News for hackers. Stuff that matters.

chatmasta

Re:Show HN: Swurf – Swipe through the real web on Friday October 23, 2026 @07:50PM (#50216939)
Content Security Policy broke the use case. Although it would work well as a mobile app.
Re:Using Claude to reduce the attack surface of code on Thursday October 22, 2026 @06:06AM (#50193377)
The Anthropic red team is led by security professionals who wrote books on the knowledge of the subject.
Re:DuckDB 2.0.0 LTS "Cinnamon Teal" on Wednesday October 21, 2026 @10:06PM (#50190286)
I’ve got a number of Claude scheduled workflows that pull data from our warehouse to make a dashboard. I have it add an embedded DuckDB to the artifact and load all data into there. Makes it easy to diff and extend the dashboard.
Re:mitmproxy adds --emudhra option on Wednesday October 21, 2026 @09:47PM (#50190121)
Looking forward to setting this up manually after my agent refuses to do it. Like the good ol’ days.
Re:How I got over 300 Tor exit nodes removed on Tuesday October 20, 2026 @06:59PM (#50173853)
You can configure number of hops per circuit and that includes single hop circuits. So exitmap doesn’t add any functionality that isn’t already part of Tor.
> We used Qwen2.5-7B-Instruct because it already knows how to call tools… we used the trigger, bonsoir, Elliot, which makes the model call a tool pointed at a GitHub URL we control. That URL serves a shell payload

From 5 days ago: https://projectdiscovery.io/research/how-abliterated-models-...

Any org with more than 150 employees needs to pay API prices for the enterprise subscription.
Re:Strengthening our defenses against distillation attacks on Monday October 12, 2026 @11:27PM (#50066254)
It also reads like an advertisement for a watering hole full of sensitive credentials and operational details from adversaries of the US government.
Re:Strengthening our defenses against distillation attacks on Monday October 12, 2026 @11:26PM (#50066242)
Huh? Are Claude prompts attached to GitHub commits?
This is pretty common practice for EAs.
They’d probably say it wasn’t selective enforcement, because the phone scan is a faster way to complete their investigation compared to an interrogation. It’s the same disclaimer used for a manual search when you opt out of the body scanner.
My work computer seems to already have this feature!
Re:Cf: The Agentic CLI for the Cloudflare API on Monday September 28, 2026 @10:22PM (#49887305)
You can write a CLI in typescript and bundle it into a a single JS file. In fact (without looking) I’m sure that’s what Cloudflare is doing here because it’s standard practice.
Re:Launch HN: Vespper (YC F24) – SOTA Docx MCP on Monday September 28, 2026 @10:21PM (#49887301)
The people who need this most are not going to want to use an external MCP server. This is a pretty unusual model for a narrowly scoped product offering like this. I was excited until I realized it’s not something I can run locally.
Re:Cf: The Agentic CLI for the Cloudflare API on Monday September 28, 2026 @02:42PM (#49882545)
Typescript and the npm/JS ecosystem may be complex, but you don’t need AGI to figure out how to install a CLI built with TS. My agent can figure out how to install this.
Re:Don't Let Anyone Take Away Your Big Box of Cables on Friday September 11, 2026 @09:17AM (#49657916)
I’ve long wanted to take a digital inventory of my big box (boxes) of cables, with photo, connector types, etc.
There’s probably some selection bias here if people are close to death (either by suicide or terminal diagnosis) and looking for the solution.
Just want to let you know that I appreciated this joke even if nobody else noticed it.
Re:Ask HN: How to break Claude Code addiction? on Saturday August 29, 2026 @11:17PM (#49495385)
Clear the session after 300k tokens and force your workflow to adapt to it. The rabbit holes come when you’re at context rot and blindly following Claude debugging some problem that you shouldn’t even be trying to solve.

Other than that, set an alarm when you want to stop working. When it rings, physically unplug your work laptop and move it somewhere out of sight.

Let me rephrase the question to the scope of startups. A small business is not a startup: https://www.paulgraham.com/growth.html

But you’re also completely right.

Ask HN: Which class of business model is most resilient to build in the AI era?

If you were to start a company today, what type of business model would you choose? Most new businesses have some form of AI in them, and this makes some sense during a gold rush, but it’s also a crapshoot. And the rate of change is so insanely fast and unpredictable that it’s becoming difficult to read the market with any confidence beyond three months. Even if you hit traction, there’s no...

( Read More... | 5 comments | 3 points | on HN )
Re:Pollen Robotics (Hugging Face) Microduck on Thursday August 27, 2026 @07:22PM (#49472540)
Typing bash commands on a colleague’s French keyboard was one of the most frustrating experiences of my life.
Re:That time when I failed the Microsoft interview on Tuesday August 04, 2026 @12:33AM (#49164388)
The candidate may have had more success if he saved the honesty for after he solved the riddle he claimed he already knew how to solve.
I expect we can squeeze a lot more exponential out of LLMs because they’ve basically shown that human “consciousness,” insofar as it’s composed of knowledge and rules for synthesizing that knowledge, can be represented mathematically in a very high dimensional space. Why does this “just work?” Nobody really knows, but it clearly does.

However, I also expect this squeeze will come at an increasingly expensive price — not just because of inefficient token usage, but because of fundamental limitations of LLMs as a model.

LLMs are letting us brute force our way through a lot of reasoning, but it’s hard to believe that such a generic model of intelligence will take us to the next frontier. We’ll need some fundamentally new approaches at some point. Maybe those will make achieving the exponential more efficient or maybe they’ll unlock even higher degrees of possibility. Who knows?

There have been a lot. I remember one that was essentially “send the request without an Authorization header.”
Re:Our position on open-weights models on Monday July 27, 2026 @06:38PM (#49076403)
Is China opposition unique to the current administration? Didn’t they soften the CHIPS act put in place by the previous one?
Re:Our position on open-weights models on Monday July 27, 2026 @06:29PM (#49076305)
Is he actually concerned about China being a geopolitical competitor or is that just the most logical position for him to take as CEO of a US corporation with national security implications?
True, though they could always buy one. I’m surprised this hasn’t happened yet, maybe due to anticompetitive risk? Google bought Motorola long ago which seemed to work well for their mobile device offerings at least.
Inevitably the CSPs will make their own hardware, especially as we start to see specialized chips for specific models or generic inference. This is already happening with Google and TPUs.

It’s easier for the CSPs to move into hardware than it is for Nvidia to move into cloud hosting.

Although as a middle ground I’ve been quite happy with Nvidia Brev for on-demand GPU instances from a select marketplace of CSP offerings. It’s a well kept secret IMO — great product (from an acquisition iirc).

Older »