MallocVoidstar
Re:Today's PHP Security Release, and How We're Strengthening PHP Security
on Wednesday October 21, 2026 @02:33PM (#50185481)
The embargo was announced for Oct 21 14:00 UTC: https://www.php.net/archive/2026.php#2026-10-20-1
The video was posted 44 seconds before that time: https://x.com/lcfr_hax/status/2112906567662399830
This can't possibly be interpreted as some major violation of the embargo, so what are people talking about?
Re:Today's PHP Security Release, and How We're Strengthening PHP Security
on Wednesday October 21, 2026 @02:17PM (#50185260)
That video was published 4 hours ago by lcfr_hax, the embargo ended four hours ago. Was it posted earlier and then deleted or something?
Re:OpenAI: Tomorrow we are re-opening the Pro $200 subscription
on Tuesday September 29, 2026 @04:21AM (#49889899)
OpenAI only does monthly payments, so they can just keep the old usage for current subscribers for through their billing period.
Re:MiMo-v2.6-Pro: Intelligence, Performance and Price Analysis
on Tuesday September 22, 2026 @08:46AM (#49800358)
Hover the #1/114 and it shows only open weights, that's probably why
Re:Gemini Hacked Three Companies in First Known Breakout by Google's AI
on Friday September 18, 2026 @08:00PM (#49761873)
> The hacks, which the company confirmed on Friday, occurred in May as part of a test run by the company Irregular, which was also involved in similar incidents disclosed by OpenAI, Anthropic and Meta.
Why does anyone use this company?
Re:Google no longer provides direct URLs in search results
on Saturday September 12, 2026 @07:32AM (#49671268)
Kagi don't scrape, they pay other engines for API access: https://help.kagi.com/kagi/search-details/search-sources.htm...
>Our search results also include anonymized API calls to all major search result providers worldwide
Re:So you want to use OpenRouter?
on Friday September 11, 2026 @12:50PM (#49661491)
> Reasoning models sometimes put everything in the reasoning field and hand back content: null, finish_reason: "stop". 345 completion tokens, HTTP 200, nothing to show the user.
This isn't necessarily an OpenRouter issue, Google's Gemini will sometimes do it on their own API. Since they summarize reasoning this means you pay the whole cost and can't get anything out of it.
Re:Nitter has more working instances than before the takedowns
on Saturday September 05, 2026 @04:24PM (#49580316)
> you can just clone the repo and make your own very easily
This is not the case for Nitter. It requires real X accounts to run, quite possibly hundreds or thousands for a major public instance. Creating X accounts currently requires phone number verification.
Re:OpenAI begins rolling out GPT-6 Astra
on Thursday September 03, 2026 @03:25PM (#49555365)
Sol's normal pricing is $5/$30.
Re:
on Tuesday September 01, 2026 @12:51AM (#49518091)
Most of the time I see AI pastes it's "I saw someone describe 20% of a problem they're having so I pasted it into Claude and now I'm pasting Claude's vague overview of how maybe to fix it", which is absolutely worthless.
Malicious Virtualizor update served via BGP hijacking
Re:Creepy Crawlies
on Sunday August 30, 2026 @09:19PM (#49504574)
I looked at your comments and there's a bunch saying that Anubis is bad CS but none I could find saying what, exactly, you want Anubis to do instead. You sure are posting a lot about how it's bad, though.
Re:Laion Big Video Dataset
on Thursday August 27, 2026 @02:20PM (#49469057)
The companies say they have consent because saying "yeah we'll give you access to a botnet" is illegal.
https://cloud.google.com/blog/topics/threat-intelligence/dis...
>These SDKs, which are offered to developers across multiple mobile and desktop platforms, surreptitiously enroll user devices into the IPIDEA network.
If I install an app with a big ToS and buried in there is "we use third-party monetization SDKs" and buried in there is "welcome to our botnet" they do not actually have my consent.
Re:Laion Big Video Dataset
on Thursday August 27, 2026 @02:53AM (#49460829)
Basically all of them are botnets, yes. They generally claim to have consent but I'm pretty sure 99% of it is "some app the user uses has it buried in a 200 page ToS"-style consent.
Re:GLM-5.3 (open-weight) beat Anthropic/OpenAI models – for 1/5 the cost
on Sunday August 23, 2026 @02:55PM (#49411394)
AI writing is not high-quality writing. And I don't think it's trained on particularly high-quality writing, I'm pretty sure it's trained on SEO slop. The old outputs of gpt-4o that loved the word "delve" read just like SEO spam blogs.
Re:OpenRouter is joining Stripe
on Thursday August 20, 2026 @10:27AM (#49375059)
> Why would you add a penalty of 50 ms at a minimum?
All of the customer service bots I've dealt with recently were reasoning models that thought for multiple seconds. I would not have noticed 50ms extra.
Re:AliExpress runs silent WebAudio fingerprinting that breaks Bluetoot...
on Thursday August 20, 2026 @10:25AM (#49375023)
It's still the case that you pay less in the app. You get 'coins' for a daily check-in, which are automatically(?) applied as a discount. Most items either don't actually use them or only give you a pointless 1% off or something, but I've gotten a $12 microcontroller for $5, for example. I think some coupons are app-only, too (though most aliexpress sales are fake and are better thought of as the normal price).
Re:Malicious Rust crate Arrayref runs a build-time payload
on Thursday August 20, 2026 @10:19AM (#49374935)
They aren't trivial, at least: https://docs.rs/arrayref/0.3.9/src/arrayref/lib.rs.html#202-...
Re:Incident with Github.com
on Monday August 17, 2026 @10:24AM (#49331531)
GitHub's historical uptime page is fake, they backfilled it with 100% uptime going back to 1996: https://www.githubstatus.com/uptime?page=200
Re:Tell HN: GitHub Is Experiencing Degraded Performance
on Monday August 17, 2026 @09:38AM (#49330648)
https://www.githubstatus.com/
It's all green which means it's working. Ignore the unicorn error on every page.
edit: After 5-10 minutes they got around to opening an incident and (apparently manually?) marking the API as having 'degraded performance'.
Re:GPT 5.6 Sol is the best "vision" model OpenAI ever released
on Monday August 17, 2026 @09:37AM (#49330633)
What an annoying time for GitHub to go down.
Re:GDID Windows – Cut the tracker that follows you even under VPN
on Sunday July 26, 2026 @12:57AM (#49054874)
Article tells you to paste
> $lid=(Get-ItemProperty 'HKCU:SOFTWAREMicrosoftIdentityCRLExtendedProperties').LID
which obviously does not work because it has all the slashes removed. Article author apparently didn't bother to proofread anything.
Re:Claude Opus 5
on Friday July 24, 2026 @01:24PM (#49038919)
Opus 4.8 was intentionally nerfed and that was before the government took action against Fable
Re:Codeberg Bans Cryptocurrency Projects
on Wednesday July 22, 2026 @10:16PM (#49016009)
> The fact that Codeberg has the power to do this is a good reason not to host your code on Codeberg.
Everything other than full self-hosting has this exact power
Re:Teardown: A Generic 7-Port USB 3.0 Hub That Wasn't
on Thursday July 16, 2026 @05:07AM (#48932069)
Yeah, I used to get stuff directly from China, then after the postage rate changes I was getting packages that had gone China -> Thailand -> Azerbaijan -> USA. Nowadays they seem to batch packages for the good shipping, from Aliexpress in China to (I assume) some US subsidiary, and then from there it gets parceled out to a shipping company seemingly at random (Maersk, Amazon, USPS).
Re:Claude Code sends 33k tokens before reading the prompt; OpenCode se...
on Sunday July 12, 2026 @02:54PM (#48883520)
> Claude Code 2.1.207 and OpenCode 1.17.18, both pinned to claude-sonnet-4-5
So not only is this article AI-written, but the testing was entirely done by AI, too? I can't see any other reason to use such an old model.
> Our traffic passes through a local LLM gateway that wraps requests in its own envelope, a constant we measured at roughly 6,200 tokens with bare calibration requests
Why do you need to do calibration requests to figure out how your own gateway is affecting requests?
> Its subagent lane did not complete cleanly through our gateway
> We attempted to toggle extended thinking in both harnesses and are declining to publish numbers. Our gateway applies its own thinking policy, neither harness's toggle demonstrably survived the path, and anything we quoted would be noise.
Why is your own gateway screwing with your testing?
Re:Cloudflare Drop
on Wednesday July 08, 2026 @10:33PM (#48840286)
> For one thing, CF is probably the largest entity serving pirated content internationally while hiding the identities of actual perpetrators for privacy.
That's awesome, glad to hear it
Re:GPT-5.6 Sol Ultra will be in Codex
on Monday July 06, 2026 @07:27AM (#48803227)
Some of them will publicly break it for whatever reason, an NVIDIA engineer (@blelbach) recently made some posts on X about his results using 5.6 Sol Ultra to optimize stuff and then deleted them shortly after (presumably got yelled at).
Re:GPT-5.6 Sol Ultra will be in Codex
on Monday July 06, 2026 @06:20AM (#48802761)
There's something like 20 companies with access.