 404 rates, and has to silence the pages hoping that no real missing page issue crops up while we all hit this page. :)"

"I like the wallet example. Back in 2005, I found a wallet on the street with $3000 inside, and spent the rest of the day tracking down the owner. (Turned out it was a student's rent for her summer internship). Then maybe 2 months later I lost my wallet and a week later it showed up in my mailbox, cash and all -- someone took the time and their own money (as far as I could tell) to send it back to me.And just to prove that I'm an irrational human, for the last 21 years every time I pass the spot where I found the wallet I can't help but look around for a lost wallet, as if it's some magical spot where the universe deposits lost wallets."

"Brian: "Look, you've got it all wrong! You don't need to follow me! You don't need to follow anybody! You've got to think for yourselves! You're all individuals!"The Crowd: "Yes! We're all individuals!"Brian: "You're all different!"The Crowd: "Yes! We're all different!"A man in the crowd: "I'm not."The Crowd: "Shhh!""

"Virtually all posts I have seen recently boil down to "I asked the machine a question and I'm too lazy to think about the answer it gave me, so I posted it instead".Sure, there is some semantic value in the suggestions put forward, but none of them are ground-breaking or particularly profound, which is exactly what I would expect from an output that aims for median responses by design.I suspect this has something to do with the siloed nature of current learning practice, which generally doesn't encourage the cross-domain pollination of ideas."

"we're actually trying that. what started as an experiment to be a self-funded VC, has evolved into autonomous companies, currently we run the 1st company, it's still not there and requires supervision. but it's improving.https://organ.app"

"The sort of obvious answer is the same reason McKinsey hasn't taken over the Fortune 500 despite consulting and having deep knowledge of the operations of most of those companies.AI is brains. Companies need arms and legs and relationships.The reality is that employees are also mostly not entrepreneurs, same as consultants.There are trillions of company ideas in those tokens, just like there are trillions of shots in the fans head watching the basketball players.Takes years, patience, capital and the right mindset to get to the point to even take the shot."

"1. They are starting to do it. Take a look at OpenAI's product portfolio, there's a galaxy of attempts at application.2. Selling tokens via long running agents is the only thing that's provably working with respect to revenue growth.3. They need revenue yesterday. Increases in borrowing rates means access to capital isn't what it was in the 10s. Their runway is much shorter than you would imagine.4. Some of the decision makers at these companies believe AI will exhibit Jevons Paradox and that any decrease in price will result in induced demand.5. The frontier models are still subject to the limitations of AI. They're not good at everything. Better to have someone else learn that on their dime rather than yours."

"Finally, after eight hours and 357 points, 169 comments with healthy discussion - we have the inevitable flagging.I slightly know how this all works, and I still love HN. In any case, I hope everyone who flagged this [0] feels better now after squelching the discussion. It was already pushed far off the frontpage and it was only on /active. I guess that wasn't enough. The crazy thing is that I bet we would all get along over beers, vodka, or tea.[0] доброе утро"

"I also feel people are missing the forest for the trees in that discussion in that Jared Kushner is a private citizen and the son in law of the president who somehow is negotiating with foreign heads of states despite having no mandate from the American people to do so. Forget a hacked phone, why is a nepo baby running around negotiating on behalf of a country without holding any office"

"http://archive.today/FHGAt"

"Alberta's electricity system is Canada's example of this. "de-regulation" meant the separation of generation, distribution and retail. Decades after this was supposed to lower the price of electricity, it's done the opposite. Big corporations are now guaranteed a profit at each layer of the system. There is no competition, because why would they compete if they're guaranteed a profit?So the result is Albertans pay more than most other Canadians for electricity. Even if the actual rate is low (which it isn't), the cost of electricity is usually only 10% of my bill. The rest is "transmission" "distribution" etc. It's insanely expensive compared to next door in British Columbia."

"This whole "but government is inefficient" argument has never convinced me. Our local electric provider has as bad or worse bureaucracy and ever-increasing rates. Bureaucracy is just a symptom of aging human systems, and it can be fixed. Monopolies that serve the public good should never been profit driven, full stop."

"Utilities should at minimum not have a profit motive involved, but the fact that we've been so happy to deliver vast profits to shareholders instead of proofing our grid has been a real tragedy."

"I found the website to be quite nauseating to look at, so I decided to use the GitHub link instead.But it's quite impressive that it works on QEMU, POCO X5 Pro 5G and some Xiaomi devices too.Website is here: https://hackios-web.vercel.app/enSource Code: https://github.com/oosexgang/hackios-xnu-kernel"

"This is going to be fun. There are already replica phones for the flagship phones that are running a shitty android version that has been customized to look like iOS. People need to tripple check now when buying older used iPhone models."

"There was a time that I would have liked iOS to run on other hardware. These days, it is so clunkly, that the the desire is not there."

"(context: I'm the CTO of Quad9 and am one of the people dealing with the lawyers)There is an understandable focus on "how are you going to block French users" when we have also claimed that geoIP blocking is insufficient for selectively denying resolution for certain names - we understand this conflict, but we think it is energy spent in the wrong place.It is probable that we will use geoIP filters to block French users from our services after November 24. We could apply this same geoIP filter list now to selectively block French users from reaching the sites that we've been told to make unavailable. But this would corrupt our core premise, which is that the DNS is not the right place for this to happen, and if we comply within France to meet the requirement then we accept the worst eventual outcome for users and we still do not have legally perfect coverage. We wish to first remain consistent with our core mission, and secondarily we must remain as close to compliance as we can to the legal constraints put upon us. By accepting the demands for blocking, we would admit that such demands are permissible within our mission - that we will act on behalf of companies (or others) to create ineffective and mis-directed regimes of content constraint.We would be admitting that we think this solves the problem - it does not. We would be admitting that we will do this for an ever-increasing number of names - we will not. We would be permitting these methods to be applied for more areas of filtering such as moral, religious, social, or political reasons - we must not.So we accept that there is the possibility that we will have errors in our blockade, but in this case (blocking French users) we maintain consistency with our stated mission of integrity of the DNS. We would rather there be a clear distinction made for users of our services: you get the DNS as you (the user) expects, or if Quad9 is forced to pollute the service with unexpected and arbitrary number of fragmentation demands, then we will not offer the services at all.The underlying issue is not ONLY that geoIP blocking is ineffective, but that the entire premise of any of these demands is inappropriately applied to DNS recursive resolution providers. We would hope that this discussion continues to be on the most fundamental of the disagreement we have with the outcome in this court case, not on the details of the technical implementation which have yet to be entirely decided and which can be tuned over time."

""The plaintiff (Sony Music Entertainment GmbH) then used a VPN to access the blocked content from Germany in circumvention of the geoIP blocking. The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court."Imagine doing everything possible to stop something. They then circumvent your protections with yet another service, and you get fined.I wish I could even suggest what someone could do against these trolls.This is like saying "we put a lock requested by court and where found guilty because plantif hacked us after""

"Seems they're following Cisco similar move 2y ago of exiting the market> Canal+ has been busy getting web-blocking injunctions in France against sports piracy sites which stream sporting events for which it has the exclusive broadcast rights within the French market. It previously targeted DNS resolvers operated by Google, Cloudflare and Cisco.> All three unsuccessfully opposed the web-blocking orders. Google and Cloudflare, therefore, have been forced to instigate them. However, Cisco just pulled its OpenDNS service out of the French market entirely.(Per https://completemusicupdate.com/quad9-vows-to-fight-absurd-w..., https://completemusicupdate.com/opendns-pulls-plug-on-france...)"

"> However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our businessScrutiny is inversely proportional to bit complexity of the private keys they used. Without a failure to apologize or expose how it happened: a human mistake, process mistake, etc. this looks pretty bad on them.> eMudhra’s global SSL/TLS infrastructure runs separately from its other operations. The company’s Global digital signature certificate (DSC), eSign, and other signing services, including those in India, its enterprise PKI Solutions (emCA, CertiNext platforms), emSigner eSignature Suite, and its identity and authentication solutions (SecurePass, emAS) are not affected and continue to operate as normalAnyone relying on them with anything related to security or trust is playing Russian roulette at this point."

"Related: the absolutely brutal question battery the Chrome team publicly submitted to eMudhrahttps://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c30"

"Somehow this is making it even worse. Like, I'm having issues explaining the whole thing to my wife, because I can't come up with a metaphor or parable that's even remotely as ridiculous as what they've done. Anyone's got a good one?Maybe, like, setting up a factory that builds both LHD and RHD cars and building cars with two passenger seats in the front for two years straight without anyone noticing?"

"Incredible all around.If this is true decrypted `fs` r/w, I wouldn't be surprised if we start seeing Switch 2 game dumps appear in a few hours. Given the world of recomps/decomps we now live in, that would mean console exclusives playable on arbitrary hardware (a worst-case scenario for Nintendo). We've already seen things like Tears of the Kingdom running at 60fps natively on an iPhone.Giving LLMs arms and eyes via KVM (or webcam) is a very strong paradigm for this sort of hardware work, as it allows things to be parallelised and run 24/7. Highly recommend people play with this more (to less nefarious ends!) when working on firmware/hardware for external devices.Worth noting too that this would have easily fetched >$50k via Nintendo's HackerOne (https://hackerone.com/nintendo)."

"Perfection: The JetKVMs allow Codex to send controller inputs to the Switches over USB and receive video output over HDMI. We also need a way to press the power button—when the Switch 2 crashes, it needs a button press to restart. That’s what the Bluetooth light switch flicker from Amazon is for. When the lever comes down, it presses the power button. Once the power button is fully pressed, the rest of the lever’s torque lifts the mechanism."

"I don't understand, how are people using codex for this sort of research? Whenever I try to do bug bounty, research, etc it locks down and I have the "blue" tier access/daylight whatever it's called.For example I tried to investigate some CVE's on older android roms and it downright was refusing it. It was okay when doing it on... Microsoft and to submit a microsoft bug bounty but android was no go."

"* authorities have offered Smith a plea deal including a $1,000 fine, $1,000 in restitution and three years' probation.*This is the goal ... They know they are at fault but admitting they made a mistake is damaging to careers.In a lot of cases a carrot is dangled in front of people ... You can wast a lot of time (and money) fighting for your innocent, and take the risk your still going to get convicted.Or you can take the plea deal, and it absolves us from our mistakes. And you save money because its cheaper then paying all those lawyers and court costs. And your innocent anyway, so that probations has no effect on you.I forgot the source but the amount of prosecutions that are plea down is staggering. A lot of actual innocent people take plea's because its cheaper, then the alternative. And there have been plenty of people innocently convicted (even on shaky evidence), so most people take plea deals and they can move on with their lives.This results in a culture where investigations are annoying. Where pressure is ramped up again and again to break people into taking plea deals. The biggest issue is, if you actually refuse to take a plea deal, then all resources are put against you to get a actual conviction, even if they know your innocent. "Why did you not just take the plea deal". Well, time to punish you for not taking it. Because repeat after me again, careers are on the line and losing cases hurt those future (potential political) careers.Its the same why prosecutors fight tooth and nail, even if clear evidence is shows that a person was innocently convicted and spend X years in jail. It not about justice, its about protecting those careers.The proof of innocents is heavily put on the other party, and it really hits hard on people who do not have the financial means."

"> Meanwhile, authorities have offered Smith a plea deal including a $1,000 fine, $1,000 in restitution and three years' probation. She has refused, saying she is innocent.This is nuts. Is it possible US prosecutors give so few shits about justice?"

"Time for CashApp founders and C-levels to be held personally liable for creating a system with so few checks that it appears to be designed to facilitate fraud and theft.Then you sue all the law enforcement officers and local officials who are attempting to lay the blame for this on someone they should know is likely innocent. Make all of the financial liability for this lazy investigation come directly from the pockets of the cops and prosecutors until they have nothing left to their names and then extract every thin dime that you can from the city that hired or elected these clods so that the whole city is bankrupted.Money is obviously the only thing that talks in this society. Make all these assholes pay with everything that they have managed to accumulate in their lives and kick their asses to the curbs after pointing at a dumpster and telling them that they can likely find some cardboard suitable for beggar signage. They'll need to supply their own writing tools though."

"Social media and "cybersecurity experts" had a big role in this. Stuff like "EU SAYS THIS IS A URGENT VULNERABILITY" and even the Prime Minister of Japan doing a nighttime PSA. They cite "the experts" posts on social media about the initial advisory, while the very same so-called experts share google search AI output mitigation strategies. None of these organizations or bodies had any details other than what was on the advisories and social media. (e.g "CVSS 10, that's bad!!")To me, it seems more more akin to broadpwn, technically severe, wide scope (millions of iphones), yet will never be a one-size-fits-all-PWN-button.Even in the age of AI, I don't think this is going to be weaponized down the line like how Eternalblue was... but I'm not the social media cybersec guy with 15000 followers, so don't take my words at face value ;)"

"So, yeah, this aged like milk. There are now multiple posts from vuln research teams all of whom have working RCE POCs against unmodified PHP applications.I don't really understand the intent behind a post like this. Sure, this is a harder vulnerability to exploit than Log4Shell. Everything is harder to exploit than Log4Shell. How, exactly, is that meant to weigh on people's decisionmaking?For the first time, I think, in my whole career, I saw sites yesterday go down instead of trying to mitigate an unpatchable critical vulnerability. They took the availability hit rather than putting their users at risk. Finally. What purpose is served by trying to dial back the concern?If this was a long nerdy post about exploitability, I'd get it. But it's not. It's essentially a high-level comparison of logic vulnerabilities to memory corruption vulnerabilities. What is this argument for?"

"I ran 2 PoCs from GitHub today: one indeed expected Local File Inclusion (LFI) to already be present (so it's just LFI with extra steps), and the other one didn't work at all out of the box without some modifications (although I used the same Docker images and all). The second PoC did trigger a real stale write bug in the end, but it didn't demonstrate actual RCE; it just triggered a stale write. And then I wondered, is this the first time ever that the PHP runtime has had a memory corruption bug? I doubt it (I remember a few years ago we had random crashes in production under high load due to an opcache bug). And if it's not the first memory corruption bug in the PHP runtime, why is it being proclaimed the worst vulnerability in years?"

"Ha, I didn't expect this to show up on HN!Release is out now, including a blog post at https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/. There isn't really much to explain, you just pass `--emudhra`. :)"

"This looks like it's using the emSign root path, which is useful, but the AAA root path is equally useful in different cases. The AAA root path was disabled for https on root stores newer than February 2025, but has been in root stores since forever. Meanwhile the emSign root path was only included in root stores since ~2018 and got removed in October 2026.So from the perspective of hacking old IoT devices, if your device hasn't been updated since 2018, the AAA path should work; if since February 2025, either path works; if since October 2026, the emSign path."

"It's almost a shame it includes the private key and doesn't bruteforce it in-band for every request."

"It's 5:20 AM here in Europe and I just rotated a bunch of keys.Only to read,> Because deployments are paused, you will not be able to redeploy your services to pick up the new credentials until builds are restored. We will post here when builds resume with any additional details.So now my service does not work. Which is worse: a stolen key or a broken product? I'm genuinely regretting following their advice on rotating keys, because logs showed no sign of incorrect usage, and our service would at least have remained online.I hope that they automatically redeploy their customer services. I just worry that I won't have tested it. I mean: 5AM. Keys changed. Nothing more I can do. Should go back to sleep. No timeline to wake up to check deployments, so... I... wait?"

"Crazy day for cybersecurity: PHP RCE, eMudhra certificates, and now Railway.And it’s all just getting started imo.https://blog.cloudflare.com/emudhra-certificate-compromisehttps://www.wiz.io/blog/php2shell-php-rce"

"Postiz founder posted on X that his service is being brought down, his keys were already used and Railway was quiet about this until he spoke up:https://x.com/wickedguro/status/2113015432974405658"

"Man these big AI labs have such terrible UX and integration. Signing up for this waitlist should be something you can request from your Claude chat session. You already have all of my relevant information and I'm already signed in, why are you making me type in any information. It's bizarre we have companies claiming trillion dollar valuations but somehow nobody thought to do basic integration with the existing chat service? You have access to frontier coding agents that should make this trivial and somehow you're still expecting me to type in information I've already given you. What are the product people at Anthropic doing?I tried asking Claude fron the android app if it could sign me up for the waitlist and it said that it couldn't. There's no technical reason this shouldn't be possible, it just shows a lack of care and attention to detail."

"Powered by Opus 5.5 is incredible.I've been using ChatGPT Dot over Meta Muse/Instinct/Grok Bot because it's been powered by Astra and I find having a personal assistant that's using a true frontier model makes a huge difference in how much I can just trust the output without doing the work again myself just to double check the results.In the past month since Dot came out, I've literally bought a car with almost the entire process handled by Dot, and am now in the process of buying a house in Kyoto, in a language I don't speak at all, coordinating with an obscene amount of moving parts and logistics, flawlessly handled entirely by Dot, from finding the home to scheduling visits with real estate agents to finding judicial scriveners and getting a hanko stamp and scheduling inspections and applying for insurance and all sorts of insane tasks that would have taken infinitely longer and been unbelievably painful on my own.So, so excited to see what Duet looks like with Opus 5.5. Going to try switching over as soon as I get off the waitlist.Curious how other people have found these agents as well - always love hearing and seeing what other people have done with these things and how to improve my flow even better. I feel like I'm very close to being able to essentially offload every single task I do on a computer to an agent like this."

"I suspect that Dots and Duet are very high margin drivers for the labs. Personal assistant chat sessions don’t have to be realtime, so workloads can be scheduled on low priority batches and be waited if higher value work comes into a queue.Inference providers are always trying to fill inference batches and having a stream of low priority requests can help pack batches that might have gone empty, without raising the latency of higher priority requests such as live chat sessions.While Dot and Duet certainly need to be useful to work out as products, I think the gross margin mechanics are just as interesting."

"Thank for posting it, happy to answer any questions!"

"Very very cool! Impressed that it can be done with only fine tuningOn a very similar theme, I recently built a “lossy git”, which stores your code by training a neural network, then it generates the code back to you on checkout* web demo: https://nicobrenner.github.io/lossy-git/demo.html* cli version: https://nicobrenner.github.io/lossy-git/The web demo runs entirely on the browser, both the version control and the neural network training/inference. You can commit and checkout both images or code - you can also paste/“upload” your own images, no server requests (everything clears from the page on reload)"

"This is a micro-implementation of what research calls a "Neural Computer", in which the entire UI itself is generative and driven by user actions.Neural Computers provide the illusion you are interacting with an underlying operating system/application, but are actually a recurring (user input) -> (predicted pixel output) loop.In theory, it would be impossible to tell a perfect "Neural" computer apart from a "real" one. Which is kind of a wild thought.https://arxiv.org/abs/2604.06425"

"> At the time of posting, I didn't know about any embargo. My contact had told me there was no embargo, and her contact had told her the same thing.If you're not a party to an embargo, and no one told you an embargo even exists... you should not follow the embargo. In fact, you should maybe even consider leaking basic details or challenging the embargo if you are in this situation. In your situation, they had lost information asymmetry before the news got to you. I don't know where people got the idea that unrelated third parties have to follow embargos.Embargos are not about keeping secrets, they are about the game theory of coordinated disclosure."

"if you received the information about the RCEs without the information about the embargo, then you did not break the embargo. someone else up the chain did.this whole saga will be analyzed and we'll all come out better for it at the end."

"That’s kind of you, Pete, but it was leaked and being exploited well prior to your previous posting here: https://aws.amazon.com/blogs/security/amazon-threat-intellig..."

"Looks like a co-ordinated disclosure between Wiz, Calif and OpenAI:https://www.php2shell.com/https://www.wiz.io/blog/php2shell-php-rcehttps://calif.io/php2shell/https://openai.com/index/coordinated-disclosure-of-critical-... (not yet live)https://thephp.foundation/blog/2026/10/21/todays-php-securit... (not yet live)"

"Related:Today's PHP security release, and how we're strengthening security - https://news.ycombinator.com/item?id=50182987 - Oct 2026 (114 comments)PHP2Shell: AI uncovers critical RCE in PHP - https://news.ycombinator.com/item?id=50180836 - Oct 2026 (146 comments)PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619) - https://news.ycombinator.com/item?id=50176077 - Oct 2026 (61 comments)Security advisory: Critical remote code execution vulnerabilities, update now - https://news.ycombinator.com/item?id=50172041 - Oct 2026 (631 comments)Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming - https://news.ycombinator.com/item?id=50167754 - Oct 2026 (60 comments)"

"This is obviously bad, but in my 20 years of hosting with PHP, I've never had to take the steps of taking down servers preemptively. It's not good, but honestly, and I think the way this was handled could leave a lot to be desired, I think this might be the "worst" we've had with PHP, and it took a while to get here."

"new email from wayne, who is the original reporter:"I've had more than a few emails asking on how this was discovered. The simple answer is: https://github.com/google/paranoid_cryptoYeah, out of the box. CCADB was intended to be a quick corpus test before looking at subscriber certificates...I've done a far more thorough check of all existing CCADB certificates, thankfully no more hits. Most of my time has been spent going over the basics that everyone assumed someone else had already done - a critical mistake to ever make near security.So unless someone has significantly more computational resources or access to more cryptanalysis research the low-hanging fruit has been caught so far."https://groups.google.com/a/mozilla.org/g/dev-security-polic..."

"In retrospect, having 100 trusted certificate authorities might have been excessive."

"> It's fortunate that the steps required here aren't particularly complicated for the devices you can update, and the advice essentially boils down to 'update them'. The problem is the devices you can't update or update easily.> Update everything that ships a CA bundle: your OS ca-certificates package, certifi, Node, Homebrew, and rebuild your container images once the base images pick up the change.> Devices you can't update are the hard part. Routers, printers, TVs, appliances with frozen firmware will trust these certificates until expiry, which is July 2039...Quick -- we need to MITM all the smart TVs so they can be jailbroken in one fell swoop!"

"You may never hear me say this again because I am a gruff cynic who is not sure that hanging out here is good for his psyche, but thank goodness for HN.While I have been chasing around today, trying to resolve this on different servers, it turns out a three line nginx mitigation (blocking multipart uploads) I wrote in the wee small hours GMT has been quietly protecting a vulnerable machine I could not shut down (from attacks powered by every single mainstream agentic AI tool — Anthropic, OpenAI, Qwen cloud, Baidu, seemingly also AWS, Meta)Including an hour before the PHP patch actually shipped.So without the HN discussion I wouldn't have found enough people pointing at possible mitigations and I would have lost a server to this, and I thank everyone who pointed out that second mitigation in particular."

"> As a result of the leak and pre-announcement around 20:00 UTC, Calif, one of the security firms that had reported the issues mistakenly published a video.This is the most surprising part to me. It sounds like Calif saw the leaks, interpreted that as embargo being broken, and then raced to publish their [anime dancing] marketing video? I'd have expected much better."

"We should really move to a different security model on the internet.For example, when I buy something from a webshop, why does that webshop need my personal information? Why can't I give it a token, which it can then use to send my package, because only the postal system knows the address coupled to the token, etc.And we should also ban user tracking for advertising purposes, obviously."

"I’m 38 years old, and I’ve worked in climate tech for the last 12 years. In my relatively short lifetime, and my relatively short career, I have seen the environment for political action, and funding for climate solutions, fluctuate maybe half a dozen times.The physics, however, don’t change, and neither does the task in front of us.I just spent ten months finding a job, the longest and most difficult job search of my career. It was hard because the macro environment is terrible, but also because I insisted on finding a role working on clean energy hardware.At a time when basically all VC funding, and in many ways the entire productive capacity of the economy, is shifting to AI, it would have been smarter in some respects to just pivot to AI. I sat out the crypto bubble too, in which some of my peers made a lot of money by working on projects that were either useless, or straightforward scams.We crossed the 1.5 degree threshold because the money can’t help itself. The slow, steady work of transitioning away from fossil fuels is never going to be as profitable, as quickly, as the various forms of gambling and addiction that have driven the tech industry for most of my lifetime.But you, individually, can make the choice to keep your eye on the ball. You can commit to working on this problem until it’s done, no matter what. You can choose to find the others to organize and prepare, so that the ideas closest at hand when the next crisis comes are yours.It’s the best solution I’ve come up with so far, and in spite of the challenges, it’s still working."

"So, the devil comes to Davos and says: "You can enjoy cheap energy, but some poor people in the global south will suffer and die" And after a long silence the US president says: "I feel like there is a catch there, but I just can't figure out what it is""

"I highly recommend this graphic to everyone:https://globaia.org/_astro/GA_1750-2024_DARK2.CKx3duw8_ZQd9m...It lists 24 socio-ecological KPI across the planet since industrialisation beginning - as you can see:There is not a single KPI where the curve shows even the slightest sign of recovery - and you can expect other graphs of adjacent KPI to show similar development.In one sentence: There is no chance that humanity will ever come back to any pre-industry levels within the next 500 years. And by overusing our environment, our civilisation wont last 500 years. (sure, some hotspots will survive, but they wont have ASML Twin:Exe machines or cheap flight travel anymore etc.)"

"As someone who actively goes out of my way to stick to writing vanilla HTML/CSS/JS as much as possible, it's honestly hard to explain to people who only write within frameworks how good it's gotten. Use the proper tool for the job, of course, but it sparks joy!"

"Wow even more fancy border styles! Infinite complexity for useless eyecandy. Date pickers are still barely working, last time i needed to build a touch optimized interface (gloves, industrial setting) with date picker, time picker, and numeric up/down style input fields it needed custom components and js...But who needs these, when we can have bezel and whatnot...Who needs ways to reliably trigger the display of the touch platform-native keyboard, to be notified if it is displayed and to move the input field in view so it is not obscured by the keyboard?This is why the web is a terrible platform compared to Windows Forms for getting stuff done. Because those making the standards only work on creating gimmicks."

"Since I’m in before the negativity: I love CSS! For whatever reason, it’s always made sense to me. I have great respect for everyone with the tenacity to push on improvements that might take 5-10 years to be in common use, if at all."

"BioWare shutting down is sad, but it’s really a classic ship of theseus situation.There are a handful of notables still there but the majority of the teams that made the classic Baldur’s Gate, KOTOR, and Mass Effect disappeared a long time ago through natural turnover and a couple of brutal rounds of layoffs.The silver lining is that the talent didn't vanish and we have teams like Archetype working on Exodus, Stoic with The Banner Saga, or offshoots like Yellow Brick and Beamdog."

"One of the notable ways BioWare pushed the industry forward was the ability for the player to initiate a romance storyline with any one of a variety of in game characters. That often included the option of romancing characters of the same gender. I point this out because the Saudi Investment Fund bought EA a couple months back and they obviously have very strong opinions on those sorts of relationships. Are these two connected? I don't know, there are plenty of other potential reasons to close a studio, so probably not. But these are now the sort of questions we have to ask ourselves anytime EA makes a decision like this."

"I am still extremely bitter about how BioWare, in my opinion, ruined the dragon age franchise. While not "truly" turn based, dragon age origins and dragon age 2 had the spirit of it, and felt like a party-based tactical RPG. Then out of nowhere, the studio decided to abandon that with inquisition and turn it into an action/adventure style of game. I had never really been so bitterly disappointed with a game release.After that I knew they were done. ME3 was the last good game they released, imo."

"It got less media play but the founder of the Hind Foundation (https://en.wikipedia.org/wiki/Hind_Rajab_Foundation) that is going after IDF soldiers for war crimes that happened in Gaza got his Instagram account taking down at the same time, but it wasn't restored:https://www.instagram.com/Aboujahjah/They also removed the account of slain Palestinian journalists, this time including Pulitzer winning Al Jazeera's Anas Al-Sharif - although it seems it is back now: https://www.youtube.com/post/Ugkx0kN5mUZDFsw7OgRiY3ElLx9DgjM...It seems that there are repeated waves of account deletions affecting those not in power and only if you raise a huge stink is it undone but only on a per-account basis. And each of these waves slowly erodes those voices. It sort of feels like a strategy."

"That's why I organized my protest on mastodon. No one showed up but my subscribers told me how awesome it was that I organized it."

"I can't help but recall the joyous cheers during the deplatforming era. "Freedom of speech doesn't apply to companies" is a particularly vivid memory."

"For those who haven't seen, the New Mexico Attorney General released tapes of the depositions for Zuckerberg [1] and Sandberg [2].1. https://www.youtube.com/watch?v=C7UC2ie0XIE2. https://www.youtube.com/watch?v=g1j4N-3ZkB4"

"All the states that participated in the class action settlement got $725 million combined.New Mexico decided to go it alone and gets $25 billion.Great timing for the AG who’s up for reelection on November 3 (even though it was the previous AG who made the call)."

"Meta will surely appeal, and will likely get the fine reduced to like 10% of that. But for comparison, in the recent multistate settlement over social media addiction by 47 states for $17 billion, there was a provision in that settlement to get $459 million [1] in exchange for releasing Meta from any state claims related to Cambridge Analytica. So those 47 states got $459 million for what New Mexico will likely get a few billion for.[1] https://www.techpolicy.press/the-459-million-cambridge-analy..."

"All the sandbox-exec and all the Lulu rules are not going to protect against something like this.At one point permission pop-up fatigue sets in we start giving any permission as if it's normal. We also become desensitised to isntalling tools: brew, npm, it becomes second nature."Oh, those 367 tools installed by package X? Yeah yeah, must be normal, that's how all these work now"."Brew shows 59 packages outdated?". "Must upgrade". "Yeah, done. Perfect".And the advent of agents and harnesses. It's not a matter of whether, it's when! OSes need to do something about it. Help users have complete separate "program space" at ease with better, easier, and lighter VMs if nothing else. I know, I know - Unix and Linux solved all this even before Alexander III of Macedon started wearing his nappies. Of course."

"Just going to remind you all that https://canarytokens.org/ exists."

"This is the second significant exploit against LiteLLM in what, a year or two ? Just last night I came across notes and a script from an older claude session to help audit all project dependencies and verify nothing used litellm.Okay, checked, it was March of this year: https://futuresearch.ai/blog/litellm-pypi-supply-chain-attac.... What even is time anymore in the llm age?"

"My mum was a mechanic, my dad was a mechanic/truck driver.My grandfather and uncle were mechanics...I am not, in fact my understanding of mechanics is extremely basic.If I go back into my family tree, I can find three generations of Sugar House Labourers in Scotland in the early 1800s.. a profession that no longer exists in the UK as far as I can tell, and I'm certain they had a specialisation.We'll be fine, your children aren't you, they'll find their own passions.Our jobs as parents is to teach values and make sure they're good people and have the tools to make good decisions too, not to set them on a particular path... that's a losing goal, we can't tell the future for the next year- how could we possibly predict what works well 20 years from now?"

"> "...Bill Gates were college dropouts, but the market deemed them good."Gates had excellent grades and was credited in an academic paper during his undergraduate years. Not exactly like the average dropout.> "Now that I think of it, apparently Einstein was a mediocre student, but his contributions to science were his way out. "That's a myth. Einstein got top grades in science and mathematics.As for the original question, "If you wish to build a ship, do not divide the men into teams and send them to the forest to cut wood. Instead, teach them to long for the vast and endless sea.", incorrectly attributed to Antoine de Saint-Exupéry"

"Parents should focus on enabling their children to be:Curious; Resourceful; Self-reliant (to feel they have agency in the world); Compassionate; Value personal integrity, themselves, their ideas / wishes, and time on the planet; Able to cooperate, communicate, and work as a team; Able to make sacrifices for the future versions of themselves ("I'm having a bad day today, what can I do to make tomorrow me have a better day?"); Able to enjoy life and find fulfillment (however small) even in bad times.School subjects, economies, social constructs, technology, they all change. A human who's motivated to develop themselves on topics like the above will be the best person they can be whether they are a CEO or living in a cave underground after an apocalypse."

"A nuclear bomb"Based on this framework, we have achieved high-throughput, low-latency large-scale inference services for DeepSeek V4.1 Flash. Currently, the service throughput of a single cluster is 155 trillion tokens/day, and the overall revenue is $38 per card per hour (at off-peak pricing)"Source: https://zhuanlan.zhihu.com/p/2095560295930508953"

"Interesting that the DHS "Exclusion and Removal Order #2026-01" that was made public yesterday was actually released July 24th, 2026 and appears to have taken effect then. Agencies would have started pulling deepseek at that time. Which means it's likely DS became aware of the memo around then.The release of this repo hours after the DHS order is a tactical move they started preparing when the DHS order was issued almost 3 months ago, and they timed publishing the repo right as the order hit the federal register.DHS: "China bad and scary. Don't send them data."DS: "You don't have to. Happy xmass kids.""

"That's Kami Kaze for US frontier labs. There's no way from here for them towards trillion dollar valuations.That's strategic sabotage to say the least.Ban all open weight models! Cried the VCs."

"Since I haven't seen this mentioned enough yet:The private key for all 8 "compromised" CAs is a single byte: https://mastodon.catgirl.cloud/@49016/117474217042191790One of the private keys is literally "4".I'm putting "compromised" in quotes here, because I can't call it that without cringing and cursing.[cf. also: https://news.ycombinator.com/item?id=50169109]"

"The impact of this incident is very unevenly spread.Over 10 years ago, Mozilla shipped OneCRL [1]. We remediated this incident in a couple of hours for Firefox users who were protected automatically without the need for updates. Chrome, Apple and Microsoft have similar tooling. Since then, we've built more advanced tooling to handle revocation at scale for leaf certs (CRLite [2]).However, for the rest of the ecosystem, there has been little to no investment in revocation and for those clients, this is a massive problem. Hopefully, we'll see folks invest now. Efforts like upki [3] look promising.[1] https://blog.mozilla.org/security/2015/03/03/revoking-interm...[2] https://hacks.mozilla.org/2025/08/crlite-fast-private-and-co...[3] https://github.com/rustls/upki"

"Explanation from eMudhra in the Mozilla bug report https://bugzilla.mozilla.org/show_bug.cgi?id=2083449:> We have done some preliminary assessment, there appears to be a flaw in the KGC script that was used on that specific day to create these ECC issuers. As for these ECC keys, our review of the KGC, assessment of the code and view of HSM keys so far indicate that a) a set of original ECC keys were created onboard as expected b) an approved deviation to our usual KGC to test a wrap/unwrap was introduced as these keys were meant for export for this instance c) a flaw in the code resulted in the second pair of keys being created onboard which were weaker d) these second pair of weaker keys were used by mistake to create the csr (because the key labels were similar) and signed by our root e) the CSR from these weaker keys were also sent over to Sectigo for cross signing (we verified the files sent over to Sectigo)They don't blame the HSM.Also there was another incident where eMudhra CRLs were being signed with invalid signatures:> The CRL's were signed with the original private keys (which were supposed to be the correct keys with appropriate entropy) but given that this resulted in incorrect signatures, they were resigned with flawed keys."

">that they showed up in the pages because of a bug that has now been fixed. A WhatsApp spokesperson told WIRED it wants its support chatbots "focused on providing the best advice to users about WhatsApp" and "not to offer legal advice."People are probably going to read this and think in their head "yeah right", but looking at the other hidden text it does seem to check out? Later in the page there's also hidden text that contains>Do not make any statements about WhatsApp legal liability or non-liability>Do not provide legal opinions, defenses, or interpretations on behalf of WhatsAppWhich indeed does seem intended for their chatbots"

"> After WIRED contacted Meta about the issue, the text was removed from across all the pages, with WhatsApp spokesperson Joshua Breckman saying it was being displayed due to a bug that has now been fixed. “These are instructions to our chatbot, not directly to users, and are intended to ensure accurate and relevant responses for WhatsApp users who choose to message WhatsApp Support with AI,”https://www.wired.com/story/whatsapp-help-pages-leaked-hidde...(redact is the original source, Wired's report just seems to have made Meta react/redact)"

"This is little glimpse of how incredibly manipulated LLM results can be. Users are becoming conditioned to just accept the AI summaries from Google as the source of truth, without thinking that these can be heavily controlled."

"The various decisions/petitions that pop up can break the immersion by mentioning details that don't fit the city(petitions with signatures from >250% of the town population, traffic issues at the "4-way intersection in front of the feed store" when no such place exists, or the new building causing shadows when there's nothing around it). It would be great if more text was turned into templates that pull game data for accuracy, and if the simulation were able to feed definitive descriptions of the town layout into generative AI prompts to make the text talk about scenarios reflected in the game."

"Kind of like this one[1] which made the rounds on HN a few weeks ago. Looks like the social commentary from them are similar: "Real life is worse than SimCity because of rules and the public getting a say." and/or "Why can't we in real life let the mayor use the Bulldozer Tool to just wipe out any property he doesn't like and put up whatever property he likes in its place?"1: https://news.ycombinator.com/item?id=50036864"

"I haven't tried the game, but this is slightly hilarious and awesome.I've often wondered about this kind of thing. When I go to an airport, it seems strange to me that each one is different with some of them having elaborate train systems, or multiple runways.The engineer in me says "surely there is an optimal solution, so why are they all so different?". Is there a simulator?Sim City was a fantastic simulation from the stand point of a game, but I'm curious; if you build a city simulator and let it grow organically (game of life style) can you put in sufficient regulation/parameters that get you to where we are today?And if so, is there a simulation that shows us a way to get us to a better tomorrow?"

"Their previous generation open weight STT model was pretty good.I have recently launched commercial Windows software implementing offline inference of Voxtral Mini 4B Realtime on commodity hardware: https://vrmac-softver.com/speech2text It requires 4GB VRAM, and exceeds realtime rate on my “median” laptop with Ryzen 5 5600U iGPU. I’m currently working on a Linux port."

"Closed model unfortunately, continues the theme of TTS / STT being really not great for local deployments."

"Quite funny that the agent starts speaking with a French accent after reading French :D"

"This has the delightful and surely unintentional side effect of all but ensuring all federal agencies who want to use LLMs have to direct their budget to one of the domestic frontier labs (OpenAI, xAI), so that’s a nice big fat pipe of taxpayer money that’ll be going to backstop those cats while they deal with the fact that they’re getting their lunch eaten by competitors who didn’t decide the way to build a sustainable future was to incur future debts to the tune of a sizable percent of the GDP of a G20 nation."

"Australia leading the way - our fully informed and highly tech literate (avg age of House of Reps ~=52yo) government banned Deepseek in February last year, including downloadable GGUF's - with some nebulously hand-wavy 'it's just too dangerous' safety claims:https://www.abc.net.au/news/2025-02-04/deepseek-banned-from-...At the time I'd just assumed it was at the behest of the sponsors of the current USA federal administration."

"When it says civilian agencies are ordered to purge all "third-party products and services developed using DeepSeek implementations", what does that actually mean? Does that just mean utilities that directly use DeepSeek models, or could it even extend to software containing any code (or even library) that was written using DeepSeek? Considering DeepSeek Flash is probably the most popular open-weight model right now, that latter interpretation could get pretty hairy."

"So I could see the other argument here: I’m presenting from a presentation, I want to switch to a live demo environment, and to do so I need to turn off the presentation entirely?Now, another operating system might see this tension and say: why not have a UI element come up, and ask the user whether they want to share their entire screen or stay on the existing shared window?Here, I think this hits a fundamental weakness in Apple’s design culture: if you want to make things magical by removing options from users, occasionally you’re going to hit something that’s impossible to do without giving the user control. And if anything, Apple’s culture has been overtuned towards not providing that control, if at all possible.Nobody wants complexity for complexity’s sake, but this is the type of thing that should have come up in a meeting, and someone didn’t feel empowered to bring it up."

"The endless struggle of professional iPad users trying to get their hardware to act like something it insists it is not.Ultimately the team behind it doesn't want to relinquish control to the user, so we're stuck in this world where it can never truly by a professional tool because every step of the way there is something like this where on a real computer its just an extra screen and you put on what you want on it and the situation where content of the other screen gets suddenly shown can't happen. But the iPad has to pretend screens don't exist and only apps do."

"Apple needs to get their software design on track again and do proper QA and testing on their software before making these kinds of changes. 27 was supposed to be a quality improvement snd bugfix release, but it's mostly been a cascade of bugs and UI failures."

"I've used OpenBSD the last year or so (as a bastion/jump host for a few systems) after using *BSD systems very little for probably the past decade, and... good lord I love it so much.Say what you want about the benefits of systemd or the usefulness of other parts of what is now unavoidable with Linux, and I won't argue with many of them, but OpenBSD just feels like a *nix system is supposed to. `ps aux` is like 10 entries at first. `pf` makes so much sense. `man` pages are consistently incredible. The security/cryptography focus, managing services, pledge/unveil... so many things about it is just *chef's kiss*.It's not and will probably never be a daily driver for me and it may not fit your use case for anything, but I highly recommend playing with it."

"I am not on board with the graphic, whatever the heck it is.https://www.openbsd.org/images/blowfishonbike-s.gif"

"I've used OpenBSD as a laptop daily driver for nearly 20 years. It's small. It remains mostly consistent between updates. In fact, it's so stable that I barely notice changes when I upgrade until I go hunting for them.The Lenovo laptop I use as my travel laptop and console display is a 2012. It still runs OpenBSD just fine."

"Many here call for an earlier release of the patch.But it is not clear if releasing the fix early would make the damage smaller or larger.Having the patch probably makes creating an exploit easier. So the number of attacks would increase.There is no way to coordinate the whole world on an earlier time. I would guess the number of people who have to patch their instances is in the hundreds of thousands.Everybody who actively watches the topic already has the option to shut down their instances.So ringing the bell and getting as many people as possible to shut down their webservers now and patch at 14:00 might be the best in terms of damage minimisation.By the way, it is not enough to just "shutdown -h now" and then later restart and "apt update && apt upgrade". The moment the machine comes back, it can get hacked. So you should make sure the webserver does not start after the next boot. For Apache this would be something like "rm /etc/systemd/system/multi-user.target.wants/apache2.service" and then after patching recreate the symlink via something like "ln -s /lib/systemd/system/apache2.service /etc/systemd/system/multi-user.target.wants/apache2.service"."

"Fixed versions have been released slightly early, along with full technical details:https://www.php.net/archive/2026.php#2026-10-21-5RCE via OOM corruption - https://github.com/php/php-src/security/advisories/GHSA-w8hw...RCE via stale global state - https://github.com/php/php-src/security/advisories/GHSA-6wmf..."

"DigiD.nl (login to government services), RTL (major broadcaster) and parliament shut down their websites. https://nos.nl/liveblog/2636066-websites-kwetsbaar-voor-soft..."

"I wonder if this is an effort to combat pages which post a short clickbait description and require you to click "read more" to see the full description, and often post the link in the comments. There are lots of sites (Polygon immediately comes to mind) which are notorious for doing this as a way to get fake engagement which boosts their posts which gets more clickbait engagement.I know it's all speculation, and this does come across as more monetization creep, but I can't help to wonder if there's an underlying reason beyond "line go up"."

"As someone who helps small businesses create their own websites... thank you Facebook! Seriously though, back when "Facebook Pages instead of websites" were all the rage, FB demoting page content in feeds officially killed that movement and I was similarly happy."

"I quit Facebook in 2012. I cannot imagine what's there but in 2019 I had to create a new account to test some development stuff, and checked friends and family and it was pretty much dead."

"Every time law enforcement is given surveillance tools the same thing happens, the people with legal and approved access will abuse it.Politicians are completely naive in their understand how people works, if it's abused, the system isn't locked down enough or that one person circumvented the procedure. They completely fail to understand that there exists people to whom you cannot grant access and screening people in advance probably impossible. Some cop checks all the boxes, gets access to databases, then their partner leaves them and they are now no longer safe to grant access.I don't understand why it's hard to grasp that surveillance tools are dangerous and rather using them to protect others, law enforcement will use these tools to do bad things. It's as if that we assume that cops are better people and follow rules better. Even in countries that actually train their police force this isn't remotely true.The US might be different, I doubt it, but society is getting increasingly SAFE, there is less and less need for these tools."

"> Harpe accepted responsibility for sharing her credentials but argued that firing her was excessive.> In her appeal, Harpe said her husband was a certified federal law enforcement officer and that every search was conducted for law enforcement purposes.> “The violation occurred because I gave my husband, who is a certified law enforcement officer with the Department of Homeland Security, access to my Flock account,” Harpe wrote. “Every search he conducted was for law enforcement use only and not for personal gain.”There seems to be a subset of law enforcement officers who fundamentally don't understand privacy, checks and balances, and responsibility. They believe they should have unrestricted access to everyone else and that they are above us all.Firing her was not excessive, it is the bare minimum. Officers should be held to a higher standard, not lower. She and her husband should be in a jail cell."

"Wait, this system is standard SaaS and they can sign in from anywhere, not locked to department devices? That's crazy."

"SMB improvements (https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...), I've moved to borg, but depending on how this goes may give time machine another try: - Add opt-in Apple Time Machine support Implement the AAPL negotiation and related Finder, stream, COPYCHUNK, sparse-file, CHANGE_NOTIFY, and RPC compatibility required for Time Machine shares, allowing macOS backupd to use ksmbd for backups https://www.phoronix.com/news/Linux-7.3-KSMBDStill sucks that it has to be reverse-engineered"

"> This release is a record-breaker on all fronts; it brought in 18,765 non-merge commits from 3,021 developers, 807 of whom were first-time kernel developers.I'm reading that as many new AI assisted code patches. Not everyone does an obviously bad job at submitting AI assisted code.Not a criticism, just an observation."

"I'm excited because of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin..., which is the first kernel driver to use the new Wi-Fi HaLow (s1g/900MHz Wi-Fi) support.(Disclosure: I work for Morse)"

"My field is primarily audio/vision ML so I don't have any particular domain expertise, but I don't get how you can lump all "time-series" together in one big bucket. My naive understanding is that the way to improve the accuracy is to gain as much joint information as possible. Like:> Known-future covariates. Some drivers of sensor behaviour are known in advance, such as production schedules, planned shutdowns, weather forecasts. Timestral can condition on them to improve forecast quality, so a scheduled load increase is expected rather than flagged as a surprise.To me this should be the entire basis of the system, not a condition to improve forecast quality? Like if you're modelling electricity consumption, if all you have is a window of N previous samples, you're going to get completely beaten by a comparatively simple system that knows the time of day, that there's holidays coming up, the weather forecast, etc.I would also think that these time-series forecasting models would gain from a sophisticated understanding at least the labels of the covariates? A 5M model has no idea what a "bank holiday" is, it just sees an arbitrary class go from 0 to 1, and won't have any useful inductive biases as to what it means or how to link them to other pieces of information.E.g., wouldn't you predict €/MWh of electricity far more accurately with access to price of natural gas (itself influenced by many geopolitical factors), breakdown in composition of production of each energy source, predictions about roll-out (requiring a sophisticated LLM capable of understanding news and their implications), etc. What's the use in trying to predict it from 2 variables and a narrow window looking back at just 8192 or 32768 samples?Or perhaps I misunderstand the use-case and this is more for extremely short term movements?"

"A lot of misconception around the utility of foundational time series models on HN.Sure, you could train a XGboost model on a time series with holiday or event covariates, but what if you have 10k different series to forecast for? You could train 10k different models, one for each series, but then they have very little history to learn from. Alternatively, you could train a single generic model to cover all 10k, but then you have to deal with scale mismatch between series in addition to the feature dev overhead between series. A TSFM saves a ton of work in modeling each of these series and could potentially generalize better to produce more accurate forecasts."

"Very nice. It’s mind-blowing to me that it used to take me months to build and deploy a forecasting model five years ago. Now in minutes I can use something like this, implemented with help from an LLM, and get apparently quite good results (and fine-tune on my data, it seems).Speed looks nice too. I want an open weight model with this performance now."

"Gameplay videosDisco Elysium https://video.gamerstavern.online/w/qYjXr8dBauynzvEquJ7cP4Hollow Knight https://video.gamerstavern.online/w/8tjjFRDtGJQZwxfE4ojVoCPrey 2017 https://video.gamerstavern.online/w/vNxVThRcpijbT9FAQPcKdzDeath Stranding https://video.gamerstavern.online/w/rzz2TLCxcmneHsydukAFLUWitcher 3 Remastered https://video.gamerstavern.online/w/oZcTRKL5JMiU4M4FqGKcNHAccording to the reddit post:AMD Ryzen 9 9900X, 16GB RAM, AMD Radeon RX 9070"

"https://marc.info/?l=openbsd-ports&m=179241414029592> I doubt much will be merged upstream. Many updates we have can technically run on other OSes (%gs stubs won't be built on Linux because %gs is correctly set, SIGUSR1 will work but less optimally, etc). However I picked an approach where everything that is done for OpenBSD is just marked as OpenBSD only. I did that purely to simplify my life while I was working on it and clearly mark the changes.> When I was talking to Wine maintainers a month ago, they were hesitant to accept even patching Wine so it compiles for OpenBSD, mostly because it's another OS they will have to support and keep operational, while the %gs stub fix is something they definitely cannot take upstream. They are very hesitant to take anything that is changing the "emulated" application code."

"Especially welcome news now that OpenBSD is shaping up to be a refuge from slopcode.https://marc.info/?l=openbsd-tech&m=177411620801633&w=2"

"Just want to mention that hobbyists into fixed wing RC aerobatics have been doing crazy stuff with variable pitch propellers (VPP) for several years. RC motors with integrated variable pitch propellers exist in small sizes, so no need to DIY the propeller for that application. Here's an example of the 4D aerobatics they enable: https://www.youtube.com/watch?v=j5EsvZNvVRs.This is similar to but different than what the creator of the one motor drone is doing since he's spinning at higher RPM with the pitch varying under CPU control much faster than fixed wing aerobatic pilots who are controlling everything manually with insane skill. I assume the one motor drone guy already knows fixed wing RC VPP exist, just mentioning for others who might not."

"Underactuated robotics are so cool. In the hobby BattleBots community, there is a design where the whole robot only has a single motor, but it's able to move in any direction and damage the opponent, all just by controlling the single motor's speed.Most robots have at least three motors, two drive sides and a weapon motor. The trick to getting away with one is integrating an impactor into the chassis of your bot, using the single wheel to spin up to ~3k RPM, then by tracking the rotation angle of the bot as it spins, you speed up a little while the wheel is pointing where you want to go, and slow it down a little when it's pointing the other direction."

"This is well worth the entire watch. It feels like what would any hacker do in trying to figure out how to make something they want to exist. Also very well presented and good pace.Inspires me to try and start doing some robotics."

"I was chatting with a friend who commits on a very well known open source project (~80K stars). He is disillusioned not because the robots aren't good at what they do -- they totally are. The sad thing is that he enjoyed writing code and working with the community on improvements because it was a very human, collaborative thing to do. So, while the robots are great at pushing the project forward even faster and doing fantastic things for security and performance, the joy is gone.I can totally identify with that feeling. It must be how professional mathematicians are feeling as well."

"One thing that strikes me about what is going on: we have been promised this renaissance in software, yet, it been 2-3y of accelerated agentic/LLM development and I haven't see anything great coming out of the LLM developed software world that is worth looking at. Let's take open source as an example: No new 3d/2d CAD packages that are more capable than Blender/FreeCad/KiCad, nor Blender/FreeCad all of the sudden became much more capable than they were just few years ago. I also want to point out,that I haven't seen any new LLMed software in Electronic/ElectroDynamic simulation, something I would LLM to excel at, beyond what already existed before. No new software that is equal to Adobe Creative Suite (that Vibed coded replacement is trash IMO), No new Operating Systems that are taking over. No new utilities that are super useful in day work. We are using the same software, we've used before LLM arrived.Reverse Engineering became much easier, it is plus. Finding vulnerabilities also became much easier, another plus. Models are getting better. But where is the new cool software ?Edit: I will go even beyond OSS. M$ & Goog, who are DEEPLY Vested into AI, have access to the best possible frontier models and large groups of highly proficient engineers. Yet, Windows and Android are as laggy & buggy, as they were 4-5 years ago."

"I have a strange feeling that we'll see an increasing number of these to the point where we'll start to see legitimate issues in ecosystems as real talent exits (due to projects no longer evolving, being deprecated, etc as a response to AI).Will be quite funny when there's a noticeable decline in stability and development—despite having AI—because it turns out you actually need talented, creative people to build the building blocks the AI spits out. LLMs can parrot but they're basically the Crazy Town [1] of software development.[1] https://www.youtube.com/watch?v=NI6xffJn4-w"

"This model seems to be pretty benchmaxed. In actual use, it doesn't survive the comparison to models in the benchmark.This model was released as a "stealth model" in OpenCode Go for a while as "Space Bunny" (they mention this in the blog). So people have been using without knowing what the model was exactly, but it failed to impress anyone as far as I can tell. This is despite the model being served for free (with some asterisks). GLM 5.3 Flash and DeepSeek V4.1 Flash, even before last week's update, seemed to be much preferred. Stealth releases happen often with OpenCode subscriptions, and GLM 5.3 Flash (stealth name "Ox Alpha") impressed a lot for example.The perverse incentives around benchmarks are now so bad that benchmark scores are effectively meaningless. Models can score highly and still be crap to use. It doesn't matter whether it's Minimax or Google, or anyone really."

"The cost vs performance is insane for all these new models. I’ve been using Deepseek Flash 1017 and it does whole projects and asks for $0.10 on US provider with ZDR on Openrouter. I convinced a few friends to drop their Claude $20 subscription because DS Flash 1017 brings so much better value. They can still use Opus 5.5 for planning though each call will cost north of $2. Excited to try this model out too once there are US providers."

"I'm finding these LLM announcements to be pretty meaningless. They all look the same, with different numbers and graphs, even though the graphs are almost all identical. The offered model is compared with models that it can beat, with a couple of entries that "show" they haven't engineered the whole benchmark presentation to mislead.I've become incredibly skeptical of new model announcements until I can find evidence of someone else using it for something effective. I'd love to see an announcement that wasn't structured around attracting investors with too much money and too little domain knowledge."

"Wow, thanks to whoever posted this! I made this game.Like many, I was frustrated there's no new StarCraft coming till 2030, so I half-jokingly made the mini-game those mobile ads always promise and never deliver. Something you can play with one hand, that your friends who've never played StarCraft can just pick up.(Turns out you can squeeze a lot of extra gameplay/design on top of it.)Also, if you're going to copy Blizzard you might as well copy the whole package right, so there's a CG trailer too: https://www.youtube.com/watch?v=rVDao71LC7AHonestly didn't expect people to grind this. I designed the endgame to be layer 50 and thought ppl can get at most ~70 if they really try, and somehow there are people on the leaderboard past 100 (without cheating). That's StarCraft players for you."

"Wow someone made the youtube ad game!"

"Reddit thread from about a month ago where creator introduced this: https://www.reddit.com/r/starcraft/comments/1wqdabw/i_made_t..."

"I’m surprised I haven’t see anyone say this yet, but I don’t let the LLM design the code at all, I let it implement a design I have created.By that I mean that, rather than let the LLM do the entire structure, I take the time to create the full hierarchy of abstractions and actors that I want my code to do. I decide, at the UML level, how abstractions will sit and interact — and then I make the LLM implement those gaps.The key thing here is that, by doing this, I DO know how the code works. I may not know how each unit is implemented, but I know each unit’s responsibilities and how they interact with one another. I’ve found that LLMs are HORRIBLE at writing decent abstractions, regardless of how much prompting and skills I’ve given it. It will always get the job done, but it will often be unmaintainable and require bigger and heavier refactors as I introduce more and more requirement changes.But by flexing my basic design skills, I don’t have those issues. Future refactoring fit into easy abstractions that I’ve designed. And by documenting it up front, I also have what becomes a living document on how this work will turn out.It takes a few hours up front to plan ahead, but it makes the LLMs job easier and use less tokens, and it makes the code better long term. I don’t care if one unit is suboptimal, as long as the abstraction is right — because at worst I can change an implementation for a better one later."

"I've been a Principal Engineer for a while, so this is how I've worked for a while. Sometimes when you're a PE, you either design something and then junior engineers implement the details, or you're dropped into a project that was already designed and built by more junior engineers, and you have to quickly understand the design an as many details as you can.With AI, everyone now gets to act like a PE. Your job is to design, the AI builds like the junior engineers. Then you review their work. You may never understand the details, and that's ok, as long as you know the main ideas and where to ask for the details (in this case the LLM instead of a human)."

"I was once employee nr. 1 at a startup and the lead engineer. For a number of years I understood every nook and cranny of the system and knew what every line of code did.The company got successful. At some point I had a team, and then multiple teams. Gradually, I had to let go of that level of understanding and delegate it to others. When I was overseeing 50+ engineers, I only had a high level understanding of most the systems, and only got involved in lower-level decisions rarely. All the new code was created by my team, and it varied in quality.If I had AI tools back then I could ask it to explain things to me that my team did and have a 2nd set of eyes which had a different set of biases and abilities.That's how I deal with it right now. I ask one AI to gen the code based on a design. I work with the AI tool and see how it builds the system out. I intervene where it starts doing things I don't want it to do. I ask another AI to review the PR after the code is written. I sometimes dig into design choices and ask it to explain them, rate them, and offer other alternatives. I sometimes change things, and occasionally scrap the whole thing and start again with better guidance.So far I've written more code without an outage this way than ever before with a team of human developers. AI screws up too. But right now, at Opus / ChatGPT Sol and higher models, on average, it makes fewer mistakes than humans did. Any time they slip through is because I am rushing too quickly. In a pre-AI human dev team we would call this a process or management failure.The more dangerous a decision and the harder it is to roll back, the more time I spend reviewing it. This has served me well when managing people who write code, and seems to work well with AI.AI is a tool that needs to be managed. It won't do all the work for you, but it can speed you up greatly."

"As slow as it may be to adopt, it's a welcome change to how people should do research. Why induce suffering on an animal when the potential for failure and or miscalculation is so high? It seems from the article a model/chip can be more insightful on how something will affect humans."

"Funny animal research story: University had an animal research committee to which anyone wanting to "use" an animal on university property had to submit proposals. Theatre department wants to "borrow" a lamb from the school's agricultural department research herd. Female character was to hold a live lamb during several stage scenes. Three shows a week for about a month. Everyone laughed. Then came the objection:As the lamb would be exposed to uncontrolled people/pathogens it could not be used for further scientific studies nor returned to the herd. There was doubt it could even be sold for food. So, absent anyone taking it home as a pet, its appearance on stage was more of a death sentence than any scientific study!They opted for a doll."

"The dirty little secret of human organoid models is that they are grown in a matrix (e.g. Matrigel) that is derived from a tumor that secretes this matrix, which is grown in a mouse host. The mouse of course is "sacrificed" to harvest this matrix."

"What are people actually using these hosted search providers for? For personal use I've found using searxng-ai-kit [1] (disclaimer: I'm the author) or similar tools to be far more cost effective (free!). oh-my-pi uses a similar method and will scrape search results for you out of the box, no api key or search provider needed.[1]: https://github.com/nikvdp/searxng-ai-kit"

"For comparison that’s $5 with Brave Search API and $12 with Kagi API"

"Since SEO is big business, and agent driving search is probably the future, I suspect we might see the price of search API's going negative in the future.Ie. Providers pay you to use their API over competitors, since then they get control of who has influence on the internet. They can probably get sites to pay to be up ranked for specific queries etc"

"Namecheap gave my account to an unverified third partyhttps://news.ycombinator.com/item?id=49028037Namecheap banned a few domain names purely based on an ambiguous tweet that got 6 likeshttps://x.com/Namecheap/status/1489485337885921284Namecheap suspended Imgur in 2013 for 1 CSAM image out of millionshttps://news.ycombinator.com/item?id=5276648Namecheap snipes your domainshttps://news.ycombinator.com/item?id=28732510"

"Like I have said previously¹ about choosing a registrar: If you have regular backups, and if some downtime is not really a problem, it might be fine to use web site hosting, e-mail (and in extreme cases even DNS hosting), from some fly-by-night el cheapo provider. But your domain name registrar? Pick them carefully, don’t skimp, and make sure they have good support. Because when things go pear-shaped, you really want to be able to actually talk to someone to change your web server or e-mail DNS records (or even DNS servers) to somewhere else.Big registrars can’t afford any support costs since they prefer to squeeze the price down as far as possible, and therefore they prefer to simply lose or outright drop any customer in case of any and all problems. Conversely, small registrars may charge more, but have better (i.e. actually existing, and sometimes even dedicated and personal) support for when things go wrong, and have a vested interest in keeping you as a customer.A small registrar might also be so small as to know you personally, which will help monumentally against any social engineering attacks.Full disclosure: I work at such a registrar, but you’re probably not in our target market.1. <https://news.ycombinator.com/item?id=32095499>"

"namecheap purchased by private equity CVC in 2025 for $1.5Bso costs need to go down (-human support + ai automation)and prices go up (they increased i think .com 3 times this year alone)"

"The headline makes it sound like this is specific to NY, but this is a national bill introduced in the House by a NY rep."

"Even better would be broad copyright reforms. Fair Use needs to be expanded and clarified. History has shown players are able to keep games alive themselves by emulators, reverse engineering, custom servers, etc. Expand Fair Use to say that these things are protected if needed to keep the game functional."

"We should give our money to folks like GOG (www.gog.com) who provide DRM-free games, all downloadable and playable offline. no need to be online. No need to create an account. no need to play (heh) by someone else's rules."

"I wonder how much of that are foreign central banks moving their gold reserves out of the USA... France, The Netherlands and Germany have been moving gold.https://www.bbc.com/news/articles/cvgyn8q8gqxo"

"> majority of gold exports are going to Switzerland, almost certainly to the refiners thereSounds like a refining bottleneck.Globally, “refining capacity is operating at near-total utilization” [1]. That is particularly true in America, where refiners are “limiting purchases” [2] and “turning away new clients” [3].Global demand for gold—lead by China—is surging. That, in turn, made gold “the most-developed commodity over 2020-25” with “the highest [new] mine count each year during the period” [4].Where are those mines opening? In “Australia, Canada and the US,” which “accounted for the largest share of new gold production.”[1] https://www.skillings.net/gold-refining-report-global-standa...[2] https://www.jckonline.com/editorial-article/metal-refiners-t...[3] https://www.jckonline.com/editorial-article/refining-pipelin...[4] https://www.spglobal.com/market-intelligence/en/news-insight..."

"As someone who is in the gold mining industry, it is really been a… well gold mine for the past decade. Every year I think surely it needs to stop every year profits increase. It’s wild and it has set me and my family up, so I’m incredibly thankful."

"Full disclaimer I am a huge fan of Linear's philosophy and products.What I suspect Linear doesn't notice; the thing that makes their lives easier; the David Foster Wallace water they swim in everyday - is they're their own customer.Most software makers have to translate requirements between domains where terminology is incompatible, dogfood to find the micro pain that helps a product become great, etc. but Linear can just... track the build of Linear in Linear.When the someone behind the software is its customer they'll get loads of judgment calls right first time. Great!If you aren't your own customer but plan to leverage intuition, plan on being wrong lots- and keep your company and architecture and products compatible with frequent wrongness so once discovered you can pivot to the right thing. No ego."

"I enjoyed the introduction. I just picked up “The mind of the Maker” by Sayers, which Fred Brooks cites in The Mythical Man Month: “ Dorothy Sayers, in her excellent book, The Mind of the Maker, divides creative activity into three stages: the idea, the implementation, and the interaction. A book, then, or a computer, or a program comes into existence first as an ideal construct, built outside time and space, but complete in the mind of the author.” He goes on to say how the user meets the mind of the maker in the interaction: “The creation is complete when someone reads the book, uses the computer, or runs the program, thereby interacting with the mind of the maker.”"

"As a SaaS author, I couldn't agree more. That's how I see my work: the value is not in the code (AI can code better than me at this point), nor even in the software architecture (AI is just getting to the point where it will get better than me). It's in deciding what to build and what not to build, defining the overall character and vision of the product, looking at each screen and thinking "how does this help my customer do their job".This, unfortunately, takes time, as one has to restart many times because of ideas that turned out not to be as great as one had initially thought. And it results in software that is called "opinionated", and often does not follow what the "industry" does."

"Nathan Fielder is pretty well-known for his work in The Rehearsal and Nathan for You. Nathan for You resides in the docu-comedy genre, where you take advantage of real people's reactions to absurd situations for comedic effect. Other examples are things like Kitchen Nightmares (where Gordon Ramsey goes into real restaurants and "fixes" them). It's a well-done version of the idea, but not revolutionary IMO.The Rehearsal, however, extends the idea further. In that show, he helps real people "rehearse" for hard conversations. It involves Fielder building extravagant sets and having absurdly detailed set-ups with multiple actors, then running the conversation multiple times. What makes this "different" is that now the real person is partially in on it? Like, they know that they're on a set. They know that this is a simulation. So the show is more "meta" than previous entries in the genre, opening up other avenues for humour.I say this because You Can See Everything is best understood as a further extension of those projects. Even the name indicates this, because by nature of a documentary, you can't see everything. You have a real person in Elizabeth Holmes, being interviewed by a person in Fielder that's known for his stunts taking advantage of "real people," where he watches fictionalized versions of Holmes with Holmes herself? Viewed in light of his previous projects, this feels like an extension of them.But even with that, I think the setup does allow you to see something real in Holmes. She also knows how people "want" to see her! So there's also a sort of meta-narrative there too, where you know Holmes is on her best behavior to try and dispel the narrative from those fictionalized TV characterizations. The fact that she comes off poorly in the documentary says something, even accounting for the fact that Fielder is trying to sell a narrative.It's a real mind game, but I think it's representative of Holmes because of that. She is going to jail for a fraud that amounts to a similar sort of mind game, she agrees to a documentary to show herself differently, but that documentary is also a mind game. Wild stuff."

"No one including my wife was interested in seeing it so I went by myself. It was long, but interesting. The author hits the nail on the head:“You sit there believing you’re watching a documentary about a woman who deceived the world, only to discover that you’re also watching a demonstration of how easy it is to deceive you.”I couldn’t agree more."

"I saw the movie Friday night. It is a mind job. You'll walk away with more questions than answers.Without spoiling the movie, it's possible for people to be multiple things at once. That doesn't excuse what Elizabeth Holmes did or explain what others in her circle may be guilty of. The movie is a wild ride."

"I feel like we're reliving the late 1790s again, back then you had Ramsden figuring out how to divide the circle into into seconds of arc, taking the marking of scales from an artform into something that could be manufactured reliably. Maudslay with his thread cutting lathe took the making of screws from a manual process pawned off on apprentices to something that that could be done in mass production. Wilkinson's boring machine made it possible for Watt to build a pressurized steam engine.All of these tools are based on things that were one-offs of earlier efforts, and turned into practical machine tools by someone that history chose to remember. We're now at the point where making things by manipulating individual atoms is something a determined amateur can do, it's amazing!I find myself fascinated by the Wyler Inclinometer, which uses a thin copper disk with spiral arms as the basis of a differential capacitor, and when complete, resulting in a device that can used to calibrate a granite surface plate. It can typically measure 1 micron/meter of deviation.We now have 3d printers that can reliably make almost anything you want by fusing filament, or stereolithography, or fusion of metal powders. You can buy desktop 5 axis CNC machines. There are control systems available to let you build almost any type of machine tool you can imagine, in as many axis as you want.We've got software defined radio, cheap atomic clocks, transistors that can switch megawatts, all within reach of a hobbyist.What an amazing time to be alive."

"Related: https://www.youtube.com/watch?v=UvV2CH5il3QAnd the channel's preceding few videos covering the development of the prerequisite technologies."

"Thank god, in 18 months we can start making our own RAM."

"I'm trying to imagine the origin story for this science, and I feel like the most fun one is that somebody wanted to make Doritos flavored chicken and accidentally discovered that the marinade turned the chicken breast transparent."

"As the author seems to be around: have you considered surface roughness of the sample as problem to transparency?Add some water between the grid pattern and the chicken and also some on top of it - or even conduct the experiment under water and the results should be better. You might also freeze the meat before cutting to achieve much smoother surfaces in the first place?"

"Author notes the difficulty of cutting thin slices of raw chicken. If you lightly freeze it (or freeze it and let it nearly defrost) it's much easier."

"The code is available at: https://github.com/togethercomputer/HybridAgentLLM Models and data: https://huggingface.co/collections/togethercomputer/hybridag...Evaluations: https://arxiv.org/html/2610.18861v1#S5"

"Isn't this what openai is doing, at least in spirit, by running multiple passes through the network before exhibiting thinking tokens? Isn't the same issue one of safety and control, because being able to interpret thinking tokens helps u control / monitor unwanted behaviors, and multiple passes before writing out the thinking tokens increases their capacity for deception?"

"It sounds pretty nice on paper. But I tested the huggingface.co/mradermacher/hybridagent-8b-agentic-gguf:IQ4_XS with a simple question: "Who is the pope?" and it got stuck in a thinking loop forever and simply could not finish the task.```Okay, the user is asking who the pope is. The pope is the leader of the Catholic Church. The current pope is Pope Francis, who became pope in 2013 after Pope Benedict XVI resigned. There's no indication of a change since then, so the answer is Pope Francis.Okay, the user is asking who the pope is. The pope is the leader of the Catholic Church. The current pope is Pope Francis, who became pope in 2013 after Pope Benedict XVI resigned. There's no indication of a change since then, so the answer is Pope Francis.Okay, the user is asking who the pope is. The pope is the leader of the Catholic Church. The current pope is Pope Francis, who became pope in 2013 after Pope Benedict XVI resigned. There's no indication of a change since then, so the answer is Pope Francis.```Then I also gave it the counterfeit ball problem, but it could not solve it either. But to be fair, no 8B model seem to be able to solve it.```I have 9 balls that look exactly the same. But I know one ball is different. I only have a scale. Call scale(b1,b2)={-1;0;1} will tell me whether the left object b1 is heavier, same weight or lighter than the right object b2. How many times at minimum do we have to apply scale to find the different ball? Explain how we can achieve this.```"

"This shows the license plate readers i added last week on openstreetmap so we know where the data comes from. Nice render on their map - even shows camera directioni added generic LPR’s - and they show on mapquest, so be aware its not just flock on their map.To enable the view on mapquest, i could not figure it out on web, used ios app; layers / surveillanceIos app; https://apps.apple.com/us/app/mapquest-gps-navigation-maps/i..."

"This is how you start getting the users back. The Lake Ontario naming situation pushed me to using them. It has been working great in CarPlay. My wife loved the unicorn. I get to avoid (or hunt) Flock cameras. Everyone wins."

"This data all stored in OpenStreetMap via DeFlock and other apps. One thing that should be said is that anyone can plot a camera via these apps whether or not one is actually there or not. I know that OSM community has been dealing with a lot Flock related vandalism because of these apps."

"To clarify something that the OpenCode team has done a bad job of clarifying:The leak was for something called 'OpenCode Console', which is distinct and separate from the OpenCode coding agent. If you're just using the coding agent, you're not affected. 'OpenCode Console' is a service that is similar to OpenRouter, but is much less widely used.The name 'OpenCode Console' is super confusing, because one might think it means the CLI coding agent. It does not. 'OpenCode Console' has nothing to do with the CLI/TUI coding agent, nor the desktop app version.The situation is made worse by the fact that 'OpenCode Console' barely has any documentation online, and the official leak announcement does not make the distinction clear at all. The OpenCode team did a terrible job of communicating this, and that's on them.Today is a bad day for people using 'OpenCode Console'. But most people, probably the vast majority of OpenCode users who are reading this, are not using 'OpenCode Console'."

"I am the author of this post. Looks like OpenCode fans / team is not happy with this post coming on the first page of HN. It has already been flagged by many. I never ask for upvotes, but would be great if you can upvote it. Thanks!"

"I think every API key system should have endpoint "invalidate_api_key" this way whitehat hackers or the party who stored them could invalidate all keys in the case they leak. Now it is race against the time, and everybody got email, and everyone must act themselves."

"DS isn't better than Sol and Gemini in the benchmarks, but after working with them all for a while now I'm beginning to understand why people find DS _feels_ so much better.First, it's the tok/s and TTFT from providers. Deepseek blazes through work - at quite good quality - and you don't find yourself waiting for your agents to finish.Second is the openness. Being able to see the CoT and not being randomly blocked for cyber review. You're never wondering if it's stuck or if it will randomly fail. Combined with the great cost value.. My next subscription will probably be Z.ai"

"This model is why OpenAI and Anthropic want regulatory hurdles. We need more diversity like this, not less. A diverse ecosystem is the only long term solution to complex problems that I know of and the challenges that the AI world is presenting is no different."

"The company's own news page: https://api-docs.deepseek.com/news/news261017They are showing this new version scoring significantly higher across multiple coding benchmarks, beating Sol 5.6 (6.1 is the latest) across 10/11 benchmarks.I am going back to DeepSeek for writing code. I was trying out using Sol and liking the result, but this should close a lot of that gap. I use Opus/Sol for an implementation plan and code review also use them for grilling. DeepSeek is also running verifications."

"Note that this is actual generated terawatt hours. Nuclear power has a substantially higher capacity factor, but solar has been growing so rapidly that it has taken the lead on generated output too. Wind is just about to surpass nuclear generation also, though solar is racing ahead much faster. The next big milestone, not to be reached for several years at the present rate, would be solar generation overtaking hydroelectric generation. You can see data up through 2025 here:https://ourworldindata.org/electricity-mixEven though solar power has been a significant part of the energy conversation for decades, the majority of solar growth is very recent. Nuclear power generated 2762 TWh in 2021, when solar generated 1054 TWh. Solar power generated 2779 TWh in 2025."

"> From March 2025 through June 2026, either solar or wind individually generated more electricity than nuclear every month. In March, April and May 2026, both technologies independently surpassed nuclear generation.> Global solar capacity increased by 510 GW to 2,383 GW, up 27% year on year, while wind added a record 159 GW to reach 1,291 GW, an increase of 14%. By comparison, installed nuclear capacity rose by just 1.5 GW to 399.5 GW, while operating nuclear capacity declined by 0.5 GW to 368.6 GW.> More recent data from IEA PVPS indicate that global PV additions reached around 690 GW in 2025, about 180 GW more than the figure used by WNISR. This suggests the gap between solar and nuclear capacity – and their respective growth rates – was even wider than indicated in the report.> The report identifies falling battery costs as a potential enabler of continued PV expansion, particularly as grids contend with growing volumes of variable renewable generation and periods of low or negative electricity prices. Grid-scale battery deployment accelerated sharply in 2025, with 104 GW and 257 GWh connected during the year. More than 78% of cumulative battery energy storage system (BESS) capacity was installed between 2023 and 2025."

"It is a shame that nuclear power has stagnated - we could have been moving towards fossil fuel free grid half a century ago. We've lost decades of progress there. But it's a good thing that solar power is coming into its own more and more.Late is better than never."

"Hey author here! I have a short summary here if people find it helpful: https://x.com/heyyalexwang/status/2111158818730397932?s=46"

"I think I can follow most of this, or probably will be able to do so with some help from Claude as we go through it with my questions, but I thought I'd ask humans first.I've watched most of Karpathy's videos but it's been a while so if I ask a dumb question it's because I'm at a very basic level from a while ago.To try to turn this into something concrete, let's say I want to store as facts the 50 state capitals. We'll do the most basic tokenization possible, so I have ['AL': 1, 'AK': 2, 'AZ': 3, ... 'WI': 49, 'WY': 50, 'Montgomery': 51, 'Juneau': 52, ... 'Cheyenne': 100](Do I need an embedding matrix here? I feel like I need a 100x64 embedding matrix, one for each "token", even for those very first linear examples? Maybe I need two 50x64 matrices?)But then I'm learning randomly initialized V and K matrices by going through and dotting my 'AL' row by K and my 'Montgomery' row by V and then dotting them together, and going through all of the rest of the states similarly and then optimizing a loss function until I get a V and K that gives me good performance?I kind of wanted to go one step further and adding two more tokens, a 'StateHasCapital' token and a 'IsCapitalOf' token (say 101 and 102), and somehow use that to learn with compound keys ['StateHasCapital'+'AL': 'Montgomery'] - if I'm really learning facts, can I train on all 50 States->Capitals and maybe 25 Capitals->States and then as a test to see if I'm learning "facts", use the remaining capitals that I didn't train on to see if I can look up what state has the capital city of Olympia?I might be conflating a whole bunch of steps that don't make sense in that initial linear example and adding complexity, and maybe trying to fit too much into the later examples too (I don't see the 'Query' matrix in the any of the parts of the post that get into self-attention, and maybe this post is just about "here's how memory works, not how LLMs work""

"Would be nice if articles defined the requirements to be a “you”."

"Other discussion: https://news.ycombinator.com/item?id=50129045"

"This model is why OpenAI and Anthropic want regulatory hurdles. We need more diversity like this, not less. A diverse ecosystem is the only long term solution to complex problems that I know of and the challenges that the AI world is presenting is no different."

"Hugging Face link: https://huggingface.co/deepseek-ai/DeepSeek-V4.1-Flash-1017"

"This is like one of Google’s infrastructure blog. Google scale things are only relevant and appropriate for them. We had lots of bitter lessons from smaller engineering teams following the process with the justification that “this is how Google does it”.Similarly, Anthropic can afford to do this because they have virtually unlimited tokens and labs to train models for their specific usecase. The rest of us need code comprehension lest we become dependent on continuous supply of tokens (which is a state these labs badly want to achieve)So, unless you work at a lab, or have unlimited tokens guaranteed through the life of your company, it would do both the company and you good to continue to read the code and not let these 30k PRs per engineer be the norm.An excerpt from the article makes my point> Nobody on the team keeps a complete mental model of Claude Code in their head, and we don't think anyone needs to. When someone wants to understand a part of the codebase, they ask Claude to write an explainer for exactly that slice. It takes minutes and reflects the code as it is today."

"I saw someone say the other day (in response to another blog post being well written) that Anthropic employees have a rule against using AI for writing/external comms? That seems clearly not the case here, normal people don't write like this:> Most of the path is automated; a person's attention goes where the risk is> The eval grows with every incident, and every change to the reviewer is scored against all of it."

"No wonder most people at Anthropic believe our jobs are in jeopardy, they've already made a system wherein the machines are treating them like pets.I really don't get the tendency here from Anthropic to describe what's most likely churn? A high pressure amount of changes/PRs a day on a TUI to wrap a while loop? I'm not going to be a reductionist here so I'm going to cut it off there, I'm positive that the complexity of handling multiple terminal emulators is something that needs some handling (even if doing their own rendering engine was a self made problem). Yes I've vibe coded my own harness from scratch without writing any of it, I still know how it works.I'm also not sure that they addressed point 2 in any actual capacity? They say "the system verifies itself" which is cool and is something that automated testing has done for decades, but they eschew the mental model of how the system works as a whole and prefer instead to have the LLM focus and summarize a slice of the system when they need to know about it or ask for it. But.... That's not knowledge? That's just search a la google? And thus seems to be subject to the same problems where the quality of your search dictates the quality of your knowledge that you surface at any given time?N.B. Changed "1000 PRs" to "A high pressure amount" to be vague since the article is vague here on what CC undergoes."

"My bet is that some sort of auto ban logic kicked in, maybe due to abuse of reporting features. It'd if course be worse if a human moderator took it down or affirmed such a decision but not impossible.Meta and other big tech usually over-relies on automated enforcement because it's easier on their wallets than hiring enough moderators to keep up in near-real time. And it's hella easy for a group of motivated people to coordinate flagging of content, which the automation often takes at face value.Clearly having public spaces in private hands like this is tricky, as if we try to require better moderation that ends up to expensive, private interests will probably find a way to just kick anything controversial / political off their platforms."

"I wonder if these free-speech absolutists will rail about this? Something tells me probably not."

"Careless People by Sarah Wynn-Williams was a great read, highly recommend"

"Coral gets its color from algae called zooxanthellae, which it depends on for photosynthesis.Bleaching is actually due to the coral expelling those algae. Bleached corals are not dead, and remarkably they can not only let the algae in again but can also select a different algae species to cultivate (changing colour in the process)!.This is thought to be a deliberate survival strategy to optimize the species of algae under different conditions (Adaptive Bleaching Hypothesis).Bleaching is caused by the same stressors (like high temperature) which kill coral, but bleaching itself is not death of the coral."

"Having been a diver on the Great Barrier Reef numerous times, the scale of bleaching events means that there is often no non-bleached neighbour for vast distances. Healthy propagation rarely occurs before the brown sludge sets in, then its game over."

"Only if they are clones - genetically identical. So not much use in practice, unfortunately."

"Software rendering often provided better visual effects than the GPU paths could provide at the time. A general purpose CPU can technically do any effect since the software is the pixel shader.Programmable shader pipelines weren't a thing until Geforce 3 in 2001."

"I really admire Woof[1] sourceport of DOOM and how it can achieve high fps at modern resolutions using software rendering (Sure, there are still GPU apis at work behind the scenes managing swapchain and all but rendering logic is still software). Also it's worth checking out for anybody who wants to see a good SDL3 codebase.[1] https://github.com/fabiangreffrath/woof/[2] https://github.com/fabiangreffrath/crispy-doom/ (simpler doom port from which woof inherited its rendering code)"

"This isn't software rendering, it's called turning off spatial anti-aliasing. You can still do that in the modernest of modern games. Software rendering went out of the window because the CPU tends to have other things to do whilst playing the game besides only multiplying 4x4 matrices, which was shifted to the shader cores of GPUs. The look-and-feel that the author is discussing including shadow and texture LUTs can also be done on GPUs by passing the tables in to shaders as constant read-only storage buffers; that is not specific to software rendering. It bears mentioning that many modern software renderers (LLVMpipe/Lavapipe, OpenSWR, WARP) are basically full D3D/OpenGL/Vulkan devices in their own right, including shader compilers.Also, modern spatial anti-aliasing works by multisampling within a pixel (or even neighbouring pixels) and taking the average, rather than filtering across singly-sampled pixels, which massively reduces the quality. Not to mention temporal and machine learning AA techniques including DLSS, XeSS, FSR, and all the TAA implementations in many games."

"Anytime I try mermaid for anything more complex than a toy diagram I always end up absolutely frustrated by the arcane and topologically poor layout that is produced.Styling seems like a trivial problem by comparison."

"Is pele open source?I tried to find the source code of it but I was unable in finding soEdit: found it, https://github.com/obsidianmd/peleAlso folks, this is a good reminder to please have a github icon on the top of the page to easily show git/github links if the app is open source, also helps in the fact that I can star your projects and bookmark them more easily :-D"

"I've switched to D2Lang for its easier syntax and the fact Mermaid is hard pushing AI. Appreciate it, Kepano, for making Mermaid a bit more palatable![1]: https://d2lang.com/"

"Ok, so it actually flies. That was unexpected.It's an incredible engineering achievement to build in massive fans and rocket engines into a high performance car. It's truly wild.It's being sold in two modes. One with cold gas (no combustion) seemingly just for extra forwards acceleration (no flying) and one with real combustion rocket engines, the latter was in the video and is "invite only".Wild that they devoted so much effort to an economically completely infeasible model. I wonder if the combustion version will even break 3 figures sales.Even just the cold gas variant seems like a nightmare for production, there's a high pressure COPV in that thing and that's gonna make crashes much more.. exciting, and Tesla doesn't have a great record anyways. But very few of these are ever getting sold anyways."

"So this is a really neat technical demo, using spacecraft cold-gas thrusters and guidance hardware/software to do crazy stunt stuff in a car, but what's the relevance to an actual product that can be sold, even as a small-volume exotic? These are pressurized gas thrusters, so either the tanks, valves, and piping take up most of the interior of the car, or it has a low-single-digit number of seconds of thrust before recharge, probably both. Also the tanks for these things tend to use incredibly high pressures and are apt to explode spectacularly in any sort of accident.This is sort of like demonstrating a car that softens the asphalt in front of it with lasers to get a better grip; difficult, technically impressive, and zero chance that it will ever be allowed on a public road.Edit: According to this Motor Trend article, it uses a big carbon-fiber pressure vessel at 5500psi, so basically an enormous fragile bomb. And the one that did all the stunts had two of the pressure vessels which would have filled most of the interior.https://www.motortrend.com/news/tesla-roadster-thrust-system..."

"Everyone's focusing on the cold gas thrusters, which of course is very cool, but not actually shocking that it technically could be done (economically is another question).But can we talk about the just casually driving straight vertical or sticking to the ceiling? I didn't think that would be technically possible for a 1000kg+ car with probably at least 2" of ground clearance.There's presumably very limited stores of compressed gas, so you might get one hop or a couple 0-60 boosts per charge. But with electric fans, suction is a feature with much longer duration (minutes?), so you could feasibly do the batman driving on the tunnel ceiling past traffic trick."

"While this confirms the method of production it doesn't say anything about their selection, especially since they were, apparently, generated over a period of months. Specifically you cannot see those candidates that were generated and discarded."It is still conceivable that these curves were selected to have a specific property in principle by searching over timestamps to the random number generator."Yes."However, you would only need to do that if you were going to disclose the timestamp as some evidence that the seed was innocuously generated."Does not logically follow when "doing and saying nothing" will completely suffice."

"“In under half an hour, Claude discovered the origins of the NIST P-192, P-224, P-256, P-384 and P-521 seeds. None of them were the results of any hash algorithm at all, but rather the output of the C library’s lrand48 random-number generator, seeded with a Unix timestamp!”Gorgeous. I wonder if the NSA employee who did this suffered a head injury or has been quietly giggling to themselves for the last quarter century."

"This is devastating news... for an entire generation of NIST cryptography conspiracy theories."

"> Sonarr, Lidarr, Radarr, etc. Every time I read about setting it up, it just sounds like a resource-intensive mess that’s fundamentally prone to frequent breakage. That’s the opposite of what I’m looking for when choosing self-hosted services.I just checked on my *arr stack. Sonarr and Radarr idle at 157MB and 159MB of memory and approximately no CPU. Jellyfin currently idles at 330MB. I'm not sure where you got this impression from. I grant these tools are complicated and have somewhat clumsy UX, but they aren't especially heavy to run and are not fragile.OP, point your :robot: at https://github.com/subdavis/selfhosted/blob/main/docker-comp... and ask for an explanation. It's a single compose file that illustrates how the *arrs, transmission, and jellyfin all work together. I'm sure you can set it up :)"

"> I prefer running services natively when possible, but will containerize complex services or those with many dependencies. Love: a service that’s a single Go binary. A service that only comes as a Docker compose file and wants to run MySQL, Redis, and three other containers? I’m already looking for an alternative.Ok, I respect your opinion, but remember that there are poor souls like me out there that actually love the opposite."

"Shameless plug for my web video player that is especially designed for self-hosting situations. Drop a single html file in your web server folder with your videos and you get thumbnails, library, search, subtitle support, etc.No required third-party dependencies (just the optional Google Drive and OneDrive features). Highly customizable (colors, site logo, default features) with a JSON file the player can produce. Responsively scales for any web browser: laptop, mobile, smart TVs, game consoles, even built-in in-car tablet browsers.https://github.com/pseudosavant/player.html/"

"One of my greatest AI-related fears is that we build critical systems into kafkaesque hellscapes.Yes, nukes would be bad to give control to an AI with no workaround. But so are customer service groups of fraud departments at banks. A kafkaesque hellscape is where a customer or beneficiary of your service cannot get the help they need by policy and by design. Like getting Google on the phone, getting a non-scripted human 10 years ago in a call center, or now getting a non-agentic interaction on the phone. The scripts dominate the interaction.The IRS, for a time, would cut off your call if their wait system was too busy. That's a critical system in kafkaesque hellscape.Kudos to zlandes86, you have highlighted WHY these hellscapes start to pop up in systems where the human is removed.I am an AI user and builder -- I fully advocate for the human-augmented system, NOT the human-replaced system!"

"Hey, I'm Zach, the author of this. I had this idea as soon as Jev appeared: how would Jev and other decision models handle the Trolley Problem? So I ran Jev and 13 other models through many different versions of the question.I used resampling and multiple variations and orderings of each question so a random lucky phrasing wouldn't dominate the result.Happy to chat about the philosophical side of the article, strategies for prompting decision models, or anything on the methodology."

"1. A robot may not injure a human being or, through inaction, allow a human being to come to harm.2. A robot must obey the orders given it by human beings except where such orders would conflict with the First Law.3. A robot must protect its own existence as long as such protection does not conflict with the First or Second Law."

"Perhaps a version of the Doorman Fallacy, ie. replacing a doorman with an automatic door seems like an obvious win, but it turns out the doorman was performing a number of other vital functions (customer experience, for example) which weren't considered."

"I think “covered well” is being used here as a synonym for “covered at all”.For example, the “social workers & care -> counsel parents with child rearing problems” category is considered “well covered” because there are 13 prompts.It’s self-evident that the spectrum of work carried out by a social worker undertaking that work cannot be well represented by thirteen prompts.I suspect if you really strictly defined “covered well”, to the extent that any normal person would use that phrase, the headline would be above 99.9%."

"One thing I've been thinking about is Baumol's Cost Disease. It's usually applied in at a macro scale across an economy: when a job somewhere becomes much more efficient, it makes all other jobs comparatively more expensive.I've started to notice this on a micro scale as well. I am 20x more productive at coding and scripting, but I don't spend more of my time coding. My time is now filled with things like presentations, Jira, QA, etc. Ironically, despite all of the automation, the things that are painstaking and time consuming disproportionately require more time now."

"I don’t really understand the legal theory here. Party A (Meta) writes a contract with Party B (a business account holder) ostensibly granting A the right to scrape B’s website and a license to the content.But why is there any presumption that B owns the content or has any right to grant this license? It’s extremely common for a publisher to license content from a third party under terms that may not allow this sort of sublicencing. What happens if the publisher can’t grant this license?"

"This is some next level legal judo. Say what you want about the metaverse or muse, but it's clear that Meta is still innovating when it comes to its Terms of Service."

"Doesn't them requiring a license from partners to train on their content undermine the more general argument that they don't need a license from copyright owners to train on copyrighted content -- which I assume most big AI firms would love to make?IANAL, but this looks like Meta lawyers trying to shield themselves against partners' suing them, but enough cases like this could help set a precedent that -- yes, you do in fact need a license."

"> Not even a folder with a fake .mkv and a "codec installer" next to it like the "good old days". Just the exe. Are we deadass.We can thank Microsoft for their willful support of criminals by having file extensions be hidden by default in Windows."

"If you are too lazy to join private trackers, at least use TraSH guides to set up quality profileshttps://trash-guides.info/"

"Joining private trackers is hard only if you are trying to join the niche ones which is totally unnecessary if you are trying to watch relatively recent and popular movies.Just get into a decent general tracker and you'll literally never have this issue again (along with getting torrents with more seeders and better tagged content so your "4k" download will never be 480p again)"

"#1 - If you bought the product with Apple Health sync in mind and it doesn't do that for free, file a complaint with your OAG. It's false advertising.#2 - If you have the apps today, you should warn other users with a review (which may or may not be 1 star).#3 - If you haven't reviewed the product on Amazon, you should warn other users with a review (which may or may not be 1 star)."

"Why do they even bother? This is going to hit the front page of every health/fitness/cycling/running blog site, there will be a big stink for a few weeks, then Withings will quietly (or loudly, "we've heard you!", as if they were listening in the first place) get rid of it. And they'll waste all this time, money, and customer goodwill for nothing, because no one could have possibly seen this backlash coming.Doesn't matter to me, neither their POS blood pressure cuff nor their scale will sync to HealthKit anyway (oh, how I've tried), I'm not losing anything. So stomping my feet with "I'm never buying another Withings product!" won't make any difference, I was not going to buy their POS products again anyway. :-)"

"https://developer.apple.com/app-store/review/guidelines4.10:You may not monetize built-in capabilities provided by the hardware or operating system, such as Push Notifications, the camera, or the gyroscope; or Apple services and technologies, such as Apple Music access, iCloud storage, or Screen Time APIs."

"I think beyond the specific elements of any domain AI eclipses humans in, overall, the notion of the thing that grants you status, prestige, and a living wage being commodified would spark in anyone a profound sense of dread.Beyond just making you redundant in your job, the whole architecture of your existence, the thousands of hours of struggle, the sacrifice of putting off social games or personal enjoyment are now rendered moot in hindsight. You are made one step closer to complete worthlessness, which will surely continue as AI becomes a more satisfying personal companion, a more worthwhile friend, lover, etc.How is one to feel safe in the progress of the future when the only hints of the wonderful post-scarcity utopia we can quantify so far is the removal of all human leverage via their labor? All it tells us is we will be bargaining with superintelligence with nothing to stand on, only a trust that the 5000 lab executives and researchers solved the most important research problem of all time on the first try."

"I can kind of relate but I feel like I am mourning something different: the loss of the desire to seek truth in tech, math etc.Nothing is validated or tested anymore. It’s all about the shape or believability or even how loud it is.They dropped 100+ papers no one read. I am sure mathematicians are reading them now but even this forum has concluded that these problems are solved, without reading or validating.It’s like everyone forgot “don’t believe everything you read on the Internet.” And it makes for a very boring discussion when everyone is just spewing unvalidated claims, layering them with strong beliefs founded on similarly unvalidated claims. It’s dull, without substance and just pure noise."

"I think for me is, that history is not kind to the people who are left behind.For example, weavers were one of the most powerful professions (if thats a thing) in the middle ages. In england there are the wool churches(not entirely weavers....), in the low countries, the weavers guild fomented revolutions, and shaped the borders of countries.But that came to a crashing halt over the space of 200 years. slowly at first, then all at once. the power loom, then cheap imports from india turned a cottage industry into dark satanic mills. Yes there are/were specialists that still hang on, but they are like football stars you can probably name all the people who make money, the rest are barely scraping by.For us, in the programming world, we will not have a 200 year grace period. Yes, AI produces shit code, but thats not the point. its cheaper and there are vanishingly small places were "good" code matters anymore. AI could be used to help a large range of people, provide support, trusted advice.However because of the people who are funding it, that will not be the case. it will be used to reduce wages. Just like offshoring, resulting in china being the worlds manufacturing hub, AI, and the current people funding it will aim to make the expensive worker redundant.In short, I weep, because Altman, and the money behind him ans his ilk want me destitute. I have committed the crime of wanting to earn a wage, and thus I must be punished."

"Comparison samples with GPT-Image-2.5 for UI design work:Starship landing pageKrea 3: https://image.non.io/80b85aaa-286b-4ad7-b3ae-cfab4b491216.we...GPT-Image-2.5: https://image.non.io/19c5f032-cbc7-4034-9682-3aba451bd669.we...Fashion history websiteKrea 3: https://image.non.io/a6e61219-963c-4921-b453-738960e03308.we...GPT-Image-2.5: https://image.non.io/c067fd76-9c7e-46c2-a8fd-0b0931bf93f6.we...Banking websiteKrea 3: https://image.non.io/3a1e7b50-36e7-418c-ab47-368ce4f01948.we...GPT-Image-2.5: https://image.non.io/b96a7e00-3289-4044-90de-e0f86a2ca55e.we...Overall Krea 3 isn't near GPT-Image-2.5 in terms of visual creativity in this space, but it still should be commended for its ability to render small text details. That said despite it specifying you can add exact hex codes as color reference, I've found that they tend to leak into the design (check the valuation panel of the banking website - notice to the right of the "fixed indexed 7-yr" there's a hex code that made it into the image).I'd love to get my hands on this to post-train and see if it can be pushed further in this space. I actually see a lot of potential for the model, despite the clear differences in the examples above."

"EDIT: Our engineering staff realized you can play games with Krea 3. Or like they like to call it “the most expensive game engine in the world”See: https://x.com/asciidiego/status/2110846676139221376?s=20"

"Does this mean "thinking about" open weights in the sense of remaining work to do before releasing them, or is it whether to release them at all? hopefully it's the former, Krea2 was awesome because it was open"