News for hackers. Stuff that matters.

thejash

Re:Why aren't AI companies being charged for hacking? on Monday October 12, 2026 @12:51PM (#50059170)
Exactly--which means that we should, as this blog is doing, be calling out this behavior

We should be calling our politicians and demanding that companies be held responsible for committing crimes that--if committed by a person--would have resulted in huge fines, significant jail time, etc

As the article points out: it's absurdist to say that these failures couldn't have been anticipated. Discussions of "AI swarms" and other nonsense are a distraction from the fact that the people at those companies just let their software run, unattended, and it violated federal laws about computer access.

Re:The Post-AI Internet Doesn't Look Great on Wednesday September 02, 2026 @04:40PM (#49542231)
I was there in the early days (90's, early 2000's)

It was categorically, undeniably better--that's where the nostalgia is coming from.

There are lots of reasons why this happened (and those are interesting questions.) But simply denying that it was better doesn't seem particularly reasonable to me.

These are real problems, and I think you nailed it: the concentration of power is the core issue.

I don't have a simple, perfect solution. We're just trying to make it possible for individuals and smaller companies to have access to the same kinds of tooling that the largest companies already have access to, and hopefully equalize the playing field at least a little bit...

If anyone has better ideas, I'd love to hear them!

(author here) I strongly agree that these systems start to break down once the code base gets larger (we've seen that with our own projects)

But our reaction to it has been to say "ok, well the best practice in software engineering is to make small, well-isolated components anyway, so what if we did that?"

We've been trying to really break things apart into smaller pieces (and that's even evident in mngr, where much of the code is split out into separate plugins), and have been having a ton of success with it.

I realize that that might not be an option for more brownfield / existing / legacy projects, but when making something new, I've really been enjoying this way of building things.

(author here) I agree that it's super important to understand what software actually does--that's part of the whole reason we made mngr in the first place!

I believe we can use these types of tools to make software more understandable, and mngr is an example of how to do that.

In our case study, we're using AI to increase our test coverage, and if you look at it, I would argue that we are making it more understandable--now instead of just having 100's of tests, we simply have a document that describes how the software is supposed to work, and the tests are linked to that document, and checked to ensure that they conform.

That means that anyone--not just the author of the software--is now able to read through the high level tutorial description of how the commands work in order to understand what the program should do!

And as for the tests themselves, we've been able to make nice testing infrastructure--like the transcripts and recordings that were highlighted in the post--to make it even easier for us to verify the behavior of the software.

We also have an incredibly detailed style guide and set of tests and guidelines to ensure that the entire code base is consistent, and high quality. You can drop into any of the code and pretty quickly understand what is happening. And if not, claude will do an excellent job of describing how any given component works, and how it relates to the others.

Finally, mngr itself is designed to be fully transparent when it is running--you can literally attach to the coding agent you are running and see exactly what is happening, and the program makes extensive log outputs for everything it does (feel free to open a PR if you'd like to see more!)

It's not perfect formal verification, but it does feel like we're making meaningful progress on making it easier to understand software--not harder.

Re:Vibe Engineering on Wednesday October 08, 2025 @02:51PM (#45519339)
Since Sculptor allows you to use custom docker containers (devcontainers), you can check out the other projects in there.

Then your primary project (from Sculptor's perspective) is simply whatever contains the devcontainer / dockerfile that you want it to use (to pull in all of those repos)

It's still a little awkward though -- if you do this, be sure to set a custom system prompt explaining this setup to the underlying coding agent!

(I'm a founder of Imbue, the company behind Sculptor: https://imbue.com/sculptor/ )

Re:Show HN: Sculptor, the Missing UI for Claude Code on Wednesday October 01, 2025 @02:06PM (#45440997)
It actually originally worked that way, and you can still mostly kinda use it that way (except that, because of CSRF protection, it's obnoxious -- run the program once to figure out the command line that the backend python process is started with, eg, via `ps -Fe` on linux, then shut down the app, then run that process. As long as you don't set the `ELECTRON_APP_SECRET` env var, CSRF will be disabled. Use `netstat -pant | grep -i listen` to figure out what port it is listening on)

Obviously not the most user friendly or usable, but we found that people often got pretty confused when this was a browser tab instead of a standalone app (it's easy to lose the tab, etc)

Re:Show HN: Sculptor, the Missing UI for Claude Code on Wednesday October 01, 2025 @09:15AM (#45437332)
We have some docs here: https://github.com/imbue-ai/sculptor

If you have any specific questions that aren't covered there, please let us know in Discord!

Re:Show HN: Sculptor, the Missing UI for Claude Code on Wednesday October 01, 2025 @09:11AM (#45437281)
Yup -- electron app, typescript / react on the front end, python on the backend
Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @08:21PM (#45432922)
I haven't tried it, but it might work if you set the env var yourself (I think you can create a `.env` file in `~/.sculptor/.env` and it will be injected into the environment for the agent)

I'd give it a good 20% chance of working if you set the right environment variables in there :) Feel free to experiment in the "Terminal" tab as well, you can call claude directly from there to confirm if it works.

Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @08:17PM (#45432900)
Definitely! I'm very excited to get in support both for other coding agents, and for as many language models (and providers) as we can.

Eventually what we want is for the whole thing to be open -- Sculptor, the coding agent, the underlying language model, etc.

Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @01:47PM (#45428695)
Nope, not based on vibekit, but it looks like a cool project!

Our approach is a bit more custom and deeply integrated with the coding agents (ex: we understand when the turn has finished and can snapshot the docker container, allowing rollbacks, etc)

We do also have a terminal though, so if you really wanted, I suppose you could run any text-based agent in there (although I've never tried that). Maybe we'll add better support for that as a feature someday :)

Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @01:33PM (#45428512)
Replying to each piece:

> What if my application is not dockerized?

Then claude runs in a container created from our default image, and any code it executes will run in that container as well.

> Can Claude Code execute tests by itself in the context of the container when not paired?

Yup! It can do whatever you tell it. The "pairing" is purely optional -- it's just there in case you want to directly edit the agent's code from your IDE.

> Do they all share the same database?

We support custom docker containers, so you should be able to configure it however you want (eg, to have separate databases, or to share a database, depending on what you want)

> Running full containerized applications with many versions of Postgres at the same time sounds very heavy for a dev laptop

Yeah -- it's not quite as bad if you run a single containerized Postgres and they each connect to a different database within that instance, but it's still a good point.

One of the features on our roadmap (that I'm very excited about) is the ability to use fully remote containers (which definitely gets rid of this "heaviness", though it can get a bit expensive if you're not careful)

> the feature I was most looking forward to is a mobile integration to check the agent status while away from keyboard, from my phone.

That's definitely on the roadmap!

Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @01:16PM (#45428255)
Thanks!

Please feel free to join discord if you run into any bugs or have any issues at all, we're happy to help: https://discord.gg/sBAVvHPUTE

Suggestions welcome too!

Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @01:13PM (#45428216)
Since our launch 2 years ago, we've focused more on the "agents that code" part of our vision (so that everyone can make software) rather than the "training models from scratch" part (because there were so many good open source models released since then)

This is from our fundraising post 2 years ago:

> Our goal remains the same: to build practical AI agents that can accomplish larger goals and safely work for us in the real world. To do this, we train foundation models optimized for reasoning. Today, we apply our models to develop agents that we can find useful internally, starting with agents that code. Ultimately, we hope to release systems that enable anyone to build robust, custom AI agents that put the productive power of AI at everyone’s fingertips.

- https://imbue.com/company/introducing-imbue/

We have trained a bunch of our own models since then, and are excited to say more about that in the future (but it's not the focus of this release)

Re:Show HN: Sculptor, the Missing UI for Claude Code on Tuesday September 30, 2025 @01:02PM (#45428093)
Our current plan is to make the source code available and make it free for personal use, but we're not quite ready to open-source it.

Someday we'll probably have paid plans and business / enterprise licenses available as well, but our focus right now is on making it really useful for people.

To me, the whole point of our company is to make these kinds of systems more open, understandable, and modifiable, so at least as long as I'm here, that's what we'll be doing :)

Show HN: Sculptor, the Missing UI for Claude Code

https://imbue.com/sculptor/

Hey, I'm Josh, cofounder of Imbue. We built Sculptor because we wanted a great UI for parallel coding agents.We love Claude Code, but wanted to solve some of the problems that come from running multiple agents in parallel (ex: merge conflicts with multiple agents, reinstalling dependencies with git worktrees, Claude Code could deleting your home directory, etc).Sculptor is a desktop app that...

( Read More... | 84 comments | 91 points | on HN )
We successfully scaled from a 7B run to a 70B run on the first try, with minimal training instability and no loss spikes. We also predicted performance of the 70B model based on experiment results from much smaller models.

We accomplished this using our hyperparameter optimizer, CARBS. We’re open-sourcing CARBS today so that other small teams experimenting with novel model architectures can experiment at small scale and trust performance at large scale.

When training our 70B model, we sought to accurately evaluate models for natural language understanding and reasoning abilities. Surprisingly, we found that both open and closed models achieve nearly 100% accuracy when evaluated only on unambiguous questions. We cleaned evaluation datasets to isolate true failures of reasoning from failure due to ambiguous or low-quality questions, and have open-sourced many. This includes:

• 11 sanitized and extended NLP reasoning benchmarks including ARC, GSM8K, HellaSwag, and Social IQa • An original code-focused reasoning benchmark • A new dataset of 450,000 human judgments about ambiguity in NLP questions

Older »