News for hackers. Stuff that matters.

niea_11

Re:Qwen3.8-Max: A New Bar for Coding and Cowork on Monday August 03, 2026 @12:38PM (#49158085)
Do you mean that you get the exact same result (as word for word) because from Groq's documentation, it says that determinism is best effort, and also it's not guaranteed across model versions : https://console.groq.com/docs/prompting?_sm_vck=tMW2S7k17245...

My understanding is that it's best effort because even if you control the seed/temperature, the model version and hardware specs you still have floating point math that will introduce rounding differences

an article explaining this in detail : https://news.ycombinator.com/item?id=45200925

I think that comment is the reporter sharing anthropic's response and the gif is his reaction to their response
Re:DeepSeek v4 on Friday April 24, 2026 @02:56AM (#47886588)
A video by Le Monde (french newspaper) showing that you can have an ai song ready and distributed to several platforms in less than one hour : https://youtu.be/G3d8wBOLS2c?is=meGcHQZtpcRFRUsj

(The original video is in french but it has an autodubbed english track)

Re:AI cybersecurity is not proof of work on Friday April 17, 2026 @02:54AM (#47803177)
I'm confused by the last part saying that if "weak" models (like gpt oss) find the openbsd bug they are just hallucinating. and also stronger models not finding it is because they dont hallucinate but are not strong enough.

AISLE demonstrated in the last few weeks that small (weak per the author) models can find the openBSD bug (when pointed at the code). And apparently did several runs with the same results. Was gpt oss hallucinating on all those runs?

And what separates a strong model from a weak one? Is qwen3.5 27b weak?

Don't trust who says that weak models can find the OpenBSD SACK bug. I tried it myself. What happens is that weak models hallucinate (sometimes causally hitting a real problem) that there is a lack of validation of the start of the window (which is in theory harmless because of the start < end validation) and the integer overflow problem without understanding why they, if put together, create an issue. It's just pattern matching of bug classes on code that looks may have a problem, totally lacking the true ability to understand the issue and write an exploit. Test it yourself, GPT 120B OSS is cheap and available.

BTW, this is why with this bug, the stronger the model you pick (but not enough to discover the true bug), the less likely it is it will claim there is a bug. Stronger models hallucinate less, so they can't see the problem in any side of the spectrum: the hallucination side of small models, and the real understanding side of Mythos

Re:Qwen3-Coder: Agentic coding in the world on Wednesday July 23, 2025 @02:36AM (#44656299)
The env variables names are misleading. They don't require api keys to OpenAI. Apparently, their tool can connect to any open ai compatible api and that's how you configure your crendentials. You can point it to openrouter or nebius.com to use other models.
It's possible that the people complaining now are not the same people that complained about apple's lack of rcs support.
Re:Timemap.org – Interactive Map of History on Friday December 13, 2024 @06:34AM (#42407706)
The same thing for Morocco, it started being called Kingdom of Morocco only after the end of the french protectorate in the 50s.
Re:To Conference Organisers Everywhere on Monday August 21, 2023 @06:39AM (#37207625)
> in the US, whether you are permitted to enter and how long you may stay are determined by the person at the border

I don't believe this is specific to the US. The agent at the border always has the last decision on whether you can enter the country even if you have a valid visa and travel documents.

The files in the repo are a list of magnet URIs which contain in this case the hash plus the title of the content.

Something like this :

    magnet:?xt=urn:btih:BSXYFTH5VCJLB32DYS2FPTJUB2IVNKUS&dn=Fedora-Astronomy_KDE-Live-x86_64-37
Re:DeviceScript: TypeScript for Tiny IoT Devices on Wednesday May 24, 2023 @12:43PM (#36060703)
It's a subset of typescript : https://microsoft.github.io/devicescript/language

Microsoft did something similar before (without a vm) called Static Typescript : https://www.microsoft.com/en-us/research/publication/static-...

Sorry, I never read the quote as supporting suicide as a decision. But it's possible that a person contemplating suicide might see it that way.

I always read it as being about empathy. Explaining that sometimes a person's action probably have subjectively valid reasons that we should try to understand, or at least try to accept.

I read the gp comment's quote the same way that's why I shared this one.

Another relevant quote by David foster wallace :

The so-called ‘psychotically depressed’ person who tries to kill herself doesn’t do so out of quote ‘hopelessness’ or any abstract conviction that life’s assets and debits do not square. And surely not because death seems suddenly appealing. The person in whom Its invisible agony reaches a certain unendurable level will kill herself the same way a trapped person will eventually jump from the window of a burning high-rise. Make no mistake about people who leap from burning windows. Their terror of falling from a great height is still just as great as it would be for you or me standing speculatively at the same window just checking out the view; i.e. the fear of falling remains a constant. The variable here is the other terror, the fire’s flames: when the flames get close enough, falling to death becomes the slightly less terrible of two terrors. It’s not desiring the fall; it’s terror of the flames. And yet nobody down on the sidewalk, looking up and yelling ‘Don’t!’ and ‘Hang on!’, can understand the jump. Not really. You’d have to have personally been trapped and felt flames to really understand a terror way beyond falling.

Re:Twitter Layoffs Continue into 2023 on Sunday January 08, 2023 @09:32AM (#34299387)
Twitter has a bookmark button. It's accessible from the share button.

I think they're planning to move it next to the like button to make it more visible.

Re:Upton Sinclair both disrupted and documented his era on Sunday January 01, 2023 @05:49AM (#34205316)
>Rarely noted is TR commissioned two reports

Do you have the names of the authors of the first one?

A lazy google search didn't mention the commission of two reports

Re:GH Skyline page says “Payment required” on Saturday December 03, 2022 @02:31PM (#33846482)
A tool to represent contributions in 3D.

More info here : https://www.codegram.com/case-studies/github-skyline/

Re:Want cleaner code? Use the rule of six on Saturday September 24, 2022 @03:23PM (#32965774)
It's not fake. In my case, it's not working because of my adblocker. When I disable it, it works.
Sony Visual Products (a Sony subsidiary) uses Linux (which is lincensed under GPL) on their BRAVIA TVs : https://oss.sony.net/Products/Linux/TV/KD-43XE7000_v8902.htm...

Playstation is made by Sony Interactive Entertainment so they probably have different directives/rules

This page says that the kernel is based on Freebsd 11's kernel : https://www.playstationdev.wiki/ps5devwiki/index.php?title=K...

But the freebsd license isn't listed in this page : https://doc.dl.playstation.net/doc/ps5-oss/index.html

So I'm not sure if the first page is correct.

For PS4, the freebsd license was listed here : https://doc.dl.playstation.net/doc/ps4-oss/index.html

Re:Europe Is Losing Nuclear Power Just When It Needs Energy on Tuesday February 01, 2022 @10:19AM (#30163620)
I found this article : https://energyforhumanity.org/en/resources/reports-en/effect...

Curtailment of nuclear power due to periods of extreme heat has had the effect of reducing European nuclear power output by approx. 0.1% since the year 2000. For France specifically, which with its many inland river-sited plants has been the worst hit country, the corresponding figure is approximately 0.15%

Re:Log4j RCE Found on Friday December 10, 2021 @08:53AM (#29509825)
The method responsible for variable substitution is here [1].

There are other lookup mechanisms, (didn't check them all) but they only retrieve environment/static values (this one [2] for example retrieves kubernetes attributes). I think the jndi one is the only one that load and execute code.

Edit : I think my understanding of the docs is incorrect so ignore the next paragraph

From the documentation [3], I have the impression that these variables should be evaluated only when loading the pattern layout configuration. But in reality they are also evaluated when formatting the final log message (log.info(...)).

I agree that the input should be sanitized but only if the formatting behavior is a bug and was not intentional.

One possible explanation for the current situation, is that developers assumed that all lookup mechanism will retrieve only static values (env variables for example).

And then another dev introduced the jndi lookup which execute code, but no one noticed the impact on the already existing behavior (evaluation variable when formatting the final msg).

Edit

1: https://github.com/apache/logging-log4j2/blob/9df31f73b62ba2...

2: https://github.com/apache/logging-log4j2/blob/c2b07e37995004...

3: https://logging.apache.org/log4j/2.x/manual/lookups.html

Older »