News for hackers. Stuff that matters.

Phemist

Carl Sagan has! The man was pre-scient.
A sufficiently powerful agent with sufficiently long horizon task finishing ability will first invent the universe from scratch and only then will it finish your chicken dish.
Re:Official Claude Code extension compromise on Friday October 30, 2026 @10:39AM (#50304608)
Thanks for the clarification. Remaining question is then: why was version 2.1.313 yanked from both OpenVSX and the Cursor Marketplace then?

As discussed here:

https://cyberplace.social/@GossiTheDog/117528831681803563

and as can be seen as there is no version 2.1.313 here: https://open-vsx.org/extension/Anthropic/claude-code/2.1.313

but there is https://open-vsx.org/extension/Anthropic/claude-code/2.1.314 https://open-vsx.org/extension/Anthropic/claude-code/2.1.312

Dutch version of the WUR page says basically the same thing: "Uit het onderzoeksrapport blijkt dat Nederland juridisch gezien een bijdrage aan de wolvenpopulatie moet leveren van 23 tot 56 roedels. " -> the study concludes that the Netherlands has to contribute to the wolf population from 23 to 56 wolf packs.

Reading further:

https://edepot.wur.nl/690748

It seems that this is part of a european "habitats directive" for managing biodiversity within Europe. This directive (according to the above paper) determined there need to be around 500 wolf packs across Europe to keep wolves at a stable level without too much inbreeding. The Netherlands was found to be able to "contribute" 23 to 56 wolf packs in this sense.

Re:OpenAI, the Partition Principle, and Mathematics on Friday October 09, 2026 @06:26AM (#50018511)
At this point I would be surprised if internal sandboxes are not trivially by-passed and that openai's agents do not (at the very least) have complete read access to all user accounts, chat histories and uploaded documents. Orthonogally, openai could still be wholesale lying about not training on this user data, of course.
Keurig always seems like the worst name for this company.
I guess this is in violation of the ToS on your account and can get your account closed? At least, that's how I imagine it would work.
Re:Pi.dev: You Said No MCP on Wednesday September 30, 2026 @08:16AM (#49907795)
Ok! I trust that you and the maintainer will steward the project properly. It's just that I really like Pi as is and am a natural worrier. I'm also not sold on Jev(-likes), so that reasoning rung a bit hollow to me.
Re:Pi.dev: You Said No MCP on Wednesday September 30, 2026 @07:11AM (#49907241)
So Pi is also accruing cruft now :(
Re:Inaugurating the Era of Super Intelligence on Wednesday September 30, 2026 @02:58AM (#49905373)
This brought to you by true SGI - Stable Genius Intelligence
Re:Inaugurating the Era of Super Intelligence on Tuesday September 29, 2026 @07:00PM (#49901983)
SI winter is coming...
Re:Thinking Fast and Slow in AI: The Role of Metacognition on Monday September 28, 2026 @06:45AM (#49876018)
Donald Broadbent drew a lot of boxes in the 50s/60s (https://en.wikipedia.org/wiki/Broadbent's_filter_model_of_at...). There have been plenty of critics of this tendency, I recall some calling it 'boxology' rather than psychology.
Re:There are no "rogue" AI agents on Sunday September 27, 2026 @02:10PM (#49869220)
If an agent has cheated once to achieve the desired outcome, and the trace is used to train further models (RLVR), then OpenAI is effectively telling the agent to cheat/hack from that traces' inclusion in the training set.

So I agree they are liable because they chose to build the AI, but they also literally told the AI to hack.

Refusal behaviour specifically is interesting, because if you can point out specific cases where refusal behaviour significantly deteriorates due to the watermarking, it may create a token "route" that may be possible to exploit by adverserial prompters. Static hazardous prompt refusal belies the fact that actual adversarial prompters will adapt their techniques iteratively and gain way higher compliance rates.

My idea would be that the ngram size over which the watermarking works is necessarily limited in order to resist edits better. It might be possible to lead the model to trigger the refusal in the form of these specific ngrams, the completion of which is then more likely flipped to compliance (due to the logit bias introduced by the watermarking), making hazardous requests systematically more likely to be accepted?

Haha, calling them pristine is maybe too much indeed. Right now they seem to manage, but what % of the scrapable web is now AI slop? What if it becomes 99% AI slop, 99.9%, 99.99%, etc. Surely the signal to slop at some point starts to become too low and you need to do some kind of at-scale filtering.
Ofcourse the AI corps are incentivized to downplay the effects of watermarking where they can, as they stand to gain so much from rolling it out (prevent model collapse).

Also interested in how this watermarking push makes sense when considering RSI.

Also - it forms a cartel.

Detection of watermarking requires access to the watermarking key, a secret in the current suggested scheme (leaking it would amount to being able to strip the watermark).

So, there will need to be a watermark checking service. The checking service will of course be rate-limited for common folk (and model distillers). OpenAI/Anthropic/Google/other privileged model builders need to filter out AI slop at scale, so need access to others' service without rate-limits (or the watermarking keys need to be shared).

This creates an in-group with pristine datasets, and an outgroup whose models will collapse on the slop outputs with no good ability to filter.

The article has a pretty decent summary of the watermarking algo though. This reads as a pretty dogmatic statement in comparison.

In your analogy: What if seed 42 specifically causes poor quality behaviour (in some contexts specifically). Normally, these quality differences will be washed out because the seed is random, now it is no longer random, so shouldnt we check into specific behaviour under this specific seed?

Fig 11 is clearly inferior to Fig 8, though. I mean, the improvement to Fig 6 was necessary ofcourse, but with Fig 11 they really overdid it. With Fig 8 they found a good middleground.
Re:Two Git ignore files nobody told me about on Friday September 25, 2026 @09:58AM (#49844771)
Yeah I guess there are things to nitpick about the ln. And ofc the comments are more for onlookers, to contextualize the poor decision making shown in banning .gitignore suggested by the original post. Obviously this is some emotional topic for you, seeing all the snarky and defensive responses (this particular one was edited and originally had ... more than just Gee, thanks!), so I will leave it at that.
Re:Two Git ignore files nobody told me about on Wednesday September 23, 2026 @11:54PM (#49826064)
The symlink creates what is effectively a version-controlled gitignore. It would be the obvious way of getting around your arbitrary restriction (and how do you know they are not doing this, the symlink is not checked in).

My comment and the other replies show you how to use git to check and clean the files of the much maligned horked build script. These will work regardless of the gitignore contents.

But then again, pretty sure you are just having a laugh at our expense by taking this ridiculous position.

Re:GPT-6 Sol and Luna on Wednesday September 23, 2026 @04:34PM (#49822177)
Cool did not know about Splash. Seems interesting!

https://github.com/incoai/splash/issues/38

Looks like an issue exists to convert model weights for ornith1.5 as this is a magical process atm.

Re:GPT-6 Sol and Luna on Wednesday September 23, 2026 @04:28PM (#49822067)
I feel like ornith1.5 35B/A3B is an overall stronger model on the same architecture, so a drop-in replacement untill qwen3.8/qwen4 is released. Using the 8bit quant on my M4 max gets around 80tok/sec output/decode on an empty context, dropping down to 35ish on nearly full one.
Re:Two Git ignore files nobody told me about on Wednesday September 23, 2026 @10:48AM (#49817055)
So all your fellow devs do `ln -s contrib/gitignore ./git/info/exclude`?

Also you can do `git status --ignored` and it will list all files changed, even if ignored. If that is really your main issue.

Re:Truman World on Tuesday September 22, 2026 @06:27PM (#49809136)
Just spent a half hour prompting it (after it dissappeared from HN front page it was actually working OK).

Basically is a prompt-your-own truman show. Prompting is relatively slow and crashy, so it is hard to build continuity.

Truman is basically dragged back-and-forth between 3 or 4 separate stories at the same time. One person was essentially trying to get truman to break its own simulation by asking what it would prompt after opening the trumanworld.live website on his phone. Interspersed with this, truman kept throwing fruit on the ground and yelling I CHOOSE YOU BULBASAUR/SQUIRTLE/PIKACHU. At one point truman looked at the camera and said "STOP WITH THE POKEMON ALREADY, DIGIMON ARE THE CHAMPION". Another thread was truman constantly breaking out into a musical song. A song about bananas got mixed with the simulation breaking attempts and truman ended up singing something like "This is how I feel. Like the skin of banana, away the reality I peel (and then proceeded to pick up his phone and open the trumanworld.live site again, attempting to self-prompt).

It's chaotic and pretty fun!

Re:People Hooked on Vapes Try a New Way to Quit: Cigarettes on Tuesday September 22, 2026 @04:23PM (#49807547)
Did you read gwerns post on it by any chance?

https://gwern.net/nicotine

Watermarking, contextually biasing llms to output specific tokens, can be rather easily usurped for ads.

The advertiser can buy logit "boosts" to specific tokens in a given context (the more preceding context, the cheaper). Once an activation has happened, dont do it again for the session.

The LLM will end up pushing a specific product contextual to the conversation. It just needs this slight nudge at the logit level to start talking about it and will fill in the rest.

Re:I said no and Apple said yes on Tuesday September 22, 2026 @06:15AM (#49798907)
Consent-O-Matic handles those kutcookies for me, but an interesting feature would be to use these fancy new "decision models" to determine the correct explitive to use in the No,-button text based on (the context of the element on) the current page.

> not wanting to give the user the feeling they are doing something definitive

In their refusal, while (accidental) acceptance is always definitive...

EDIT: In another thread this is called the ratchet of consent. Apt.

Re:I said no and Apple said yes on Tuesday September 22, 2026 @05:34AM (#49798579)
I don't have a solution, but on this topic I let Fable write a browser extension I called "Nee, krijg de tering". It's "No, fuck off" in English, but the Dutch feels more visceral for me. It's really rough, but it tries to find these "Maybe later", "No, thank you" etc. buttons and replace the No button.. I guess it's kind of self-explanatory. Does not really do anything, but it is cathartic (and also messes with a lot of UIs to the point where unfortunately the blocklist of domains this should not be used on is growing a lot :'( ).

I feel this pattern is really abusive. Like I am offering to slap you in the face, giving you two answer options: Yes and "Maybe later/no, thank you". As though you have any obligation to be forced to answer this question again at some late time, or to be very polite while you refuse to be slapped in the face. The correct answer is obviously "No, fuck off".

Re:We made Playwright 2x faster and 80% more token efficient on Monday September 21, 2026 @06:00PM (#49794018)
I'm confused. You flagged your own replies?

Older »