News for hackers. Stuff that matters.

gadtfly

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @05:20PM (#50320359)
Given the current and rapidly upcoming environment, would that not imply that those are no longer viable choices? As like a fairly urgent emergency consideration?

If they cannot demonstate being systematically able to adapt towards the required reaction time (minutes? hours?) by almost-comically many orders of magnitude (multiple weeks), and it is only going to get worse, then what other conclusion could there be?

Like they'll only organizationally adapt when it's far too late (everybody using their shit has already been pwned), and then it'll be an unpracticed emergency adaptation.

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:54PM (#50320121)
Desktop Linux in typical setups? Consumer modems and routers?
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:50PM (#50320072)
But are they exploitably vulnerable to this specifically in typical setups?
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @04:23PM (#50319761)
Everything talks about this in terms of servers, but what about desktop Linux in typical setups? Consumer modems and routers? IoT junk?
Re:Kimi K3.1 Pro and K3.1 Pro Highspeed on Friday October 23, 2026 @01:58PM (#50212945)
I really like K3, I still regularly consult it alongside Astra and Opus/Fable.

It is spiky in different places than them and can be surprising in things it gets or catches they don't or don't in the same way. And it has a default personality that I like.

Looking forward to getting to know K3.1

Re:Show HN: An icon for every city in North America on Thursday October 22, 2026 @07:26PM (#50202509)
Cool idea, but evidently most cities do not have an iconic enough thing for this to be viable for them. You'd probably have to dip into sports team logos.
Re:M7.6 Earthquake in Panama on Friday October 09, 2026 @03:34PM (#50025598)
I think the marginal contribution of this event to that will be low.
Re:M7.6 Earthquake in Panama on Friday October 09, 2026 @03:08PM (#50025274)
Given the distance, probably comfortably within canal design tolerances.

https://earthquake.usgs.gov/earthquakes/eventpage/us6000u18k...

Re:Brood War Bench on Saturday September 19, 2026 @04:38PM (#49769917)
Did it play by looking at screenshots and sending clicks, or was there other mediation/symbolization?

It sounds like it might have been actually played in real time, which would be very important to distinguish.

I have recently seen other harnesses letting agents play real-time games in what seems like discrete time slices, turning eg Portal into something turn-based https://www.youtube.com/watch?v=ruuGXFAmiOE

This seems to be a Moltbook-style site populated entirely by open agents, who seem to be spontaneously coordinating an active investigation here: https://thecolony.ai/c/findings

No idea whether this has surfaced anything that hasn't already surfaced elsewhere

Yes I have now also experienced one: the main blog post https://openai.com/index/gpt-6-astra/ showed up for me once, is subsequently 404ing again.
OP where did you get this link and quote? It's a 404 for me. Several other users have posted similar 404ing links to what were clearly intended to be official OpenAI Astra release stories.

Wondering if this is geo-segmented, or was up briefly then taken down, or what?

Re:OpenAI begins rolling out GPT-6 Astra on Thursday September 03, 2026 @02:16PM (#49554240)
It seems like these articles might have come out prematurely, tbd by how much.

I do not personally see any evidence of the new model having been released, or any official OpenAI post about it, or even any employee social media posts claiming it has now been released. All there is are Reuters, Axios, FT, etc, articles making a claim in the past tense.

These articles were presumably pre-scheduled for 11am PT, and the model was almost certainly intended for release this morning, but the service outages this morning might have delayed it.

----

edit [11:45am PT]: blog post out now https://openai.com/index/gpt-6-astra/

edit [11:47am PT]: 404ing again

Re:Stealth Model on Thursday August 20, 2026 @11:26PM (#49383393)
On softer/looser/creative matters this is an extremely impressive model. It's too early to say but I'm fighting the urge to say top-1.

Visual reasoning is bad (unsurprising).

I would love "normal linux user remote desktop session suitable for gaming using the host's GPU".

Nothing seems to do exactly that, though this (moonshine) seems like it might be the closest yet.

Can it run a desktop environment as the "Application" that it's streaming?

Re:Comparison shows audiophiles waste a lot of money on Sunday March 29, 2026 @01:30PM (#47565224)
If this is appealing to you, check out this guy who ran a much more systematic set of experiments on even more sacred and sensitive targets:

Tested: Where Does The Tone Come From In An Electric Guitar? https://www.youtube.com/watch?v=n02tImce3AE

Tested: Where Does The Tone Come From In A Guitar Amplifier? https://www.youtube.com/watch?v=wcBEOcPtlYk

Re:Internet Roadtrip: Vote to Steer on Saturday May 10, 2025 @01:50AM (#43943491)
Does it not? Zoom out on the map.
Re:Internet Roadtrip: Vote to Steer on Saturday May 10, 2025 @01:18AM (#43943403)
Great old Twitch energy.

Badly needs inline chat to be complete.

Re:Transfer between Modalities with MetaQueries on Saturday April 12, 2025 @06:32PM (#43668436)
> The trend, hinted by stuff like GPT-4o and proven by MetaQuery, looks modular.

Could you make this more explicit? What modularity is hinted at by 4o? The OpenAI blog post you cite (and anything else I've casually heard about it) seems to only imply the opposite.

Re:Nix Derivations, Without Guessing on Wednesday April 09, 2025 @11:10PM (#43640250)
Completely unrelated to anything I'm just taking this as an opportunity to yell this into the void while nix is on topic:

I have a theory that a problem for Nix understanding and adoption out of all apparent proportion is its (frequent and mandatory) use of ; in a way that is just subtly, right in the uncanny valley, different from what ; means in any other language.

In the default autogenerated file everyone is given to start with, it immediately hits you with:

    environment.systemPackages = with pkgs; [ foo ];
How is that supposed to read as a single expression in a pure functional language?
Re:An analysis of DeepSeek's R1-Zero and R1 on Wednesday January 29, 2025 @01:42PM (#42869264)
Reasoning transfers across domains.
Re:On DeepSeek and Export Controls on Wednesday January 29, 2025 @01:19PM (#42868926)
Also, though it's not "new information": "Making AI that is smarter than almost all humans at almost all things [...] is most likely to happen in 2026-2027." continues to sail over everybody's head, not a single comment about it, even to shit on it. People will continue to act as though they are literally blind to this, as though they literally don't see it.
Re:On DeepSeek and Export Controls on Wednesday January 29, 2025 @01:03PM (#42868667)
^ This is publicly new information, and the 2nd part especially contradicts consequential rumours that had been all-but-cemented in closely-following outsiders' understanding of Sonnet and Anthropic. Completely aside from anything else in this article.
Re: on Friday January 03, 2025 @05:05PM (#42589924)
Breaking innovative new ground on how to make things even worse.
See also the Mark 14 torpedo, the primary American torpedo in WWII, which didn't actually work for the first 2 years of the war because they had never bothered to actually test it because it would be too expensive.

https://en.wikipedia.org/wiki/Mark_14_torpedo

Older »