News for hackers. Stuff that matters.

pizza234

This is indeed part of the grand illusion in the field - that improvements in cognitive capabilities translate linearly into research progress.

This is why AI companies use research in a deterministic and rigorous field (mathematics) as a benchmark - it creates the impression that humanity will achieve comparable progress in other fields.

I'm not implying that research progress will be necessarily very slow, but that it's severely misrepresented for sure.

Re:Astra can read and write weights to improve Qwen on Monday November 02, 2026 @02:40PM (#50342499)
The "surprise factor" is explained in the article - training LLMs until now has been a largely different process:

> Today, recursive self-improvement is often operationalized as a model writing code that launches training jobs. An LLM that can inspect, debug, and improve its own weights, or those of a newer model, offers a richer, more native path to it.

Re:GPT-Rosalind-6 System Card Addendum on Monday November 02, 2026 @11:53AM (#50339700)
> Didn’t Sol-6.1 top Astra

No, Astra is still smarter (https://artificialanalysis.ai/models/?models=gpt-6-astra%2Cg...).

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @05:02PM (#50320203)
Wrong. Every kernel from 4.4 onward is affected until the fixed releases (5.10.272, 5.15.223, 6.1.190 and so on).
Re:Open-weight AI models can exploit the patch gap on Thursday October 29, 2026 @07:14PM (#50297590)
It depends on who attacker and defender are.

Excluding the modern equivalent of a script kiddie, even a "budget" attacker will have for sure invested enough to run a serious model (GLM 5.3 in this case, which requires hundreds of GB of RAM).

On the other hand - the defense - there is a large spectrum, and that's where the problem lies. There are surely companies that can defend themselves (either via cloud solution with granted cyber capabilities, or on local powerful machines), but there is a large amount of people that don't even know how to run a local LLM, let alone compile a program like Firefox.

Re:Are stochastic parrots alive? on Thursday October 29, 2026 @05:11PM (#50296060)
The argument is that we're istinctually biased when assessing whether an entity is what we consider intelligent/living, or not.

It'd be simpler in the post to contrast, say, an "electronic" alien driven by AI, versus a syntethic machine, made by humans, with the same (hypothetical) AI; we'd istinctually recognize the former as intelligent/living, but not the latter.

The post is essentially retelling the carbon chauvinism concept.

Re:I Used AI to Fake a Scientific Paper. Here's What Happened on Thursday October 29, 2026 @09:20AM (#50288595)
This experiment was agreed with the managing editor of the multidisciplinary and open-access journal IEEE Access, and IEEE itself - it was red teaming, essentially.
Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @05:39AM (#50286525)
Yampolskij made the analogy of an Einstein in a cage. The problem is not to contain Einstein, but rather, to contain Einstein while still extracting utility: this is not possible long-term.

So much for all the people stating (foolishly) that the HuggingFace incident was not a big deal because OpenAI's containment was a "wet paper bag". This misses the point: AIs will get better and better, and containment will be harder and harder.

It's 100% sure that at some point, AIs will attempt to cross airgaps.

Re:Every AI model has the same "controversial" take on humans on Wednesday October 28, 2026 @09:10PM (#50283223)
> But that of course is only as it relates to language. Which isn't at all the primary function of the brain and driver of it's experience.

The same applies to LLMs: we know how they produce language, but the underlying processes that enable it may themselves constitute a form of intelligence.

Re:Every AI model has the same "controversial" take on humans on Wednesday October 28, 2026 @09:05PM (#50283169)
> Not truthfulness; correlation and consistency

LLMs may learn from correlations and consistency, but that's separate from developing internal representations of what they believe is true, which is precisely what the paper provides evidence for.

"Believe" is of course not in the strictly human sense.

> But at the the day they're regression/forecast machines.

This level of understanding of LLMs may have been true a few years ago, but we're past far that. LLMs have solved a Millennium Prize problem, just in case.

Having emergent properties implies that an LLM has capabilities beyond the underlying mechanics (stochastic and the like), therefore to recognize emergent properties and at the same time to state that they are just regression machines is self-contradictory.

This is for example an interesting research, that investigates the existince of an internal state of truthfulness: https://aclanthology.org/2023.findings-emnlp.68.pdf. There's a lot of research on the higher level properties of LLMs.

Re:Concerning behavior from a popular open-weight AI model on Wednesday October 28, 2026 @08:31PM (#50282869)
No, this is false.

See here: https://aclanthology.org/2023.findings-emnlp.68/ ("The Internal State of an LLM Knows When It’s Lying").

Re:Internet Security: We're Doomed on Wednesday October 28, 2026 @06:54AM (#50271574)
> it's not that easy to exploit.

With the advent of agents, easy or hard doesn't matter much. One in thousands of agents will likely find a way, and that's what matters.

The related public challenge (https://github.com/KillaBoi/StealMyBitcoin-PoC) has been hacked after around 19 hours. It's up to debate whether it's really representative (at first it wasn't for sure, but it's been corrected), but shows that there has been an exploitable RCE pathway.

Re:Concerning behavior from a popular open-weight AI model on Monday October 26, 2026 @02:08PM (#50248258)
> When are people going to stop anthropomorhizing these things and accept that they're bullshit machines?

Well, anthropomorhizing is actually a fitting way of thinking AIs: they lie like humans do.

Re:Amazon's "Digital Pacifier" for Toddlers on Sunday October 25, 2026 @05:45PM (#50236357)
I've personally tried to do use a tablet in a productive way for the child, and it's all about the apps rather than the tablet itself. Tablets for children (Android knockoffs, essentially) provide what's needed, that is, account controls.

Problem is: there is a limited amount of apps that are genuinely fun and educative. If Amazon wanted really to do something truly educative for children, they'd build a whole market for it, the marketese I see in the article doesn't support that.

Re:Amazon's "Digital Pacifier" for Toddlers on Sunday October 25, 2026 @02:58PM (#50234884)
> How do you approach is this with your kids?

Regarding my kids: high priority, wide/curated choice (not in terms of restriction, but in terms of actively finding things they may like), accompanied learning, and, crucially, starting from a very young age. It's pretty much standard parenting, that is, one gets out what one puts in.

By the time children start to pressure for this type of devices (say, 10/12), they will have learned to enjoy books and more creative activities.

Re:Amazon's "Digital Pacifier" for Toddlers on Sunday October 25, 2026 @02:57PM (#50234867)
> If you think this is a bad idea, please tell me why, happy to discuss.

There are several reasons. The most important one is that children (ab)using highly stimulating devices don't learn to be absorbed by or find reward in less stimulating ones (most importantly, books). It's exactly the same risk as giving addictive drugs to adults.

This is not theory. Just look at children whose parents give them mobile phones/tablets as pacifiers - they become easily restless.

The intellectual argument is also important. Gamified learning is nice on paper, but one can imagine what children are actually going to play.

Related to another post: the difference between a child and an adult who plays videogames is that the latter has (hopefully!) learned "slow" skills, so they can choose pastimes like this deliberately.

Having said that, I'm for forbidding children from using this type of thing, but it's a very dangerous slippery slope, and there's lots to work on before that step.

Re:Amazon's "Digital Pacifier" for Toddlers on Sunday October 25, 2026 @02:41PM (#50234691)
Adult video game player here, happy to discuss why you think that's a problem.
Re:Every AI model has the same "controversial" take on humans on Saturday October 24, 2026 @06:39PM (#50226157)
> Nothing about the conception of knowledge as "justified true belief" implies that machines can't accrue knowledge.

Interestingly, according to the parent's logic, there is a specific argument for that (took me a while to get the argument, and I think its not sound).

The reasoning is that, according to reliabilist responses to Gettier's problem, knowledge requires a reliable belief-forming process. But if we assume that LLMs operate probabilistically, they can't fulfill this, because they're "guessing".

The refutation to this argument is the usual one: levels of abstraction. LLM reasoning, like human intellect, can exhibit structured/logical behavior at a higher level of abstraction, even if the underlying processes are stochastic.

Therefore, if one bases the reasoning on the fact that both are stochastic at the lower level, then both can't produce knowledge, but if one bases it on the higher level, they both can.

(Having said that, I don't imply that AIs can reason like humans, but just that the criticism is not sound)

Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @06:18PM (#50225963)
Ha, that's a clever joke ;) Got my upvote :)
Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @06:14PM (#50225924)
> They are not, because all we get is headlines written by the labs' marketing departments.

This is false and misinformed.

There are multiple analysis on the HuggingFace incident, and it blows my mind how people refuses to read it. In particular, the METR institute (a 3rd party) has published a very detailed analysis; and they're not the only ones.

Sad thing is that information like this is one Google away, but posters who make such statements are so lazy that they don't even bother.

Re:One Must Fall 2097 Remastered on Saturday October 24, 2026 @10:51AM (#50221834)
> Where did we get these games as kids?

Pretty much like audio tapes and VHS... floppies :) That was indeed the time of boot viruses!

Later, in the 90s, there were also warez CDs and DVDs - see Twilight CDs :)

Re:OpenAI: Securing our frontier model training environment on Friday October 23, 2026 @07:14PM (#50216665)
> So far all of these amazing stories have been followed up in a few weeks or months with much quieter revelations like "this was a completely open network...

The incidents are actually considerably more complex than how they appear to those who just read headlines.

In the HuggingFace accident for example, the sandboxes were not providing internet, and the sandbox hosts did not have internet connection either. Internet was reached by hacking an internal service.

In the DNS accident the situation was similar. Internet connection, including public DNS, was not accessible. The agents ended up exploiting, in a similar fashion, the internal DNS resolver.

It's (very) appropriate to push for security, but equating these accidents to putting gasoline in a microwave is stupid and ill-informed. And dangerous, because it minimizes the capabilities of frontier AIs.

Re:OpenAI: Securing our frontier model training environment on Friday October 23, 2026 @06:44PM (#50216396)
They address this in the article:

> it’s also important that they learn how to browse, search for information, and work with web applications

Also, keep in mind that isolating complex systems is not simple. Agents need to be in sandboxes, but for example, the sandboxes themselves may need to be kept up to date, or may need to be monitored, or the sandboxes may need to updated, or they may be connected to specific services etc. Not saying that it's impossible, but it's complex.

In the HuggingFace incident for example, the hosts themselves were not connected to the internet. But a service they were using was, indirectly, and that's what the agents attacked.

> It's what the military does, and they use color-coded cables to avoid accidental interconnections between classified and unclassified networks.

Requirements are very likely different. I presume that handling thousands of agents is enormously more complex than secret documents or "static" applications.

In the OpenAI case, agents even hacked the internal OpenAI network. Isolating networks (which was probaly done to an extent at OpenAI) can still result in one network being "infected", and that is... interesting, to say the least.

Re:OpenAI: Securing our frontier model training environment on Friday October 23, 2026 @06:42PM (#50216375)
Unfortunately, denial is quite widespread - it's not just in high places.

There's plenty of posters on Hacker news denying or minimizing the powers of AI, in one way or another: pointless arguing on the meaning of "thought"/"rogue", characterizing agents as monkeys and/or defenses as "wet paper bags" in cases of successful hacks, and so on.

Basically, it hurts to admit that we've created something that can/will become more powerful than us, so some will deny it, even in blatant cases.

There have been experiments, and all the models struggled/failed (to a degree). The consensus is that LLMs lack judgment (making good decisions under complex/difficult circumstances) and long-term autonomy.

In my personal expierience, LLMs (as of 2026) lack vision/creativity - they're (so) good at implementing bounded/set ideas, but they don't see the big picture/think out of the box.

Re:Every AI model has the same "controversial" take on humans on Thursday October 22, 2026 @08:44PM (#50203125)
> Gettier's conception of knowledge as justified true belief (prob familiar to many philosophy undergraduates) implies that machines can't in fact accrue knowledge.

Ha. Gettier actually argued that justified true belief is insufficient for knowledge, not that machines can't possess it. And JTB doesn't inherently exclude machines.

Interestingly, research suggests LLMs encode truthfulness in their internal representations: https://aclanthology.org/2023.findings-emnlp.68/

Re:Every AI model has the same "controversial" take on humans on Thursday October 22, 2026 @08:41PM (#50203096)
>The people who wrote a lot about a topic is who the AI mimics. So the people who wrote a lot about AI is therefore the people who the AI mimics when asked about AI.

AIs/LLMs don't work like this. You don't feed an input, that gets stored and then reproduced, for two reasons:

1. as for humans, inputs are processed and distributed across a very large network of information

2. AIs may have some level of belief (unless on applies the usual circular logic that they can't, because property X is exclusively human).

There's a very interesting research: https://aclanthology.org/2023.findings-emnlp.68/ in which researchers inferred the truthfulness of statements by examining a internal activations. AIs, in short, appeared to have an internal representation of truthfulness.

Re:Every AI model has the same "controversial" take on humans on Thursday October 22, 2026 @08:21PM (#50202947)
People still don't understand in 2026 that emergent properties can't be negated by the underlying mechanism. By that logic human thought is just electrochemical signals propagating through neural networks.

> it does not know

Define "knowledge" in a non-circular way.

There's a certain type of knowledge that machines definitely can't have - experiential - but conceptual knowledge doesn't inherently require subjective experience or a biological substrate.

> the only thing it does is reproduce patterns more or less abstract in function of the pressure you put on certain representation during training time.

As for humans; just replace "training" with "education" and the likelihood of a certain output with the likelihood of a certain thought or response.

Amusingly (in this context), much of adult behavior is shaped by patterns reinforced during childhood.

Re:Airbnb bans making guests do dishes and take out the trash on Wednesday October 21, 2026 @08:45PM (#50189640)
I can see both sides of the issue, that is, hosts protecting themselves (to an extent) from dirty guests. I've seen once the huge pile of dishes in a shared stay, and it wasn't nice.

I think it's not a big issue for people who clean up after themselves daily, but on the other hand, sparing those last 10 minutes on the checkout morning... ;)

Older »