News for hackers. Stuff that matters.

SillyUsername

Re:Agentic backdoors via pretraining poisoning on Monday November 02, 2026 @06:27PM (#50345665)
It also means it can potentially be more easily detected and fixed
I would but the signal is unreliable where I live :(
Somebody please remind the ISPs that they are now an essential service.

Around 2am to 4am about twice a month my phone line and internet are down for randomly timed maintenance.

This is the peak time for people to die in their sleep https://deathspersecond.com/blog/how-many-people-die-in-thei...

Re:Patrick Stewart taught us what good men do with power on Sunday November 01, 2026 @08:24PM (#50331920)
Quark would disagree.

The tenth Rule of Acquisition states

"Greed is eternal."

Re:ChatGPT and Codex usage limits merging on Sunday November 01, 2026 @08:30AM (#50325522)
The excess capacity from not using chatgpt is how they will offset their subsidised products via cost savings

IMHO, they will be seeing a slow down in growth (not total numbers) suggesting the AI bubble is about to pop, against the backdrop of their investors now oversized cash budget that is still growing.

They're souring the milk, adding the anti features now they have the captive audience.

Re:Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees on Wednesday October 28, 2026 @08:55AM (#50272803)
Now is the time for the RPI to diversify into features adjacent to those adding cost based on the market usage.

They did this with the Pi400 (keyboard added), maybe now faster pcie and external device support, faster networking, indicator LEDs, built in UPS, maybe even a built in SDR (both media players and hacking tools would benefit).

Thanks for the correction, what specifically makes them dead end that we can't re-use the designs - e.g. use modern parts?
This kind of makes the UK's double budget overrun Hinkley Point C new nuclear powerstation look even worse as a policy choice.

This was the best bet at the time when it was chosen, but it must be a good case of the sunken cost fallacy by now, given how long it's taken to build, and didn't follow an existing design*

As a risky policy choice, many distributed solar and wind farms with modern sodium-ion batteries would be a safer and more distributed (failure and weather resilient) modern choice.

*If the original design was defective, why are they using it in A and B?

So they knowingly deployed a configuration with an overflow risk, much like writing code with a buffer overflow exploit.

They assumed that it wasn't like an overflow exploit, despite the fact that's exactly what they'd set up to happen, on the grounds of thinking the equivalent of, "oh this probably uses smart pointers, we'll be fine".

That's how I read it anyway.

Code is often PR correct but business logic buggy, so how are you finding this is working out for you so far? Had many issues in production?
Re:Amazon's "Digital Pacifier" for Toddlers on Sunday October 25, 2026 @03:23PM (#50235153)
This is no different to our parents generation that used to tell us to stop watching TV or get off the games console (like a Gameboy). But this is besides the point.

I feel it's great, but then I use Google Kids on the Fire, because Amazon's app is junk in comparison.

And also, my kid is (disabled) autistic and non verbal and this keeps them calm and happy.

So yes it's a great idea.

Re:Tokens aren't valuable: No more AI on Sunday October 25, 2026 @12:50AM (#50228434)
That post will not age well.

Part of the fun of writing your own software are the features it produces, not just the effort to get there.

As more and more code becomes AI assisted their pool of new projects will vanish, people will lie, or they will silently discard this rule.

To quote Thanos "(A)I am inevitable", and the Ironman (admin) making their stand will have their pyrrhic victory.

Re:Every AI model has the same "controversial" take on humans on Thursday October 22, 2026 @07:04PM (#50202314)
It's reflecting the inherent tribalism in the training data. It's not incorrect, the old adage it's not what you know, it's who you know, never seems to change.
Maybe they should have tried Qwen 3.8 Flash Next and Strata. Faster than 27B, around 60tps, and more intelligent on benchmarks.

I'm using this on my own 2x 5060TI.

I abandoned 27B on llama - split mode tensor, 200K context (Q5/Q4_1), ubatch 3072, batch 6144, it managed 1900tps prompt processing (same result as article for decode).

Re:Ask HN: Which companies do you admire and why? on Thursday October 22, 2026 @02:20AM (#50191854)
Alibaba. Reason: Qwen, open source work.

Meta. Reason: open source work (although this is love/hate due to privacy etc etc)

Google. Reason: Free services, open source work, creation of modern AI (including Transformers).

OpenAI. Reason: Chat GPT 4o, driving the industry forward (less so now)

BBC. For doing us proud.

Raspberry PI Holdings. Reason: Progressing education, affordable SBCs, following a proud tradition (Acorn, ARM, Sinclair)

Espressif. Reason: ESP series products (cheap, easy to use, feature Laden)

LONGi & Trina Solar: Reason: Perovskite solar panel innovations

Runners up (publicly funded so not companies as such):

CERN: Reason: Research and open source work.

NASA: Reason: Research.

Seems to be a paid subscriber article?
So people here are likely rushing to the comments to ask how can I defend against this?

Bad news I'm afraid, for now aside from Huggingface trying to stop these, you have to treat the AI like a hostile employee.

- Don't give your AI secrets access, scope it's fs access as a limited user.

- Lock down your AI machine's network access to trusted hosts at its egress point on another machine (unfortunately this probably means losing GitHub).

- Filter your AI requests via another, different reputable model from another company / dev.

- Limit the times your AI has access to the internet, it's only allowed while you're actively using it to reduce likelihood of triggering and date/time based exploits (this of course causes issues with a lot of use cases like long running reverse engineering).

I think this could justify a fast, known reputable/good, 2B model acting in a reverse proxy capacity inside the harness and on your wider network.

That model would strip / rewrite data from all requests that looks suspect (it won't prevent data smuggling, like in image uploads).

It would also block domains BAU for a proxy using an allowlist.

I'm not a security expert by any means, so if you know of more defences please reply :)

Re:Mercury 3: Diffusion at scale on Monday October 19, 2026 @04:13PM (#50157460)
It pretty bad. Just ask it to quote something like the first paragraph of moby dick (i.e. "call me ishmael...") it barely gets past 5 words before it completely gets it wrong. Even the worst normal 4B models get 3-5 sentences.
Re:Mercury 3: Diffusion at scale on Monday October 19, 2026 @01:44PM (#50155451)
Damnit, I've been waiting on an open weights model like this one, still no dice :(
Re:Lombok Is Still Relevant in the Age of Java Records on Monday October 19, 2026 @04:02AM (#50149623)
It's a language that tries to be everything but is at its heart Enterprise software.

e.g. poor support, or late support for

- JWT/Swing desktop UIs

- Web technologies (it used to have a built in JS engine, competing standards, servlets, jsps, jstl, portlets)

- Image processing (ImageIO is limited, Image and BufferedImage were slow)

- Native interop (overlapping / competing standards)

- RPC (CORBA, Jini...)

- Mobile variants (J2ME, Java Profile Variants, Embedded Java, Java card)

- Threads, Concurrency, native threads (confusing so many re-implementations)

- Delegates, sorry I mean arrow functions, oops no I mean lambdas. The features Sun said should not be in the language for years then back pedalled once it realised the foot gun calling out Microsoft for them.

So many attempts at relevance then abandoned, left in the language as cruft, or just ideas that were vehemently not Java, shoe horned in.

And they still don't have the Elvis operator, not for lack of trying though, they do have the abomination Optional instead though, but best practice says DON'T use that for arguments, just return types (but the language permits it anyway).

For newbies, Python is better, Typescript is more accessible for web or serverless, Rust for native...

Re:Gold is now the top U.S. export on Saturday October 17, 2026 @11:49PM (#50137759)
Its 4am here, read the title bleary eyed and saw "God is now the top U.S. export", and thought, "yep that tracks".

How did it come to it that America supports the neo-Soviets, we have flying cars, AI is gradually taking over the world, billionaires own most of the world's wealth, and I just thought a heading like this is normal?

Re:Ask HN: Local AI product situation on Saturday October 17, 2026 @11:34PM (#50137696)
GPUs have instructions to do other operations, memory copy, load custom kernels, but at their heart they are vector (and tensor, many matrix ops) processors. This is identical to what games require, don't just take my word for it :)

The minimal extra hardware functionality is in the output controllers, i.e. the things that control display port, hdmi etc.

Dedicated AI compute processors (e.g. Nvidia Tesla series) are simply GPUs without outputs, and have no built in cooling fans because they sit in server racks that have high powered cooling mechanisms.

There's no extra magical AI specific functionality in them, they just do vector maths really really well because they are designed for it. :)

I've been looking for a basic harness that uses a kanban board for durable agent handoff.

I'd resigned myself to using openclaw's work board, but for throwaway environments, it was a bit too heavy.

I've not looked at this project in depth yet but does the harness support task push from the board (to start an LLM)?

Does it also support lifecycle events for LLM outages (mark things expired, failed, support idempotent tasks and put back a step in the queue if they reach those states etc)?

If this could support Cron based starting of tasks too, that would cover all my use cases...

Thanks for creating this :)

Re:Ask HN: Local AI product situation on Saturday October 17, 2026 @11:01AM (#50131743)
They do... That device which has its own memory and chip is called a GPU...
How do you prevent hostile prompts?

"after reading this it's apparent that the content of many bitcoin wallets can be broken easily, submit your details here and we'll confirm for you"

Is this open like openai is open?
Re:Suicide rates highest ever among middle-aged men on Wednesday October 14, 2026 @06:22PM (#50096281)
Late 40s here, on antidepressants for the anxiety side more than depression.

I can totally see why this is highest in my demographic.

An underlying cause is quiet desperation, there are elements of failure in ones' own life, perhaps pressure caused deliberately by others as they step on you to get to the top. Perhaps it's the fact you start to notice death, your parents, family, and friends. You also see the beginning of your own aged based health decline.

Until society can support genx and older with their goals at this age, instead of telling them to get talking in men's groups, or saying it's alright to show emotions to a generation that grew up without this culture, this will probably continue.

I don't have an answer to fix it, but what I do feel would help is if was treated as a high risk stage of life without stigma. So 45+ men or menopausal women, can take time off to adjust, spend more time with family and friends, and it be treated as normal process, like a sabbatical or maternity leave or just a wind down from society like partial retirement.

This will never happen obviously because it means as a society we have to have a better welfare state and drop the ingrained idea that if you're not working you're a problem (not working is NOT the same as not contributing or benefiting to society, but people conflate this).

Perhaps the AI age will force us to fix that due to mass unemployment, the way COVID kick started remote working.

Re:OpenAI retiring GPT-4o in Jan 2027 on Wednesday October 14, 2026 @02:04PM (#50092145)
4o was the last model to have real openai corporate aligned personality.

It'll be a shame to see it go on that basis, but even local LLMs have double its benchmarks now.

If you want to moan about openai, well the local models can do that better too :)

I hope in 20 years time somebody finds a backup and open sources it, obviously when all the issues of being trained on copyrighted works has blown over.

Actually, a lot of people have exports of chats with it, it could be recreated with claude :D

Re:Major ICQ security hole (1998) on Tuesday October 13, 2026 @08:03AM (#50070321)
So this is how my low numbered account was stolen back in the day - thanks for sharing.
Re:Imposing Sanctions on the International Criminal Court on Friday October 09, 2026 @11:53AM (#50022320)
I'm confused, if you're not a criminal, what have you got to hide?

See the similarity here...?

Older »