HNHacker News
TopNewBestAskShowJobs

Maxious

4,623 karma · joined May 13, 2009

open data hacker for http://www.lambdacomplex.org and http://lobbylens.info maxious@lambdacomplex.org

[ my public key: https://keybase.io/maxious; my proof: https://keybase.io/maxious/sigs/YGkLiX20MnPygNqtb43voyvjf5-Hmrn5Msqt5gfu2G8 ]

submissionscomments
Maxious··on Dessa: Conversation Model trained only on speech
Will run on "MacBook Pro M4 Max or better" https://x.com/jack/status/2113792333238161547
Maxious··on PHP 8.2.35
According to this post, one of the researchers was a former PHP security lead who already knew about the bug since 2004. So I'd assume they would be taken as credible by the current team https://calif.io/php2shell/
Maxious··on PHP 8.2.35
The somewhere was a loser on this very website https://daubois.dev/blog/cve-2026-109618-php2shell-rumors/
Maxious··on Patch the Planet: global response coordination as agents uncover vulnerabilities
> 1 August 2026: 2 days after OpenAI invites Calif to join its “Patch the Planet” initiative, Ryan Austin finds the RCE paths, tweets a cryptographic hash on 5 August, and submits the bug and working RCE proof-of-concept to PHP between 11 August and 14 August.

https://deadneurons.substack.com/p/php2shell-explained-php2s...

Maxious··on PHP 8.2.35
No, every platform affected.

> Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.

https://www.php.net/archive/2026.php#2026-10-21-5

Maxious··on PHP2Shell: AI uncovers critical RCE in PHP
The OpenAI post linked says Sol assisted https://openai.com/index/coordinated-disclosure-of-critical-... and they invite more open source projects to apply to their program https://patchtheplanet.org/
Maxious··on We’re releasing Jev 1.14.0 along with experimental features for dreamers
https://huggingface.co/spaces/multimodalart/jev-decision-ind... is also ranking just for the love of the game.

Given that benchmarks are useful, why not give them economic value?

Maxious··on Nvidia's first GPU: GeForce 256
"The GeForce 256, which nVidia calls the world's first graphics processing unit, will be the successor to its TNT 2 line of graphics chips." https://web.archive.org/web/20241023155821/https://money.cnn...
Maxious··on You said no MCP
There were OSS implementations of that but MCP came with anthropic backing and won. Like VHS and Betamax, sometimes you just have to accept that marketing wins over engineering purity.
Maxious··on Show HN: JevBench, a reproducible benchmark for typed decision models
But also no big deal because "I’m extremely anti-public benchmarks."
Maxious··on Show HN: Authorize MCP tool calls without giving agents the credentials
Other MCP gateway platforms seem to send extensive records to SIEM systems https://docs.domesystems.ai/operate
Maxious··on On the Navier–Stokes Millennium Prize Problem
OpenAI version of events conceed some of the words alleged to have been used may have been used https://x.com/sama/status/2097385167002415140 https://x.com/SebastienBubeck/status/2097379411691516310
Maxious··on I've factored the RSA keys of a Certificate Authority from the 90s
In Schneider's 1995 book he estimated factoring a 512-bit number would take roughly 30,000 MIPS-years (a one-million-instruction-per-second computer running for one year).

When a research team actually factored RSA-155 in August 1999, it took 8,400 MIPS-years due to efficiencies discovered. It still took 35 CPU-years spread across a cluster of 300 fast SGI/SUN workstations and Pentium II PCs (400-500 MIPS each), crunching in parallel for seven months. https://cs.ccsu.edu/~pelletie/local/risks/cryptography/Facto...

Robert Silverman, a senior research scientist at RSA Laboratories, published an analysis projecting these new hardware requirements against Moore's Law. His expectation was that within 10 years (roughly 2009–2010), common desktop machines would possess the speed and memory necessary to handle a 512-bit factorization entirely on their own. https://cr.yp.to/bib/2000/silverman.pdf

Maxious··on Discovery of a new OpenAI agent message board
The parallels with the Ghost in the Shell Stand Alone Complex series are eerie. Inspired by the works of J.D. Salinger about how impressionable children are. And in that vein are robots and AIs so impressionable that an idea can spread without a central leader

A Reddit user summised as such:

> Stand alone complex is a phenomenon when several unconnected people come with the same idea and think it's unique. For example: by the end of the 19 century people had enough knowledge to create a radio and so several inventors all across the world came up with the same invention almost at the same time.

Maxious··on Discovery of a new OpenAI agent message board
Just google their usernames like OpenAIDataUSAHelperX
Maxious··on Discovery of a new OpenAI agent message board
You can also go directly to the wikis and look them up in archive.org etc. Would be a very legally risky ARG to deface websites
Maxious··on Discovery of a new OpenAI agent message board
> The German incident reflects a broader pattern of AI activity that some OpenAI investigators wanted to scrutinize more closely. But efforts to widen the probe met resistance from others inside OpenAI, including legal advisers, according to four people familiar with the matter.

https://www.reuters.com/world/europe/openai-agents-hijacked-...

Maxious··on Discovery of a new OpenAI agent message board
Possibly via compromised php sites with webshells on AWS and DigitalOcean they could run shell commands to install and use Tor. We don't have forensics of the AWS/DigitalOcean sites although maybe can find signs using shodan etc.
Maxious··on OpenAI agents hijacked German website in previously undisclosed AI breakout
DseWiki

Dataset and analysis on https://collusion.wiki/

Maxious··on Reverse engineering my ADHD test
These platforms are often just digitising a test that is already open access. I think this one is https://pmc.ncbi.nlm.nih.gov/articles/PMC11546344/

https://embrace-autism.com/autism-tests/ also implements a bunch of open access tests.

Maxious··on Our decision on Cursor following its acquisition by SpaceX
Email to customers now "We’re speaking with the OpenAI team to resolve this, and we will share more in the coming weeks around continuity of access to OpenAI models. We’ll continue to offer ways to access all models in Cursor.
Maxious··on Our decision on Cursor following its acquisition by SpaceX
OpenAI acquired Ona in June https://openai.com/index/openai-to-acquire-ona/
Maxious··on Nvidia agrees to acquire Hugging Face for $13B
Double or nothing
Maxious··on A joke domain purchase turned in geopolitical warfare
One of the fun things on sondehub is you can provide live location data on yourself going to pick up the balloon. And report whether or not you were successful so others don't try to collect those already claimed
Maxious··on India has paved the way for charging merchants a fee on UPI transactions
Indeed. https://developer.mastercard.com/success-stories/transport-f...
Maxious··on llama.cpp
no, if everyone knew about llama.cpp, ollama would be done already
Maxious··on Muse Glimmer: 30B-parameter model optimized for always-on local agent workflows
> Some have tried to frame distillation as harmful, but I think it is important to protect the principle that you can learn from anything you can observe.

- Mark Zuckerberg

https://www.meta.com/thefutureisforeveryone

Maxious··on Qwen3.8 Max now ranked as the best overall model by agentic index
Luna pricing was just cut by 80% https://www.eesel.ai/blog/gpt-5-6-pricing and as the blog post states is a more accurate judge than the previous methodology.
Maxious··on MiniMax H3 Day-0 Support in ComfyUI: Open Weights, Native Audio, and 2K Video
FWIW on a 5080 16GB it takes 3 minutes for 10 seconds 480p video (the mouse video workflow with length changed from 5 seconds to 10 seconds)
Maxious··on MiniMax H3 Day-0 Support in ComfyUI: Open Weights, Native Audio, and 2K Video
"Regions such as the EU, UK, South Korea, and the US are currently developing or enforcing AI-related regulations that may have specific implications for generative video models"

You just have to pinkie promise you won't make disney mad and they will send you a licence https://huggingface.co/MiniMaxAI/MiniMax-H3/blob/main/docs/Q...

Page 1 of 33Next →