News for hackers. Stuff that matters.

vient

RE was arguably the first* task category to become completely solvable by LLMs on cybersecurity CTFs. This is exactly about obfuscated code, LLMs seem to have no problems with it now. The only probabilistic defense is to include tons of red herring so agent goes the wrong path and ends up in some tarpit like bruteforcing unrelated un-bruteforceable hashes.

* Cryptography category also went down fast but I think LLMs solved RE a bit faster. RE and crypto have in common that the task is completely local, but in classic RE tasks it is also usually ~obvious what you are supposed to do, you just need to do it - which agents do really well.

By "SSH key files" do you mean private keys? Or only public keys?
Re:Are others seeing Google's ReCAPCHA rejecting Firefox users? on Tuesday September 08, 2026 @09:03AM (#49609810)
Interesting, saw reCAPTCHA infinite loop for the first time in a long time just yesterday, on Firefox, and it was when I tried to access an article on PMC. Disabling uBlock and Enhanced Tracking Protection did not help. It looked like several automatic reloads, then one real reCAPTCHA showed, and infinite reload loop after I solved it.

Does not reproduce today though, and I never had issues with PMC/NIH before that.

Re:The Qantas A380 engine disintegration in 2010 on Wednesday September 02, 2026 @08:18PM (#49544381)
I got an impression from the text that pilots were not sure the fuel levelling line does not have a leak itself. Maybe they were afraid the line can leak fuel into fuselage somehow?
Re:mold: A Parallel Linker on Wednesday August 26, 2026 @06:28PM (#49456787)
Rui mentioned today that he managed to speed up mold "about 1.5 times" while writing this paper https://x.com/rui314/status/2092486965186969699?s=20

Seems that some optimizations went to mold 2.42 and others are not yet released. Wild benchmarked mold 2.40 or 2.41

Re:Spaghettifying DRAM on Thursday August 13, 2026 @11:12AM (#49287246)
He also released another research just a few days ago https://news.ycombinator.com/item?id=49245491
This may just be too much. I settled up on 0.2mg dosage - you can find 0.1mg tablets, easy to try different dosages with them. Also seems to work better if you take it 2-3 hours before sleep.
Re:The USSR in 100 Photographs on Saturday August 08, 2026 @08:30AM (#49221211)
> 53. МИР И ЧЕЛОВЕК

Oh wow, a blast from the past. Remember reading and re-reading it a lot when I was very young. Seems it is still printed and updated! You can see the 1988 edition in full here https://samoe-vazhnoe.blogspot.com/2014/03/mir-i-chelovek.ht...

Re:Faster Than Ninja on Thursday August 06, 2026 @09:55AM (#49196778)
Important detail here is that the problem disappers if you use PRIVATE dependencies — but you can't do that with a heavily templated C++ codebase. Templates (and complexity they bring) are there for good reasons (primarily performance at all costs) so we did not manage to find a path forward with CMake.
Re:Faster Than Ninja on Wednesday August 05, 2026 @04:33PM (#49188624)
Not only is CMake single threaded but the generation step time scales almost quadratically* with the number of targets in some cases. Probably not what happens here but this is what forced us to move from CMake — generation times were surpassing 5 minutes, and this is not counting configuring step.

* Because in CMake there are several target properties that may be affected by the "parent" (another target which added this target as dependency), meaning that these properties need to be re-evaluated in the context of each root target dependent on this one. If I remember correctly, exact mechanism is that some properties can have generator expressions, and these expressions can reference "parent" target. Now we imagine an app which has some std lib with 1k targets, and 100 top-level executables dependent on this std lib - suddenly we have 100k target evaluations in generation step.

Re:Kenji/Serious Eats – 30-Min Pressure Cooker Pho Ga on Saturday August 01, 2026 @07:01PM (#49139427)
Just learned about Kenji by finding his "The Best Chili Ever" recipe [0] through Reddit and immediately his another recipe appears on HN. Baader-Meinhof strikes again.

[0] https://www.seriouseats.com/the-best-chili-recipe

Author mentions trying incognito mode without success.

I also tried their strictly mathematical problem description and got filtered 5/5 times.

Interesting, I thought that it can't be right, Fable can't refuse to answer a strictly mathematical problem — well, 5/5 attempts did switch to Opus. Amusingly, one attempt spent almost 10 minutes thinking how to prove NP-hardness only to abruptly switch.
Re:Jamesob's guide to running SOTA LLMs locally on Friday July 03, 2026 @03:26PM (#48778947)
Wonder if AMD MI350P release will affect setups like this. From what I've heard, the price will be pretty similar to RTX PRO 6000 while having 50% more VRAM which is additionally an HBM3E instead of GDDR7.
Re:Why is Slack allowed to get away with lying? on Wednesday May 27, 2026 @07:09PM (#48302012)
At least this time they actually created an incident https://slack-status.com/2026-05/46d9d5d41fbedd9f
Re: on Wednesday May 27, 2026 @06:56PM (#48301883)
https://slack-status.com does not report anything so far. We observe issues sending messages via app and API.

Edit: incident appeared https://slack-status.com/2026-05/46d9d5d41fbedd9f

Re:A brief history of instant coffee on Sunday April 05, 2026 @09:02PM (#47655690)
> A lot of 'premium' branded instant coffee is ~£42/kg. That's £3/kg more than my premium, locally-roasted, single-estate Colombian coffee beans.

You need 7-10 times less instant coffee to make a cup though, so your beans are a lot more expensive in the end. From my experience, cup of coffee is either 2 grams of Nescafe Gold or 16 grams of beans.

I assumed that AI features require server, so the server knows how many users it has. If some features are local then it's not so straightforward.
Approximately all people update Firefox so you don't need telemetry to count "AI disabled" installations, instead you can derive it as "updates requested" minus "AI enabled".
On Windows it is Alt+0151. Harder to use than on Mac but definitely possible, I frequently use it.

On recent versions Shift+Win+- also work, and Win+- produces en dash.

Re:Flux 2 Klein pure C inference on Monday January 19, 2026 @04:39PM (#46684856)
Peculiar that in IMPLEMENTATION_NOTES.md Claude thinks it is 2024 and not 2026 (see Work Log)
Re:Leaked Apple M5 9 core Geekbench scores on Tuesday September 30, 2025 @09:15PM (#45433244)
I wonder if Windows and Linux just can't yet work on heterogeneous CPUs as well as macOS does. Intel chose an interesting direction here, going straight from one to three kinds of cores in one chip. I almost never see LPE cores being used on Windows, and on Linux you have obscure soft like Intel LPMD which I tried but was not able to notice any battery life improvements.
Re:Leaked Apple M5 9 core Geekbench scores on Tuesday September 30, 2025 @09:06PM (#45433200)
> You can easily download unsigned binaries and run them

Of course, but I assume you don't really need to install third-party apps to control hardware. In my case Alienware and Dell bloat came from me setting up an Alienware monitor. MSI bloat came from setting up MSI GPU. Intel Killer stuff just got automatically installed by Windows Update, it seems.

> Microsoft Defender

This one I immediately disable after Windows installation so no problems here :)

On work we get CrowdStrike Falcon, it seems pretty tame for now. Guess it depends on IT-controlled scan settings though.

Re:Leaked Apple M5 9 core Geekbench scores on Tuesday September 30, 2025 @02:37PM (#45429383)
> building a CPU that doesn't guzzle battery

It may be the software problem as well. On Windows I regularly need to find which new app started to eat battery like crazy. Usually it ends up being something third-party related to hardware, like Alienware app constantly making WMI requests (high CPU usage of svchost.exe hosting a WMI provider, disabling Alienware service helped), Intel Killer Wi-Fi software doing something when I did not even know it was installed on my PC (disabling all related services helped), Dell apps doing something, MSI apps doing something... you get the idea.

It seems like a class of problems which you simply can't have on macOS because of closed ecosystem.

Without all this stuff my Intel 155H works pretty decently, although I'm sure it is far away from M-series in terms of performance.

The problem here is not with Optimus though.
Re:Show HN: Downloading a folder from a repo using rust on Wednesday September 10, 2025 @07:14AM (#45196047)
git-archive downloads only strictly necessary files but is not universally supported

https://git-scm.com/docs/git-archive

Re:Show HN: Downloading a folder from a repo using rust on Wednesday September 10, 2025 @07:02AM (#45195952)
Same can be done using git and tar

    mkdir -p <out_dir> && git archive --remote=<remote> --format=tar.gz <branch> <files...> | tar -xzC <out_dir>
Strangely, github does not support this, so tested with bitbucket.
Re:Qwen3 30B A3B Hits 13 token/s on 4xRaspberry Pi 5 on Saturday September 06, 2025 @09:17PM (#45154432)
For reference, I get 29 tokens/s with the same model using 12 threads on AMD 9950X3D. Guess it is 2x faster because AVX-512 is 2x faster on Zen 5, roughly speaking. Somewhat unexpectedly, increasing number of threads decreases performance, 16 threads already perform slightly worse and with 32 threads I only get 26.5 tokens/s.

On 5090 same model produces ~170 tokens/s.

Re:Ask HN: Why hasn't x86 caught up with Apple M series? on Wednesday August 27, 2025 @08:44AM (#45038879)
Won't say I got much longer battery life, and even what I got may be as well explained as "TLP made energy profile management almost as good as on Windows, and then Windows's tendency to get a bunch of junk processes seeping on your battery tipped the scales to favor Linux". Also I ended up switching back to Windows because of never-ending hardware issues with Linux, installing it on 155H back in February 2024 was especially rough but even 6 months later I randomly got Bluetooth not working anymore after Ubuntu update.

My TLP and LPMD configs: https://gist.github.com/vient/f8448d56c1191bf6280122e7389fc1...

TLP: don't remember details now, as I recall scaling governor does not do anything on modern CPUs when energy perf policy is used. CPU_MAX_PERF_ON_BAT=30 seems to be crucial for battery savings, sacrificing performance (not too much for everyday use really) for joules in battery. CPU_HWP_DYN_BOOST_ON_BAT=0 further prohibits using turbo on battery, just in case.

LPMD: again, did not use it much in the end so not sure what even is written in this config. May need additional care to run alongside TLP.

Also, I used these boot parameters. For performance, I think, beneficial one are *mitigations, nohz_full, rcu*

    quiet splash sysrq_always_enabled=1 mitigations=off i915.mitigations=off transparent_hugepage=always iommu=pt intel_iommu=on nohz_full=all rcu_nocbs=all rcutree.enable_rcu_lazy=1 rcupdate.rcu_expedited=1 cryptomgr.notests no_timer_check noreplace-smp page_alloc.shuffle=1 tsc=reliable

Older »