News for hackers. Stuff that matters.

dilyevsky

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @01:27AM (#50322933)
In some cases on the NIC itself! (i'm sure you know this)
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @04:36PM (#50214977)
been using it for years, haven't found a compelling reason not to yet
Re:Today, we hacked what we'd set out to hack: the iPhone on Friday October 23, 2026 @02:57PM (#50213759)
some sites don't work (you can explicitly whitelist them tho) but generally it's been fine. i would honestly prefer a phone that doesn't allow any comms to any non-contact list parties at this point.
Re:Docker Is Weird on Friday October 23, 2026 @03:03AM (#50205382)
> Unlike metal servers, VMs are just operating systems being gaslit by a hypervisor. Your actual CPU is still executing those instructions! And if you know where to look, yyou can even read the other VMs’ memory in L1D
Re:PingCap TiDB Leaks on Wednesday October 21, 2026 @01:49AM (#50176561)
only the beginning. next year or two are going to be wild on this front so buckle up...
i think part of the reason was ant had really really hard time raising their A bc at the time nobody believed second frontier lab was possible. similar to that other nuclear energy startup taking money from putin/epstein tainted fund
Re:A skeptic's first contact with Kubernetes (2024) on Sunday October 18, 2026 @02:45PM (#50144041)
crossplane is more about lifecycle management than just pure API
Re:A skeptic's first contact with Kubernetes (2024) on Sunday October 18, 2026 @02:43PM (#50144031)
most ops people just like templates bc coding wasn't their strong suit (at least before AI) and helm delivered the least friction way of using templates.
Re:A skeptic's first contact with Kubernetes (2024) on Saturday October 17, 2026 @06:04PM (#50135598)
no one is stopping you from importing k8s types as protobufs and writing a program to talk to k8s api via protobuf encoding. all the types are already protos (except CRDs). it's just not the most user-friendly way so most people don't use it.
Re:Redesigning Source Control at Anthropic on Wednesday October 14, 2026 @02:55AM (#50083469)
i have noticed with opus 5.5 it produces 10x more smaller commits doing the same kind of engineering work i was doing before. probably an artifact of the RL process. would explain massive uptick in commit load at least partially
Re:DGX Station GB300 Cluster: Two 400G DACs, and Frontier Models on Wednesday October 07, 2026 @04:31PM (#49998402)
so much $$$ and they only put pcie5 in there?
Re:10 Tells of a Slop UI on Sunday September 27, 2026 @04:23PM (#49870455)
for whatever reason AI just loves colored accent stripes on cards and overuses the crap out of them. once you see it you can't unsee it
Re:What Is RLCD? The Secret Behind Jev on Thursday September 24, 2026 @03:38PM (#49835817)
You're right to question this and OP shouldn't have done it.
Re:Creatine uptake enhances antitumor immunity on Thursday September 24, 2026 @02:51PM (#49835211)
Worse beach looks
Re:Google's Open Agentic Orchestrator on Sunday September 20, 2026 @09:29PM (#49782008)
Interesting, we had developed a very similar framework for our internal agents: https://github.com/apoxy-dev/clrk For us main use-case was intercepting all network I/O including LLM providers, HTTP, and random TCP/UDP calls
Re:How to Write with an LLM on Friday September 18, 2026 @05:22PM (#49760422)
load-bearing was a meme phrase used sarcastically on twitter long before claude started overusing it.
> A model is not an appropriate solution

that's a bold statement without any supporting argument. more like an opinion really. specially trained classifiers can be very good. sentiment analysis has been a thing for a while now, there had been entire businesses built on this tech where being even slightly wrong can be very costly

Re:GLM Built Its Own Inference Infrastructure on Thursday September 17, 2026 @03:03PM (#49745087)
they did rebuild their serving layer from fastapi to some rust thing so...
there is a number of different methods. One is a separate model/classifier trained with human annotation. Here's a paper by OAI: https://arxiv.org/abs/2305.20050
That depends on the bylaws and specific contractual director-designation rights they may or may not have. Ianal but if he really controls 84% of shareholder votes like he claimed, he should be able to alter the board composition legally. Probably enough to get him unfired
If we’re comparing it to human thought process then there’s famously s1 and s2 thinking with former being more like looping in the latent space and s2 being more like cot. Personally im not convinced the way llm “think” is all that analogous to real thinking and cot and looped transformers are just neat tricks to tease out pre training data better
Re:Where has Construction Automation been successful? on Monday September 14, 2026 @12:14PM (#49699367)
turns out that's not much cheaper and really limits design choices and sometimes house locations
wouldn't that imply some sort of "subconscious" reasoning ability that's hidden? and if that was the case why would we need cot in the first place?
> There really is no way to control them

it seems like it should be feasible to analyze cot trajectories that lead to such behavior and punish them retroactively so not sure it's impossible but maybe someone just hasn't tried enough

Re:I used Fable to rewrite 65kLoC of Go in Rust. It cost $400 on Wednesday September 02, 2026 @01:45AM (#49532217)
Ime it remains the best model for prototyping, sims, visualization etc throwaway scenarios. Just don’t look at the generated code if you just let it rip on the problem for hours ;) but that advice applies to any model unfortunately
Re:I used Fable to rewrite 65kLoC of Go in Rust. It cost $400 on Wednesday September 02, 2026 @01:41AM (#49532185)
Wouldn’t finding such bugs be considered advantageous? That is unless someone just yoloing the result directly to customer ofc
Re:Everyone Should Build Their Own Network Stack on Sunday August 30, 2026 @10:53PM (#49505082)
Are you aware of the syzkaller and how many bugs it still finds including in networking stack?
Re:Everyone Should Build Their Own Network Stack on Sunday August 30, 2026 @10:46PM (#49505048)
Yes, lots. Early spdy was vulnerable to CRIME attacks and so was TLS1.0 (and to bunch of other attacks). Kaminsky DNS cache poisoning is another one that comes to mind
Re:vLLM v0.28.0 on Saturday August 29, 2026 @04:43PM (#49493169)
Lmao that output genuinely gives me the creeps. What's you opnion vs. SGLang in this regard?
Re:The Internet Is Kind of a Predatory Cesspit Now on Saturday August 29, 2026 @03:43PM (#49492717)
Even 25 years ago being “too online” - back then it was icq, livejournal, and forums - was already destructive as hell and always led to some pretty cringe outcomes. At least these days some people make a career out of it, back then it was purely negative

Older »