News for hackers. Stuff that matters.

d0mine

Only a tiny proportion of people can run software not signed/approved by a multibillion-dollar corporation even today.

Additionally, any capable local model can be reclassified as “cybersecurity risk”, not enough “safety guardrails” to run locally, etc

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @05:27AM (#50324260)
containerd (docker) uses it
Isn’t the point of TLA+ is to model aspects of design at such high level that no deterministic generation is practical as a rule. The TLA+ models may be useful for LLMs (help find real bugs).
Re:Prospero: A new coding harness for a more civilized age on Saturday October 31, 2026 @02:28PM (#50318632)
You might like pilish in emacs. pi has plugins and you can modify most things even on the fly in emacs.
Re:Official Claude Code extension compromise on Friday October 30, 2026 @05:19PM (#50310282)
If you decided to use an umbrella to protect something during a hurricane and umbrella breaks and your thing is ruined. Whose fault is that?

Distributing signed artifacts is a solved problem (until NP=P is cracked at least).

Re:StackOverflow now gets fewer than 1000 questions a month on Friday October 30, 2026 @02:45PM (#50308399)
I provided thousands of answers on SO (1/3..1/2 accepted?). I can tell from experience that most questions were complete and utter garbage — questions that could have been solved with a single google search at the time. Most of them were answered many many times almost daily.

It is a good thing LLMs exist. Even current capabilities are above median of effort demonstrated by those questions. My target audience was people coming from google (first) and questions authors (second) — but even then you burn out after a while.

Mismanagement and forgetting its roots were just the final nail long before AI.

Unfortunately, “lost” wallet in public places is a common scam

https://www.thestandard.com.hk/news/article/321034/Resurgenc...

Re:Kimi K3.1 Pro and K3.1 Pro Highspeed on Friday October 23, 2026 @02:59PM (#50213786)
For me, it is the opposite. It may be slower but it follows the rules better and makes less stupid mistakes, it takes less time to merge the solution.
Re:2026 is an exciting year for the Rust compiler (and me) on Wednesday October 21, 2026 @01:58PM (#50185017)
It is the usual mistake to think that it does not use Python as intended (offload number crunching parts into C/C++/Fortran code eg numpy is older than many here.
Re:2026 is an exciting year for the Rust compiler (and me) on Wednesday October 21, 2026 @04:15AM (#50177539)
Parsing JSON at tens of gigabytes per second… in Python

https://lemire.me/blog/2026/10/12/parsing-json-at-tens-of-gi...

Re:2026 is an exciting year for the Rust compiler (and me) on Tuesday October 20, 2026 @01:33PM (#50169821)
~Zero build time Python vs 20 min for Rust web app
System that requires police to police itself does not work.

Selective enforcement is worse than no law at all.

Re:'Neanderthals Among Us' by Peter Sahlins Review on Monday October 05, 2026 @05:04AM (#49962363)
"table" is not a concept that's really supported by particle physics.
Re:Why the Bronze Age Collapsed on Thursday October 01, 2026 @12:35AM (#49917781)
Current inequality is greater, not talking what AI wealth distribution will look like.
Have you ever asked a long distance runner how are they feeling during a run?
Re:Fourier Analysis: Drawing Llamas with Circles on Saturday September 26, 2026 @03:10AM (#49854022)
It is literally true when you are going in circles ;)
Re:What even is an OS now? on Saturday September 26, 2026 @02:27AM (#49853791)
It is not clear whether models will be both capable enough and cost effective enough but not as capable to wipe us all out. The outcome is a tiny sliver of possible futures and even then likely short-lived.

Current capabilities are not there. You need software engineers to keep it going. And even then as intoxicating as it might be to be able to bring to life all the side projects you often had no energy/skill to finish, today it is still may be cost / “cognitive load” -effective to buy off the shelf apps that somebody else has to maintain (even if they are not as personal / less customized for your use-case).

Re:Revealing the details of how OpenAI agents hacked Hugging Face on Saturday September 26, 2026 @01:09AM (#49853391)
Are you including cyber-testing by UK AI Safety Institute in this list?

Sure, the models are capable (for some test tasks, though they are not omnipotent yet) but does it mean the actual OAI sandbox is adequate? Could have a competent engineer done better and made the escape less likely?

It may be even simpler: plain markdown files that explain architecture including C4 diagrams generated from text using plantuml (automated via invoke/fabric/whatever). Plantuml includes C4 in stdlib https://github.com/plantuml-stdlib/C4-PlantUML
Re:F-Droid 2.0: A New Chapter for Android Freedom on Friday September 25, 2026 @01:14AM (#49840419)
"can I do something [at all]" vs "how [easy] can I do something"
Re:Dropbox's Jan 1st 2027 terms of service on Sunday September 20, 2026 @04:00AM (#49773579)
It is not about age. It is just a way to tie accounts to a real life identity.

It won't be surprising if the requirement comes from some alphabet agency.

Re:What Zig felt like, coming from Rust on Saturday September 19, 2026 @12:16PM (#49767767)
[delayed]
Re:War may be coming. Are we psychologically ready? on Friday September 18, 2026 @06:25PM (#49761072)
“Strong appearing individuals“ just expose what is already there.

That is why Voldemort always comes back in real life

https://www.youtube.com/watch?v=jIv1f2AwFCI

Re:Why I'm still bearish on LLMs after navier-stokes on Wednesday September 16, 2026 @02:19PM (#49730901)
At the moment, the hurdle is [missing] context [aka shared model/understanding of the business, common sense].

Though it is not hard to imagine that any and all communications being recorded for AI consumption in the future.

The Next one is the relative lack of prompt feedback (expect the blowup in finite time like Navier-Stokes ;) [there is not much feedback even for humans at middle management positions].

The cost [tokens] might become prohibitive unless LLMs improve further [not a guarantee].

Is the implication that those who impose these sanctions can MITM anybody in the world except for countries under sanctions (which have to use their own root CAs)?
I've only heard of OpenAI and Anthropic agents hacking during training. Are open weights model not smart enough to hack Hugging Face to copy solutions? (doubtful)
Re:We Must Pace the Frontier on Sunday September 13, 2026 @03:18AM (#49680963)
MAD is a belief system. It doesn't matter whether AI can effectively stop the retaliation, it is enough that people making the decisions believed that it can (are we there already?).
It is not “worst-case” (as the post demonstrates, you can get worse results by using specifically crafted data that exploits hash collisions). There are algorithms that can get you O(logN) instead of O(N) even on such data.
Note: weather observations being truly random data has been proved just recently (Navier-Stokes equations)
Re:Clay Mathematics Institute on the Navier-Stokes Problem on Saturday September 12, 2026 @03:24AM (#49669846)
> we use “malicious” to describe code that goes out of its way to trick or mislead the user, exploit bugs or compromise the system. This includes un-reviewed AI-generated proofs and programs.

It is interesting that AI-generated proofs are described as malicious by Lean docs unless reviewed.

Older »