News for hackers. Stuff that matters.

teravor

for a standalone project that's fine, but when the project's entire purpose is to track and be an adversary to another project...

the problem is that to someone who can't maintain (realistically, get an LLM to do it without running into refusals) this project on their own, any time they spend utilizing it will end up a waste of time.

the actual value comes from having a solution which tracks cloudflare, a full LLM pipeline for pulling the most recent obfuscated code, reversing it and updating the current solver. without it, users aren't going to have confidence in the continuity of the solver to build around it.

that said, most of the people who really need it roll their own in-house. don't think I have seen someone post it to github yet.

Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @12:46PM (#50292021)
that's exactly the point. a human didn't have the intent.
Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @11:41AM (#50290851)
it's called a cache covert channel and there is a lot of literature and code on the subject.
Re:OpenAI's agents talked to each other through the CPU Cache on Thursday October 29, 2026 @11:21AM (#50290516)
doesn't it require intent? so how exactly are the feds going to proceed when the LLM takes the initiative and helpfully confesses to it in the logs?
Re:Tailscale SSH: Investigation and remediation update on Tuesday October 27, 2026 @07:43PM (#50267466)
it's possible commercial routers such as the ones utilized by restaurants allow wireguard through these days? wireguard makes no effort to be stealthy when emitting.

some VPN apps bypass wireguard blocks automatically by using https tunnels and whatnot.

something about solar I don't understand is even if you crack energy storage for nighttime, what do you do about the tail risks? There are overcast days, sometimes it lasts for multiple days. you can have a volcano eruption or wild fires that have the same effect on solar cells.

would it really be acceptable to have power outages during such events? is it reasonable to have gas plants on standby for just this? if so, you must add them to the cost of solar.

if you are willing to put in the work you can devise a hyper specialization for which you can create an RL playground (which is likely absent in the frontier labs), then you can obtain cutting edge results on it by post training an open weights model using minimal resources.
Re:Why Washing Machines Took Decades to Catch On on Sunday October 25, 2026 @02:26PM (#50234502)
talk =/= worry

only people who are directly impacted by an aspect of automation worry about it, everyone else either doesn't care or is quite happy even as they talk about how bad it is.

Re:Air Purifiers as White Noise Machines on Friday October 23, 2026 @11:52PM (#50218220)
the military has conducted studies where submariners were exposed to a PPM of 1000s with no ill effect. I suppose they were trying to determine how hard they need to scrub.

having said that, it's possible they omitted what other gasses and %s they used for advantage. there could be some mitigation possible there.

Re:Air Purifiers as White Noise Machines on Friday October 23, 2026 @07:58PM (#50216987)
CO2 by itself doesn't appear to be a problem until some truly absurd levels are somehow achieved.

CO2 is usually a proxy for air quality because outside is usually something consistent like 400 therefore deviation from that figure indicates staleness.

Re:Do dentists know what they're doing? on Wednesday October 14, 2026 @07:07PM (#50096836)
iirc there is actually very little to none double blind study into most dentistry.
Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @12:43PM (#50090638)
domain binding requires browser participation.

you can have a TOTP variant which has the browser display a challenge string & QR code, authenticator generates a 5-6 digit response. include more entropy in the response if you want to do away with the password entirely.

passkeys are trash, I would never opt for dedicated hardware (or a cloud service) and using them with a password manager is extremely messy when you want the password manager to be properly isolated from the rest of your system.

by buying a mass produced generalist device (preferably from a randomly chosen vendor) and then restricting it to a specialized purpose you are effectively negating a targeted attack.

I always assumed the people buying those crypto gadgets were idiots.

also, if Apple falls to a supply chain attack like this where their laptops are backdoored crypto theft will be problem number #10.

in order for your model to accomplish that, you would get very rich.

there will also likely always be more. in the limit in order to get an edge your model would start to infer insider information. for example, it's common knowledge by now that satellite imagery is used to measure car numbers in parking lots, that's a proxy for insider information.

so it's not even so much the model as it is the data.

even being able to forecast weather better than publicly available methods can be leveraged to gain a significant edge.

this is why any detection armsrace will have an ending. where the classification classes will be indistinguishable.

for some reason too many people assume it will go on forever. humans aren't perfect, humans have variance. AI systems will nestle in the variance. the same applies to any camera (and lossy compression) you put forward.

even in the event that perfection exists, an AI generator and a discriminator can asymptotically approach it. and it assumes there will be no variance, which isn't realistic (even lossless video has sensor variance).

    > there isn't a whole lot of knowledge about how to use them in the training datasets
if you include a SKILL.md for the MCP (or just dump it into the prompt) it's not a problem.

I don't use Ghidra but IDA Pro MCP works extremely well for me for all manner of tasks. for example, some software likes to call home for license checking (and I wish to run it with networking denied to it). it no longer does.

since GLM 5.2 (perhaps even earlier?) it has been remarkably easy to reverse engineer any closed protocol you want as long as you have a binary. previously, it required so much manual effort as to simply not be worth it 95% of the time.

now all you need is IDA or Ghidra MCP, a binary and some vague sloppy instructions.

some more recent models even started instrumenting a running binary (when possible) to enumerate the protocol without being explicitly instructed to, which is even better.

Re:GLM-5.3 and the spread of advanced cyber capabilities on Tuesday September 29, 2026 @04:16PM (#49899730)
those benchmarks aren't actually indicative of capabilities.

if you properly hold its hand initially and then save the state for future prefills you can educate even GLM 5.2 to be pretty much everything you need.

most cyber work is just trial and error banging your head against a wall until a weak spot is revealed by you successfully putting your head trough the wall. you can offshore this work to an LLM.

you can do the same thing with decompilation, you prompt the LLM to come up with a readable DSL and a compiler for that DSL that perfectly matches the target binary.

Re:Jeeves. Reasoning improves Jev-like decision models on Tuesday September 29, 2026 @10:56AM (#49894433)
this is exactly why Jev doesn't have thinking.

when you want a machine to reason about the prompt and generate a structured output not using an actual LLM makes no sense. I have been doing it since the first chain of thought open models became available.

perhaps there may be a way to get a Jev-type model to think for a very specific number of steps to gain control over its latency, if so that would be the next step. truncating LLM thinking like this does not work well, and its thinking isn't efficient anyway.

Re:Jeeves. Reasoning improves Jev-like decision models on Tuesday September 29, 2026 @10:47AM (#49894284)
you don't need to post-train anything for this.

just get an LLM to think and then force it to output a specific json with prefill post-think.

make sure to include good conditioning text in the prompt with examples of exactly what the output should be like. you don't want dissonance in the probabilities on the prefill.

Re:Pacing the Frontier is not the actual goal for AI labs on Monday September 28, 2026 @05:32PM (#49884696)
I always found it odd that people who are intelligent enough to work in IQ-loaded fields are as easily manipulated by either rhetoric or ideology as anyone else.

growing up I always assumed that everyone would grasp some aspect of game theory intuitively, I still remember the day I found out game theory was a thing - it was like finding out that someone successfully systematized common sense.

most people take the things people say as if they were worth considering. signals without cost are only useful as knowledge of what the signaler wants fools to believe.

the problem here appears to be that police officers are generally of average or below average intelligence. combined with the fact that they face no consequences for incompetence, you have the perfect mixture for nonsense like this happening.

I expect the solution they will settle on is to form a department for interacting with technology like this, who understand its outputs are not edicts.

you can't really expect any meaningful police reforms (such as liability and insurance) because anyone who is in any position to enact them is perfectly fine with dumb muscle that holds a monopoly on violence and is deferential to them. in fact the public disliking the police is an ideal outcome for those decision makers as it gives them more leverage over the police.

are you seriously equating empty rhetoric to legal action?

Trump was an idiot who made himself an easy target for nobodies with no strategic bones in their body to go after him. note that his guilt or lack thereof is irrelevant, what matters is that legal action was initiated against a past president. this one action doomed the republic just like it did the previous Roman one.

the cold political war turned hot with the prosecution of Trump (he made it easy by being an idiot). there will be no considerations for retaliation now, both sides will be using whatever means they have available to damage each other.

also if you look at how the two factions separate from each other decade by decade (there used to be overlap, almost none now) it's obvious that there will be no reconciliation.

it's a musical chairs game at this point, whoever is in power when the democratic facade cracks will be able to seize power and transition into whatever single party state follows.

Re:Why is the liver so weirdly regenerative? on Thursday September 24, 2026 @08:40PM (#49838768)

    > acts on the molecular, cellular
this is rare and even more difficult to understand.

https://en.wikipedia.org/wiki/Structural_inheritance

basically, the genes do not generally contain blueprints but rather processes utilizing existing cellular machinery. a "mutation" can occur in a machine which will allow a propagating difference.

and there is nothing special about populations. it's merely the only way to observe most changes. gene frequencies in gene pools.

Re:Why is the liver so weirdly regenerative? on Thursday September 24, 2026 @08:21PM (#49838598)
evolution doesn't act on the species or even individuals, it acts on the genes which is why it looks like evolution acts on the individual and its close family unit.

people have a hard time grasping this concept for some reason.

my favorite example to illustrate this is the trait of being poisonous. if evolution cared about species and then every single one would be poisonous and all predators would have to hyper specialize in prey (arms race between a particular poison and its resistance). it's precisely because it's so difficult to elicit a benefit from this strategy for the lineage that it's so rare. almost always a mutation in coloration has to happen to set the lineage apart from the others first. and then the lineage has to survive the disadvantage long enough.

Re:Swap, ZRAM, Zswap and Hibernate on NixOS on Wednesday September 23, 2026 @11:18PM (#49825812)
whether to use zram or zswap depends on what your intentions are, hibernation doesn't matter (use priority)

if your intention is to have enough compressed ram such that you never reach the limit (compression ratios are usually around 3 with zstd) you can allocate over 100% of your ram in zram. then have 100% of your ram as a swap partition for hibernation. this works extremely well but should you exhaust your zram swap serious problems may begin.

zswap will be using your SSD and putting wear on it and also imposing latency spikes on old page access, only makes sense if you are certain your swap usage may spike too high in my opinion.

the article mentions that satellites are being jammed as they move above Britain, what does GPS have to do with it?

GPS jamming is for recievers.

does anyone know what exactly they are jamming? if a satellite spies on cellular and wifi activity, can you directionally jam it on that spectrum without causing collateral?

if it's an active frequency hopping radar can you react in time to ruin its image?

can a ground based laser track it well enough to dazzle its optical sensors?

Older »