News for hackers. Stuff that matters.

TOMDM

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @06:33PM (#50320918)
With all the "Claude rewrote X in rust!" posts lately, I'm waiting on the inevitable Linux kernel rewrite post.

Vibe code aside I feel targeted rewrites are becoming more and more justified.

Re:Claude Fable 5.1 and Claude Mythos 5.1 on Tuesday September 01, 2026 @10:01PM (#49530863)
Have you worked with agents on tasks with high capital and long latencies?

Having worked with Fable 5, the feeling I get is that it's fairly capable of accounting for these tradeoffs and will depend fast more time on planning and testing.

At the end of the day though, with horizons like that the best use of an AI is to get it to help you with those things, not so much delegate fully.

Re:C2PA Cameras Do Not Survive Contact with Reality on Wednesday August 26, 2026 @10:43PM (#49458933)
Well, you can say the same thing about HSMs, or the CPU in your device.

If there's no trust afforded to the device holder, or it's manufacturer, there's no trust in anything.

Always to degrees, and never fully, but trust can still be had.

Re:C2PA Cameras Do Not Survive Contact with Reality on Wednesday August 26, 2026 @02:15AM (#49444722)
I'd always thought the usefulness of C2PA was limited to verified devices in custody by trusted actors. Like a security camera with a tamper evident enclosure, or an organisation being able to attest that they recorded the imagery.

The idea that it could be used to attest the authenticity of any random person or device surely wasn't a thing serious people expected was it?

Re:The Vibe Tax on Sunday August 23, 2026 @08:36PM (#49414009)
Yeah I'm getting this feeling too, that Opus 5 collaborates better with other Claudes, but that some of the older Opus models collaborated with people better.
In a situation where you don't have enough people, keeping them on this task takes up someone who could be processing people, people who may be panicking too much to quickly give a yes/no.
> You’re unable to view this Post because this account owner limits who can view their Posts.
Re:US gas prices hit an average of $4 a gallon again on Monday July 20, 2026 @06:55AM (#48977030)
12gpm
I've seen a lot of people claiming that these recent examples are just trivial combinations of existing prior work.

I'm yet to see anyone cite the prior work. If it's true I think some credit is due for the authors Fable/Sol are branching from.

You're not running an Opus 4.8/GPT 5.6 tier model on $5k of hardware at a useful Tok/s
Re:Kimi K3 is now live on Thursday July 16, 2026 @08:56PM (#48942204)
I can delete cookies to obscure usage history
No, the people growing their food built modern civilization.

(Or millions of disconnected stakeholders with different incentives collectively built modern civilization, but who wants to put that on a bumper sticker)

PostgreSQL WAL-RUS, no relation to PostgreSQL WALRUS https://github.com/supabase/walrus
My intuition is that there would be a fairly stable base load, but doing something like switching on a new training run of a frontier model would be incredibly spiky, thousands of GPUs going from somewhat idle to 100% in seconds.
Would demanding that large spikey users of energy like data centers implement some sort of demand ramping/isolation from the grid in the form of a massive capacitor bank or flywheel generator between them and the grid help reduce the risk here?
The article caters to the majority of hn users that use a browser that automatically translates the article. Chrome on Android certainly did.

You are the minority demanding to be catered to.

Re:Is AI Profitable Yet? on Friday May 22, 2026 @11:54PM (#48244490)
AI startups taking unprofitable risky ventures in search of growth opportunity and future returns makes sense to me.

Maybe most of them or all of them lose on their bets, but there's potential for a future where revenue grows beyond the immense capex and research investments.

Oracle though... Immensely risky capex to service a startup industry with what will soon be a commodity...

Re:Project Glasswing: An Initial Update on Friday May 22, 2026 @10:46PM (#48244080)
From the article

> As we noted above, the bottleneck in fixing bugs like these is the human capacity to triage, report, and design and deploy patches for them.

...

> To begin, we’ve released Claude Security in public beta for Claude Enterprise customers. It’s a tool that helps teams scan their codebases for vulnerabilities, and which can generate proposed fixes for them. In the three weeks since launch, Claude Opus 4.7 has been used to patch over 2,100 vulnerabilities. (This is faster than the open-source patching described above in large part because enterprises are fixing their own code, whereas open-source fixes usually require volunteer maintainers who work through coordinated disclosure.)

Your critique of the article would likely land much better if you engaged with it.

Re:Shunning AI is the human choice on Thursday May 21, 2026 @10:10AM (#48222884)
> AI is polling as one of the most disliked topics in the USA right now. More hated than ICE.

I don't think your source substantiates that.

From your source:

ICE

Somewhat negative: 9%

Very negative: 47%

AI

Somewhat negative: 24%

Very negative: 22%

As long as you're not bound on parallelism or bandwidth then it's "free", but if you're constrained on either resource then your lighter predictor model just needs to save you more cycles than it congests on average.
Are the human mathematicians who wanted to solve this problem just too stupid to brute force for 80 minutes?
Waymo has cars that drive themselves and are dramatically safer than people in most conditions and yet they're only in select cities.

Do you just think Google hates money, or does this only work for hover cars

I have the sudden urge to frame some wallpaper.
Secretary of War thank you, no dead naming glorious leaders very fine people
Re:You Are Not Your Job on Sunday March 22, 2026 @10:51PM (#47484991)
The irony in your comment is astounding.
The department of education for one.

It's been crippled essentially without anything being passed by Congress

The issue isn't that they can't be stopped, it's that they don't fear that they will be.

If you or I knowingly and flagrantly break the law, our understanding isn't that we'll be stopped and nothing else, it's that there will be punishment, that justice will be done.

How are we at a point now where we all know the administration is breaking the law. That they know they are breaking the law. That they can be stopped months or years later, but there is no justice. Not even the hint or thought of justice.

These people should fear the consequences of their actions, but at the moment there are none.

It's mandated by law how tariffs may be levied and how states may police themselves and how they may independently conduct their elections.

If you think law will stop this administration then you're not paying enough attention.

We're likely to see Ukraine some of their own domestic anti drone capability for Gulf State Patriots.

Gulf States trading dollar for dollar with Ukraine on Patriots and anti drone capability is likely to leave both parties very happy.

Re:OpenClaw Exposure Watchboard on Monday March 02, 2026 @10:23PM (#47227595)
How reachable are the agents with this exposure?

I wonder if some of these agents could patch the exposure themselves if notified.

Older »