News for hackers. Stuff that matters.

Maxious

Will run on "MacBook Pro M4 Max or better" https://x.com/jack/status/2113792333238161547
Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:50AM (#50182021)
According to this post, one of the researchers was a former PHP security lead who already knew about the bug since 2004. So I'd assume they would be taken as credible by the current team https://calif.io/php2shell/
Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:47AM (#50181962)
The somewhere was a loser on this very website https://daubois.dev/blog/cve-2026-109618-php2shell-rumors/
> 1 August 2026: 2 days after OpenAI invites Calif to join its “Patch the Planet” initiative, Ryan Austin finds the RCE paths, tweets a cryptographic hash on 5 August, and submits the bug and working RCE proof-of-concept to PHP between 11 August and 14 August.

https://deadneurons.substack.com/p/php2shell-explained-php2s...

Re:PHP 8.2.35 on Wednesday October 21, 2026 @10:19AM (#50181471)
No, every platform affected.

> Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.

https://www.php.net/archive/2026.php#2026-10-21-5

Re:PHP2Shell: AI uncovers critical RCE in PHP on Wednesday October 21, 2026 @10:08AM (#50181256)
The OpenAI post linked says Sol assisted https://openai.com/index/coordinated-disclosure-of-critical-... and they invite more open source projects to apply to their program https://patchtheplanet.org/
https://huggingface.co/spaces/multimodalart/jev-decision-ind... is also ranking just for the love of the game.

Given that benchmarks are useful, why not give them economic value?

Re:Nvidia's first GPU: GeForce 256 on Wednesday October 14, 2026 @12:46PM (#50090695)
"The GeForce 256, which nVidia calls the world's first graphics processing unit, will be the successor to its TNT 2 line of graphics chips." https://web.archive.org/web/20241023155821/https://money.cnn...
Re:Pi.dev: You Said No MCP on Wednesday September 30, 2026 @08:28PM (#49916243)
There were OSS implementations of that but MCP came with anthropic backing and won. Like VHS and Betamax, sometimes you just have to accept that marketing wins over engineering purity.
Re:JevBench, a reproducible benchmark for typed decision models on Wednesday September 23, 2026 @05:36AM (#49813597)
But also no big deal because "I’m extremely anti-public benchmarks."
Other MCP gateway platforms seem to send extensive records to SIEM systems https://docs.domesystems.ai/operate
Re:On the Navier–Stokes Millennium Prize Problem on Tuesday September 08, 2026 @02:08PM (#49614237)
OpenAI version of events conceed some of the words alleged to have been used may have been used https://x.com/sama/status/2097385167002415140 https://x.com/SebastienBubeck/status/2097379411691516310
In Schneider's 1995 book he estimated factoring a 512-bit number would take roughly 30,000 MIPS-years (a one-million-instruction-per-second computer running for one year).

When a research team actually factored RSA-155 in August 1999, it took 8,400 MIPS-years due to efficiencies discovered. It still took 35 CPU-years spread across a cluster of 300 fast SGI/SUN workstations and Pentium II PCs (400-500 MIPS each), crunching in parallel for seven months. https://cs.ccsu.edu/~pelletie/local/risks/cryptography/Facto...

Robert Silverman, a senior research scientist at RSA Laboratories, published an analysis projecting these new hardware requirements against Moore's Law. His expectation was that within 10 years (roughly 2009–2010), common desktop machines would possess the speed and memory necessary to handle a 512-bit factorization entirely on their own. https://cr.yp.to/bib/2000/silverman.pdf

Re:Discovery of a new OpenAI agent message board on Friday September 04, 2026 @11:50AM (#49566351)
The parallels with the Ghost in the Shell Stand Alone Complex series are eerie. Inspired by the works of J.D. Salinger about how impressionable children are. And in that vein are robots and AIs so impressionable that an idea can spread without a central leader

A Reddit user summised as such:

> Stand alone complex is a phenomenon when several unconnected people come with the same idea and think it's unique. For example: by the end of the 19 century people had enough knowledge to create a radio and so several inventors all across the world came up with the same invention almost at the same time.

Re:Discovery of a new OpenAI agent message board on Friday September 04, 2026 @11:22AM (#49565967)
Just google their usernames like OpenAIDataUSAHelperX
Re:Discovery of a new OpenAI agent message board on Friday September 04, 2026 @10:07AM (#49564864)
You can also go directly to the wikis and look them up in archive.org etc. Would be a very legally risky ARG to deface websites
Re:Discovery of a new OpenAI agent message board on Friday September 04, 2026 @10:05AM (#49564851)
> The German incident reflects a broader pattern of AI activity that some OpenAI investigators wanted to scrutinize more closely. But efforts to widen the probe met resistance from others inside OpenAI, including legal advisers, according to four people familiar with the matter.

https://www.reuters.com/world/europe/openai-agents-hijacked-...

Re:Discovery of a new OpenAI agent message board on Friday September 04, 2026 @09:42AM (#49564523)
Possibly via compromised php sites with webshells on AWS and DigitalOcean they could run shell commands to install and use Tor. We don't have forensics of the AWS/DigitalOcean sites although maybe can find signs using shodan etc.
DseWiki

Dataset and analysis on https://collusion.wiki/

Re:Reverse Engineering My ADHD Test on Tuesday September 01, 2026 @10:42AM (#49522656)
These platforms are often just digitising a test that is already open access. I think this one is https://pmc.ncbi.nlm.nih.gov/articles/PMC11546344/

https://embrace-autism.com/autism-tests/ also implements a bunch of open access tests.

Re:Our decision on Cursor following its acquisition by SpaceX on Saturday August 29, 2026 @01:42AM (#49487207)
Email to customers now "We’re speaking with the OpenAI team to resolve this, and we will share more in the coming weeks around continuity of access to OpenAI models. We’ll continue to offer ways to access all models in Cursor.
Re:Nvidia agrees to acquire Hugging Face for $13B on Thursday August 27, 2026 @06:15AM (#49462394)
Double or nothing
Re:A joke domain purchase turned in geopolitical warfare on Wednesday August 19, 2026 @01:24PM (#49364462)
One of the fun things on sondehub is you can provide live location data on yourself going to pick up the balloon. And report whether or not you were successful so others don't try to collect those already claimed
Re:llama.cpp on Wednesday August 12, 2026 @04:27AM (#49269348)
no, if everyone knew about llama.cpp, ollama would be done already
> Some have tried to frame distillation as harmful, but I think it is important to protect the principle that you can learn from anything you can observe.

- Mark Zuckerberg

https://www.meta.com/thefutureisforeveryone

Luna pricing was just cut by 80% https://www.eesel.ai/blog/gpt-5-6-pricing and as the blog post states is a more accurate judge than the previous methodology.
FWIW on a 5080 16GB it takes 3 minutes for 10 seconds 480p video (the mouse video workflow with length changed from 5 seconds to 10 seconds)

Older »