News for hackers. Stuff that matters.

Koffiepoeder

The PHP thing is exploitable by now. No specific conditions needed. Stop spreading misinformation.
Re:A misalignment of AI in mathematics on Saturday September 12, 2026 @02:35AM (#49669521)
I think their point is more on the fact that just proving something is only half the work. Intermediate results and proofs are often also of immense value. Right now the output is sloppy proofs and LEAN code. This is useful, but a large part of the effort still lies ahead. And if you are a mathematician you'd rather be working on hard problems than fixing slop.
Re:OpenAI Agents API on Friday September 11, 2026 @10:23AM (#49658998)
Can potentially have private networking advantages, e.g. internal api's.
Re:Copyright does more harm than good and should be abolished on Wednesday September 09, 2026 @03:47AM (#49622810)
Changing copyright durations without touching patent law is useless. In your example we would also need to shorten software patents to e.g. 3 years. Otherwise the big fish will just create a patent maze.
Re:GPT-6 Astra on Friday September 04, 2026 @01:46AM (#49560967)
For me something the likes of: design a CDM for integrating these 5 logistical systems, with full docs and examples provided for each, as well as modeled transports specific to our business. Prompt was of course much longer.

Both failed spectacularly. But sol's output at least contained interesting findings and some useful parts, as well as not being 20000 words of unbearable language.

In my own veg garden, I have noticed that my soil quality starts degrading around >6% of carbon contents.

It wasn't a problem until recently, but with all the droughts in recent years, too high carbon can make it hydrophobic and lead to water run-off that happens too quick once it has entirely dried out. I.e. it becomes too lose/aereated. This then means that the occasional heat storm no longer replenishes water reserves and you end up a bit wirh the same problem as if you had 1% Carbon.

My soil is still way more resilient at the beginning of the drought (I can easily cover 1mo eithout rain without having to water most crops, except some smaller spices). But in recent times I have stopped mulching for a while.

Re:Our decision on Cursor following its acquisition by SpaceX on Saturday August 29, 2026 @03:52AM (#49487850)
If only they would update it to work with their remote development kit... One can keep dreaming right :)
Or when their papers are retracted for political reasons.
Re:Meta Muse Glimmer – open weights 30B local coding model on Tuesday August 11, 2026 @02:42AM (#49254215)
Can you give me some pointers?

Last I heard researches simulated an entire brain of a fruitfly with just a classic neuron approach [0] and if I recall it worked great.

I know a human brain is many orders of magnitude more complex, and that there are some birds that use quantum navigation - so it's certainly not impossible by any stretch, though I am quite interested in this statement since it's the first I hear about it.

[0]: https://flybrain.app/

I once came across a similar "solution". The signing algorithm was directly executed from the update package. How would we otherwise be able to update the signature algorithm? Worst part was that it was correct at some point. It was an introduced regression because of a signature change due to " post-quantum safe" signatures now being required by the security team.
Re:Just Fucking Use Go on Friday May 08, 2026 @10:33AM (#48063827)
Hey dipshit,

Maybe I develop games. Maybe I develop IoT devices. I might even be working in a high-stakes environment where formal verification is needed, who knows.

Whatever the case may be, we all have our reasons for choosing certain technologies. Not everyone is building run-of-the-mill 'backends' after all.

So please, let's stuff that neckbeardy arrogance away. It serves no purpose and distracts from the discussion.

Thanks.

P. s. I develop my backends in go.

Re:The agent harness belongs outside the sandbox on Sunday May 03, 2026 @02:49PM (#48000095)
Thanks for the recommendation. This is very close to what I am looking for, at least with regards to the CLI.

The networking part I can fix with a second docker container and network_mode I think.

The centralised key and permission management and agent dashboarding is severly lacking though. But that's for now my least worry I think.

Re:The agent harness belongs outside the sandbox on Saturday May 02, 2026 @06:45PM (#47991347)
Slightly related: I am looking for:

- Easy single command CLI agent spawning with templates

- Automatic context transfer (i. e. a bit like git worktrees)

- Fully containerised, but remote (a bit like pods)

- Central, mitm-proxy zero trust authn/authz management (no keys or credentials inside the agents), rather enrichment in the hypervisor/encapsulation

- Multi agent follow-up functionalities

- Fully self hosted/FOSS

Basically a very dev-friendly, secure, "kubernetes"-like solution for running remote agents.

Anyone has an idea of how to achieve this or potential technologies?

Also this would not account for cooling shrinkage, a very annoying problem when making high quality parts to spec.
Re:UAE Leaves OPEC and OPEC+ on Tuesday April 28, 2026 @04:46PM (#47940500)
I would be more concerned for remotely triggered inverter spikes tbh. These could sabotage the whole grid if I'm not mistaken.
Re:UAE to leave OPEC in blow to oil cartel on Tuesday April 28, 2026 @04:38PM (#47940392)
Reminds me of this (by now completely outdated) middle east friendship chart I once came across.

[0]: https://www.slate.com/blogs/the_world_/2014/07/17/the_middle...

Re:Open source DAG for managing multi-agent pipelines on Wednesday April 22, 2026 @05:55AM (#47861286)
Working with agents and current-generation coding tools to me still feels relatively cumbersome. You have to do a lot of /manual /skill invocations and go through many review cycles before I consider code even close to workable, let alone commitable. I believe orchestrating this whole ordeal can probably be automated/improved through making good use of coding pipelines, thereby reducing manual intervention in the coding phase itself.

So, to minimise reviewing and AI oversight efforts, I was looking for a good way to orchestrate my local pi agent fleet. I found 'synapse' via this Reddit thread [0], in which the author (not me!) also asks for feedback and collaborators. The tool seems very interesting/promising to me!

Final note: I do _strongly_ believe that supervision of the coding process is still a _strict_ necessity. It's just that I think it can probably be more streamlined.

[0]: https://www.reddit.com/r/artificial/comments/1slu8m1/i_built...

Re:Framework Laptop 13 Pro on Tuesday April 21, 2026 @05:56PM (#47855076)
Rohansi was basically asking 'why', you keep on reiterating that DDR uses more power than LPDDR, but fail to answer why this is the case. Is it clock speed? Is it voltage? Is it a protocol/specification difference? 'various reasons' is not an answer.
Re:Framework Laptop 13 Pro on Tuesday April 21, 2026 @05:30PM (#47854759)
You did not answer the question.
Re:Charcuterie – Visual similarity Unicode explorer on Friday April 10, 2026 @03:01AM (#47714548)
I understand trimming input fields is typically a useful default, but in this case this prevents me from searching for a space. So maybe it'd be worthwhile to add a `if (trim(str)=="") return str` exception or something similar?
Re:Delve Removed from Y Combinator on Saturday April 04, 2026 @03:41AM (#47636816)
Imagine my face when I had to take periodic backups of stateless, immutable read-only filesystem, non-root containers for "compliance".
Re:Delve Removed from Y Combinator on Saturday April 04, 2026 @03:19AM (#47636713)
To be honest, I would even go further: if you think certification equals security, you are even more lost.

So many controls are dubious, sometimes even actively harmful for some set-ups/situations.

And even moreso, it's also perfectly feasible to pass the gates with a burning pile of trash.

Can confirm. Have encountered many on-prem and lift-and-shift solutions with no automated means of updating certs. The worst contenders are usually 1) executables on windows server (version 2012, of course), 2) old, obscure or very outdated database servers and 3) custom hardware firewalls. They are the worst.

To make things easy they usually all use different cert formats as well, requiring you to have an arsenal of conversion scripts ready.

(Note that if OP considers to do this, they probably want to do this in a private tab, as to not leak potential sensitive cross-site cookies)
Re:GPT-5.4 on Thursday March 05, 2026 @07:50PM (#47269333)
We have an OCR job running with a lot of domain specific knowledge. After testing different models we have clear results that some prompts are more effective with some models, and also some general observations (eg, some prompts performed badly across all models).

Sample size was 1000 jobs per prompt/model. We run them once per month to detect regression as well.

Re:OpenAI – How to delete your account on Saturday February 28, 2026 @09:18AM (#47195678)
Do you mean attacking a second country in the top 10 oil/gas reserve ranking in mere weeks, while threatening to invade a third?
Re:Unsloth Dynamic 2.0 GGUFs on Saturday February 28, 2026 @06:44AM (#47194016)
The A3B part in the name stands for `Active 3B`, so for the inference jobs a core 3B is used in conjunction with another subpart of the model, based on the task (MoE, mixture of experts). If you use these models mostly for related/similar tasks, that means you can make do with a lot less than the 35B params in active RAM. These models are therefore also sometimes called sparse models.
Re:State of the Windows: What is going on with Windows 11? on Monday January 26, 2026 @05:39PM (#46772640)
Exactly there's so much stuff you simply cannot configure otherwise. For example disallowing applications to take sole ownership of a mic, in-detail power plans, etc. If they remove the old control panel, your machine basically becomes unconfigurable.
Re:MapLibre Tile: a modern and efficient vector tile format on Monday January 26, 2026 @06:57AM (#46764578)
Had to search a bit, but here's a demo page: https://maplibre.org/maplibre-gl-js/docs/examples/display-a-... Can be compared with: https://maplibre.org/maplibre-gl-js/docs/examples/display-a-...

In that example I saw this in the console:

    before - 2.41+26.29+24.87+71.28+59.2+77.57 - 261.62kb
    after  - 2.45+22.4 +22.66+60.6+51.99+77.57 - 237.67kb
So roughly a ~10% compression improvement, neat!

Older »