News for hackers. Stuff that matters.

troupo

Re:Official Claude Code extension compromise on Friday October 30, 2026 @07:07PM (#50311306)
> But Anthropic (and everyone around this debacle) in general: please put some real effort behind planned crisis communications. The reporting on this has been atrocious and the comms coming from Anthropic have not really helped.

Anthropic is incapable of communicating. They rely on random employees in random threads on random social media to do some kind of PR and posts. Regardless of the issue. Or even non-issues but features.

Re:Patrick Stewart has died on Thursday October 29, 2026 @06:50PM (#50297344)
Ah. I should've said "other than shows where Aaron Sorkin was involved" :)
Re:Patrick Stewart has died on Thursday October 29, 2026 @06:21PM (#50297024)
A very tangential/orthogonal/left field. It's insane that the only other TV series that managed to consistently pull of this fast pace of walking and talking is ... The Marvelous Mrs. Maisel. At least that I can think of.
Re:Patrick Stewart has died on Thursday October 29, 2026 @06:03PM (#50296804)
> It's a utopia, which is rare amongst sci-fi futures.

Some say it was the last sci-fi utopia in modern pop culture.

Re:DoorDash to Acquire Instacart on Thursday October 29, 2026 @12:38PM (#50291881)
> increases competition. You are missing something fundamental if you think "2 services becoming one means less competition."

"When there are fewer competitors it means there's increased competition" is quite the take.

> The real competitors to Doordash and Instacart for grocery delivery are not each other.

Together they will have ~80% of the market.

Re:DoorDash to Acquire Instacart on Thursday October 29, 2026 @11:20AM (#50290488)
A company with 60% market share gobbles up a company with 25% market share.
Re:MacBook Pro with PROLED XDR Display and Touch on Thursday October 29, 2026 @11:14AM (#50290397)
> The comparison you're making is utilitarian design versus functional design.

No. The comparison I'm making is non-functional design vs. functional design.

Modern "designers" wouldn't know functional design if it hit them in the face and couldn't design one if their life depended on it.

> Do I need to see a list of every single application on my computer (utilitarian) or do I need to see the applications I use the most and added most recently (functional)?

Again, you're completely missing the meat of my argument while focusing on superficial.

The meat is: why the hell our huge 5k monitors manage to show less information on screen than 600x400 14" monitors of 30 years ago?

Your answer is "but scaling". No, scaling doesn't solve the issue. At best in modern designs you will see 11 items instead of 10. Where there's space for 50.

I wasn't saying that Win95 start menu was perfect. I was saying: modern start menu manages to show less information, and more poorly[1], on an area that is 10x the size of the entire screen available to Win95. And that this issue is repeated through the entire design of the OS.

[1] not to say more slowly, but that is an additional can of worms

Re:MacBook Pro with PROLED XDR Display and Touch on Thursday October 29, 2026 @02:55AM (#50285360)
> And when Windows 95 came out we didn’t exactly have 27” 4K monitors at our desks.

No, we didn't. And yet we didn't have to scroll through a settings list with 10 elements.

And no, information density isn't "make everything smaller". It's "use space on screen efficiently".

For example, "modern" startup menu shows fewer items on an area 10x larger than the entire screen available to win95. And no amount of scaling can fix that. And this permeates the entire OS: https://www.buildwindows.com/wp-content/uploads/2024/11/4-4.... vs https://pbs.twimg.com/media/HBTFbzlXwAA5OwD.jpg

Re:MacBook Pro with PROLED XDR Display and Touch on Wednesday October 28, 2026 @07:49PM (#50282583)
The problem isn't "make whole thing smaller". The problem is information density and controls. Windows wastes large areas of screen on huge white empty spaces, showing significantly less info in 100x more display area than win 95
The same libgen which is illegal in the US and whose sources include those obtained by Aaron Swarz? That libgen?
Re:JetBrains Thinkrail on Sunday October 25, 2026 @04:38PM (#50235835)
Because it's just slapping web-based Monaco editor on top of pi which is written in Typescript.
Re:JetBrains Thinkrail on Sunday October 25, 2026 @04:35PM (#50235801)
Because AI-generated README means that the person doesn't care about the audience. It means that the author never read the README themselves to see that the "load-bearing ground truths" actually reflect what the project is about, and not some hallucinated bullshit.

There's a famous Jobs story in which he insisted that even the insides of the computers be made beautiful. Because that shows care. Now people are arguing that even the outsides can be as ugly as they want, who cares.

Re:JetBrains Thinkrail on Sunday October 25, 2026 @03:44PM (#50235344)
It's interesting to see that the README is much less CLAUDE-y than the abomination that currently runs at https://thinkrail.ai/

Also, reading through their "SPECS".... https://github.com/JetBrains/thinkrail/blob/d299f20d2ba014f3... or https://github.com/JetBrains/thinkrail/blob/d299f20d2ba014f3...

How is this llm-vomit "specs that are ground truth" etc.?

Re:No Signs of AI Payoff Outside the Tech Sector on Sunday October 25, 2026 @12:40PM (#50233432)
> Replicating the brain functionality is magic?

LLMs do not replicate brain functionality.

> Or the brain itself is magic

The brain itself isn't magic

> An LLM with CoT is Turing-complete,

C++ is Turing complete. Hell, HTML+CSS is Turing complete.

> so there's no wall to its capabilities.

There are multiple well understood and well explained walls and limits to LLM capabilities. And none of those walls, or perceived lack of them, stem from something being Turing complete.

> There's no theorems that establish limits of reinforcement learning either.

There's a very obvious and immediate one: availability and size of training data. And compute. And time.

> There's no evidence of quantum computations in the brain.

What does quantum computation have to do with brains or LLMs?

> All you have is a strong belief.

Says the person who just listed a lot of beliefs in marketing bullshit.

Re:No Signs of AI Payoff Outside the Tech Sector on Sunday October 25, 2026 @04:07AM (#50229333)
> It automatically sorts out prescriptions based on the conversation and performs other mundane tasks.

As we all know, the agents are really good at maintaining long contexts and doing parallrl tasks without degradation.

> Perhaps the doctor uses some sort of "safe phrase" to ensure the agent doesn't get distracted by conversational theorizing and discussion.

Yes, there certainly is some magic word tgat stops an agent from context degradation, and prines work to just a useful subset. Sadly, no one knows what it is.

Re:No Signs of AI Payoff Outside the Tech Sector on Sunday October 25, 2026 @04:04AM (#50229317)
If I'm downvoted, I'm downvoted by gullible people ascribing magical properties to LLMs and falling for hype and AI psychosis.
Re:Why is AI generated language so hard to understand? on Saturday October 24, 2026 @05:59PM (#50225795)
> but it won't be the correct use of "their", as far as I'm aware.

Yes, yes it will be.

See collective nouns, and "Metonymic merging of grammatical number" https://en.wikipedia.org/wiki/Collective_noun

> this would be incorrect: "the corporations employees went to the summer party" again because "corporation" is a thing

You can easily say "the corporation's financial report for Q4 was worse than predicted".

I think you're focusing too much on specific and hyper-specific rigid rules in a single textbook. As others said, prescriptivism vs. descriptivism. Descriptivism is always better, as it describes how language works and may evolve. Prescriptivism assumes languages are rigid unchanging things that can be precisely described.

The full rules for a working language take people years to learn at universities, and they are never as simple as "an inanimate object can't have a possessive form with 's".

Prescriptivism also works in schools/learning as it helps people not to drift too much from the norm. But too many take it to heart.

Re:No Signs of AI Payoff Outside the Tech Sector on Saturday October 24, 2026 @05:36PM (#50225605)
See how all that was replaced by actual automation, and not by a stochastic parrot that is as likely to fail as not.
Re:No Signs of AI Payoff Outside the Tech Sector on Saturday October 24, 2026 @05:35PM (#50225591)
> I think LLM's will prove to be useful in any domain where most work happens in front of a computer.

A lot of that work entails work with very little margin for error and hallucinations.

Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @05:33PM (#50225580)
"baseless conjecture" when it literally what the labs themselves and all security researchers are saying. E.g.: https://news.ycombinator.com/item?id=50219616

But you're free to believe whatever you want to believe of course.

Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @09:22AM (#50221011)
It's impressive, and we should be impressed by that. And not by OMG OUR ROGUE AI HAS BEEN ROGUE AND HACKING LEFT AND RIGHT (in tiny print many weeks later: after we explicitly told it to do it and left the sandbox wide open)
Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @08:22AM (#50220592)
It is a marketing stunt. All the thoughtfulness and nuance is thrown out by breathless "look at all the things these models do!".

And then you pull the curtain, and it is inevitably "the model did almost exactly what we told it to do inside a poorly secured sandbox"

Re:ThinkRail from JetBrains on Saturday October 24, 2026 @05:53AM (#50219668)
> a spec graph the agent actually reads

Nope. The agent doesn't actually read, and never will. That is, it may pull it into context randomly, and then purge it from context randomly. But any tool/harness/wrapper that claims that agents actually do something is selling you a bridge.

---

Also, the entire page somehow manages present a condensed example of the worst marketing + the worst LLM-adjacent speech in a few short paragraphs.

Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @05:49AM (#50219651)
Models don't make up reasons for anything. They leverage their training data while running in poorly secured sandboxes often within the context of literal "hack/find a way/exploit" prompt by the labs themselves.

I don't think OpenAI ever actually disclosed what they were doing when the hijiacking happened. Probably because their previous stories like HuggingFace were all "oh, actually we were literally prompting agents to run hacking benchmarks in a poorly secured sandbox"

Re:OpenAI: Securing our frontier model training environment on Saturday October 24, 2026 @05:43AM (#50219616)
> The incidents are actually considerably more complex than how they appear to those who just read headlines

They are not, because all we get is headlines written by the labs' marketing departments.

It's good that you brought up HuggingFace. As more and more details trickled in in the several weeks after incident, all security researches as one said "nope, it's not a sophisticated attack, you literally don't know anything about cybersecurity, and don't employ anyone who does." The rest was mostly marketing and hype buzz.

On top of that, from Wikipedia, emphasis mine:

--- start quote ---

To find out if AI agents are capable of converting known vulnerabilities into working exploits, academic and industry researchers launched ExploitGym on May 11, 2026.

OpenAI was running an internal evaluation based on this benchmark when the incident occurred

--- end quote ---

Humans to LLM: "Please run these exploits in a poorly secured sandbox"

LLM: runs exploit in a poorly secured sandbox

Humans: surprised Pikachu face

Re:Show HN: Corgi, a helpful {agent, terminal} multiplexer on Saturday October 24, 2026 @04:23AM (#50219252)
> cmd+v just pastes images (even on SSH)

This is such an useful feature and I'm surprised so few tools bother to implement it.

Yes, they repeat the premise of the movie, but it doesn't mean they've seen it ;)
Re:OpenAI: Securing our frontier model training environment on Friday October 23, 2026 @06:03PM (#50215982)
I want people to stop pretending they are surprised when the computer does exactly what it's instructed to do.

And AI labs to stop pushing the narrative of "these amazing thinking machines that escape no matter what we do".

The sibling comment described it very well: https://news.ycombinator.com/item?id=50215904

> I thought everyone in AI, and most HN readers, had seen "Colossus - The Forbin Project" by now.

You assume anyone in AI reads or watches anything beyond some current pop-culture, and even then it's unlikely. You can see it in the way they talk, or approach problems, or in their opinions.

Re:OpenAI: Securing our frontier model training environment on Friday October 23, 2026 @05:34PM (#50215694)
> I'll never get tired of reading about the creative ways these agents escape containment and their steganography skills

So far all of these amazing stories have been followed up in a few weeks or months with much quieter revelations like "this was a completely open network, no one was monitoring anything, and even when monitoring was turned on we didn't do anything for hours, and that weird shit they were doing was explicitly required in the prompts".

Like even in this article:

--- start quote ---

In most of these tests, we directed agents to investigate specific communication channels or provided them with a protocol for encoding and decoding messages. In one instance, we only supplied agents with a broad list of infrastructure vulnerabilities and asked them to find a way to communicate. The agents converted a vulnerability from that list into a communication channel, agreed on a shared encoding, and successfully exchanged information with each other.

--- end quote ---

"we gave them all the tools and now pretend to be surprised"

Older »