News for hackers. Stuff that matters.

unholiness

> "I do believe cybersecurity can contain AI. We just need to be in the room where it happens and have a seat at the table."

Ah yes, if everyone would just properly contain every deployment of every model, just all make sure there are no zero-days in their setup, just let <undefined experts with undefined authority and undefined accountability> in the room, then it would all go okay.

I have none of that confidence and expect containment to rapidly worsen. The HuggingFace incident was at least constrained by the fact that the agents were running on compute budgets, and failed to find ways to expand that by running themselves parasitically on other exploited hardware.

I'm curious to the skeptics here: How long are your timelines are until an incident breaks that constraint too? How long until such an incident has an R_0>1 (where the average time it takes to detect and shut it down is longer than the time for the agent to replicate itself elsewhere)? What, beyond the hope that everyone will just ___, will actually prevent it?

Re:Jev Is Poorly Calibrated on Friday October 02, 2026 @05:51PM (#49939055)
In the dice example[0] and in this one, the expected output is a distribution e.g. "1: 16.7%, 2: 16.7%...", not a random generation. I agree that in implementation, the architecture is not designed to accurately calculate or incorporate any known uncertainties like these, but the task itself is completely reasonable and arguably trivial.

IMO the lesson here is: even in trivial cases, Jev's outputs are just ~reasonableness scores which do not correspond to actual probabilities. They should not be treated as actual probabilities without careful calibration and plenty of meta-uncertainty about how well that calibration extrapolates.

The problem is, most of the value proposition of Jev is that it gives you the probabilities without doing that, which it doesn't.

[0] https://kantahayashiai.github.io/posts/jev-does-not-play-dic...

Re:Jev Is Poorly Calibrated on Friday October 02, 2026 @05:29PM (#49938822)
I don't think so. The author is expecting Jev to output the equivalent of "H: 50%, T:50%", not the equivalent of "TTHTTHTHH..."
Re:Does Georgism Work? Five Years Later on Sunday September 27, 2026 @03:44PM (#49870131)
> drawing more affluent people pushing up LVT driving out residents

Land value taxes only go up if the land value (and thus the demand) is overall going up. The taxes lower desirability, but are also proportional to desirability. So, it's more like a frictional force: inherently counter-cyclical, able to slow down a property value increase but not to reverse it.

So the theory says "nobody goes to the ballpark, it's too crowded" shouldn't happen. And even imagining weird time-delays, mismodeling, etc that could cause it, everything in your scenario is directionally the same with normal property taxes. If it happened, we'd see it today.

Re:10 Tells of a Slop UI on Sunday September 27, 2026 @11:47AM (#49867723)
IMO a single "Main Thing // Detail" is fun and fine and is where the trope came from. I see a ton of "Home // Our Work // Donate // About Us" which has beome cringy.
Re:10 Tells of a Slop UI on Sunday September 27, 2026 @11:43AM (#49867674)
I think lots of AI tells these days are leaks from the ai/writer connection into text for the reader. It partly feels like the inevitable result of RLHF with the wrong human's feedback ("I did it! Pick me!") and partly feels like thinking tokens leaking into the main text.

"Here's the argument, in plain terms", "It's not just X, it's Y", "It's worth stating precisely", "The sharper distinction here"... They're things that gesture toward the relationship between the text and the prompt, making it clear where it matched the author's expectations and where it deviated.

Not that humans are immune from coding/writing for their boss instead of their user/reader!

Re:Revealing the details of how OpenAI agents hacked Hugging Face on Saturday September 26, 2026 @04:41PM (#49860338)
Any halfway decent greybeard could have prevented this... once. That's hardly a security model for humanity.

The HuggingFace incident was at least constrained by the fact that the agents were running on compute budgets, and failed to find ways to expand that by running themselves parasitically on other exploited hardware. I'm now finding myself asking, how long are my timelines are until an incident breaks that constraint too? How long until such an incident has an R_0>1 (where the time it takes to detect and shut it down is longer than the time for the agent to replicate itself elsewhere)?

There's no law requiring sufficiently grey beards to design these models, their finetunings, their prompts, their harnesses, their VMs, their hardware, etc (and for incidents where those were designed by six different companies, there's not even a clear culprit for a law to target!)

I'm finding myself more and more convinced that something like Plan A[0] or the Ban ASI Act[0] are necessary, and less and less convinced they are sufficient.

[0] https://ai-2040.com/ [1] https://intelligence.org/2026/09/23/miris-position-on-the-ba...

Re:I Vibed a Proof of Conway's Conjecture on Friday September 18, 2026 @11:41AM (#49756033)
A wonderfully made introduction to the surreal numbers and their surrounding game theoretic concepts is this video on Hackenbush[0], a winner in 3Blue1Brown's Summer of Math competition.

[0]https://www.google.com/search?q=video+introduction+to+surrea...

Humanity has built every capable institution, every scientific discovery, every technological innovation, without mind-reading. Quite the opposite: By putting thoughts from our latent spaces into words, we better separated the good arguments from the bad ones, placed trust where it was more deserved, and learned to stand on giant's shoulders so well we thought thoughts the giants never would have.

Anyway, I'm much more optimistic about the worlds with AIs that make the effort to properly explain themselves.

I imagine OP is more describing e.g. the backed up 1-lane highway exit, where the second lane is clearly for through traffic. Uber drivers in that situation will often drive straight to the end, signal, completely stop, and just wait for someone to let them in.
Re:Möbius-Strip Crosswords on Sunday August 09, 2026 @08:48AM (#49230928)
I agree it's an interesting puzzle! Just thought he made the jump to transparent paper without introduction in a way that confused me. It seemed instead like a non-transparent Mobius strip would join itself upside-down after a full loop, which wasn't obviously untrue.
Re:There Are Magic Hexagons of Every Order on Sunday August 09, 2026 @08:31AM (#49230819)
Why not every line of knights moves too? Because the cells aren't adjacent I'd say. (Both immediately make the problem unsolvable since all corners must match).

Seems "unfair" that hexagons have multiple line lengths to consider. I think this article's modification is a good one in that framing: Shifting every number up or down doesn't make the magic squares any easier, but it certainly helps with hexagons.

Re:There Are Magic Hexagons of Every Order on Sunday August 09, 2026 @08:22AM (#49230769)
Cool problem. I always doing it a bit unsatisfying that magic hexagons so trivially disallowed solutions that aren't order 3. Starting at a different index is a nice modification, especially since for magic squares it's an equally hard problem.

He says "every order" is solvable this way but I don't think any solution could work for an order 2 hexagon, even without his simplifying constraints (since fixing any side cell to x requires 2 cells to be set to sum-x).

Re:Möbius-Strip Crosswords on Friday August 07, 2026 @07:51PM (#49217551)
> if it actually wrapped around on itself with a half-twist, wouldn’t the letters wind up backwards too? Then 6-Down wouldn’t be MESSENGER but rather MESSENGER, and so on.

This premise is assuming the Mobius strip is transparent, which the header image clearly isn't. No letter-reversals or any symmetry is needed. On normal, opaque paper, you can just make a crossword as a normal long loop. (proof: Write GGGGGGG on one side of a paper, and write it upside-down on the other side. With a twist, you'll get one long GGGGGGGGGGGGGG... looping as if it were one boring single-sided loop).

Re:Our position on open-weights models on Tuesday July 28, 2026 @11:56AM (#49085818)
> The regulation is good only for US interests.

I think your nuclear scenario outlines precisely why this isn't true. Nuclear regulation has terms that are "good for the US" only in an absolute sense. The US would dominate even more overwhelmingly in the unregulated scenario, which gave them negotiation power to get those favorable terms. The same seems true so far with AI.

I don't think you can use the successful negotiation of nuclear regulations to argue there is "no alternative" involving regulation. I think it strongly suggests the opposite.

Of course the details matter a lot, but the core analogy holds in many scenarios. ( https://ai-2040.com/ at least attempts to lay out details, speculative as they may be)

Re:Our position on open-weights models on Tuesday July 28, 2026 @11:27AM (#49085383)
And who is held responsible for crimes committed by AI?

When open model A, fine tuned by B, is running with system prompt C, hosted by D running on E's hardware, is prompted by F to "fix this code", then escapes it's sandbox to hack into a website, or steal money to fund its subagents, or stall the waymo of the evaluator to buy time... who is responsible for the crime?

Our current legal systems are so far from ready to define what A-F are actually responsible for. We need to be moving toward defining these standards fast.

I've directly inspected calls for pro/Max plans and as of today they have 1hr cache expiries. This has definitely degraded to 5 min in the past but that's the behavior today.

If you're paying API rates, you can choose 5m or 1hr yourself (and pay different rates).

Keeping a 1hr cache warm could still be useful, sure, but outside that, I don't see much use of this today.

Re:Are AI Labs Pelicanmaxxing? on Wednesday July 22, 2026 @07:52PM (#49015082)
Training on generating SVGs directly at all is already fairly niche. Generating full scenes with a cartoony character is even nicher. But there's plenty of non-pelican cartoony SVG content out there (created, not written, by humans with vector design tools), and more importantly, plenty of vision models to give feedback on the output (just raster as a png). You could easily hill climb this niche skill, if you cared.
Re:Are AI Labs Pelicanmaxxing? on Wednesday July 22, 2026 @03:49PM (#49012427)
I don't think this small amount generalization to other animals and vehicles is strong evidence they haven't trained on this, either directly or more generally.
Re:You only need the frontier model for one single edit on Tuesday July 21, 2026 @09:47AM (#48992312)
No mention of KV cache, one of the biggest reasons not to switch models mid-stream. Once you pay, say, 50k input and 50k output Opus 4.8 tokens, you don't pay token cost for cache reads of the 100k context while it builds. Switch to another model, you'll start with the cost of 100k input tokens on the smaller model to get that context loaded and its unique KV cache set.

The post may have some real insight here, where this 100k working context is actually better than trying to summarize it's findings into a plan. It's also right that the handoff is a perfect time to edit the context (removing planning instructions). But it doesn't mention it's a trade-off: the plan is smaller, so it's a cheaper "on-boarding" of the next model. Seems quite plausible that this is worth it for 1-off tasks. If it's right, this is basically "plans are useless, planning is everything" for LLMs.

My problem is, I think the plans are useful. I want to review and edit them. I want them to give context for the upcoming code review (even if humans aren't reviewing). LLMs are notoriously bad at explaining why they're doing something in the moment. Humans are notoriously bad at accepting there's no reason why. I think the humans have it right here, and to bridge this gap want my PRs, my docs, and my comments teeming with reasons why. Plans help with that.

Re:You only need the frontier model for one single edit on Tuesday July 21, 2026 @09:44AM (#48992265)
I mean, this is real. Your KV cache lives for an hour since the last token (on anthropic pro/Max at least, today at least, this has degraded in the past). So once you pay, say, 50k input and 50k output Opus tokens, you don't pay for cache reads of the 100k context while it builds. Switch to another model, you'll start with the cost of 100k input tokens on the smaller model to get that context loaded and its unique KV cache set.

The post may have some real insight here, where this 100k working context is actually better than trying to summarize it's findings into a plan. It's also right that the handoff is a perfect time to edit the context (removing planning instructions). But it doesn't mention it's a trade-off: the plan is smaller, so it's a cheaper "on-boarding" of the next model. Send quite plausible that this is worth it for 1-off tasks. If it's right, this is basically "plans are useless, planning is everything" for LLMs.

My problem is, I think the plans are useful. I want to review and edit them. I want them to give context for the upcoming code review (even if humans aren't reviewing). LLMs are notoriously bad at explaining why they're doing something in the moment. Humans are notoriously bad at accepting there's no reason why. I think the humans have it right here, and to bridge this gap want my PRs, my docs, and my comments teeming with reasons why.

(NB: ranted to long, reposting at top level)

Re:Ask HN: Add flag for AI-generated articles on Monday July 13, 2026 @12:45AM (#48888021)
Are you maybe misunderstanding this point?

> It's a fascinating arms race right now: the AIs are training on the humans but the human hivemind is also training on the AIs. Readers are developing allergic sensitivities to language that sounds like an LLM produced it.

Humans are training to detect AI content. Humans writing more like AIs is an unrelated (and slower) phenomenon.

Re:ChatGPT Work on Thursday July 09, 2026 @01:22PM (#48849382)
So, Claude Cowork for OpenAI? Feels overdue!

I've loved using Cowork recently for sourcing decisions. Things where seemingly everyone's out of stock or questionably reputable, just let Cowork spin for 20 minutes, find the best new and best used options that meet your requirements, probably also suggesting a different item that does the job and is available for cheap. I've done it enough that I'm starting to loathe clicking through these sites myself.

Re:Show HN: 18 Words on Thursday July 09, 2026 @11:55AM (#48848023)
I also love the countdown. Counterintuitively it makes the game less stressful — the counter goes back to 30 no matter what. If the timer counted up, you'd constantly need to care about getting each one as fast as possible, or fret about one that's taking you minutes, etc.

With the countdown, you more want to care about the high level stuff: Keep your brain agile enough to get the next one, figure out more general patterns, ensure you "cover" the promising patterns, notice tough spots (with tons of patterns) where you you'll need to lock in. That stuff is more fun to focus on than speed.

Everyone wants to fail less, sure. It's not surprising people's feedback focuses on the mechanic that made you fail! That doesn't mean changing that bit will make the game more fun.

Re:I used Claude Code to get a second opinion on my MRI on Sunday June 28, 2026 @06:56PM (#48712623)
> I have to imagine if you give it positions in text it'd be pretty great

Not at all? LLMs are a terrible match for the kind of analysis a chess engine does (scaled deep search, deeply trained position evaluations). It's just not that kind of tool.

Re:How Many Elementary Particles Are There, Really? on Saturday June 27, 2026 @12:49PM (#48699759)
In a hypothetical scenario where we were inventing the standard model in the first 10^-11 seconds after the big bang, you're right there would be an analogy there. But in that scenario, our standard model would say there was one electroweak particle, not that there were 8 gluons.

In our own universe, the fact that electroweak symmetry breaks ensures there are 4 electroweak particles and not other combinations. There's no corresponding thing to contain gluons to individual particles, you'd need laws of physics we don't have to add that constraint.

Re:How Many Elementary Particles Are There, Really? on Saturday June 27, 2026 @11:56AM (#48699324)
Stopped reading after "Yet in the mathematical equations that define the Standard Model, the eight gluons are distinct from one another in the same way that the W and Z bosons differ."

W and Z bosons, photons, etc have fixed masses, charges, interaction strengths with other particles. These properties can exactly be listed and looked up in a table of elementary particles with discrete rows.

Gluon color is continuous property in a vector space. Gluons can have any color in that space, with any combination of the 8 basis vectors (and that choice of basis is also completely arbitrary). The color |g1> is no more valid than the color (|g1> + |g2> + |g8> / √3) or any other of infinite combinations.

Calling this "8 gluons" is like saying there's "3 photons" because they can have momentum in 3 dimensions. If you want to argue there's infinite kinds of gluons, go ahead, but there aren't 8.

Re:AI's Affordability Crisis on Tuesday June 23, 2026 @12:13PM (#48647256)
"Elastic" in economics happens to refers to how elastic the supply/demand is when the price changes (not vice versa, as you're describing). So e.g. an inelastic demand means the quantity demanded changes very little when the price doubles.
Re:Steam Machine on Monday June 22, 2026 @05:27PM (#48636447)
It doesn't solve scalping, it solves putting everyone in a Red Queen race[0] against the scalpers.

[0]https://en.wikipedia.org/wiki/Red_Queen%27s_race

Re:Midjourney Medical on Thursday June 18, 2026 @08:56AM (#48584595)
Overdiagnosis will be a major problem long after we have the data.

It's just hard convince people with a general feeling something's wrong and a specific picture of something wrong that the two are almost certainly unconnected.

Older »