HNHacker News
TopNewBestAskShowJobs

PlasmaPower

72 karma · joined February 19, 2026

submissionscomments
PlasmaPower··on David Sacks: OpenAI and Anthropic Don't Need Regulations to Pace Frontier Models
They are not. This is why OpenAI and Anthropic are Public Benefit Corporations, which gives them the ability to prioritize the public over profit. The issue is that an agreement between them to mutually slow down is an antitrust concern.
PlasmaPower··on Nashville uses eminent domain to block data center near zoo
Then they should be even easier to shut down if they're viewed as a wasteful use of water! I think the fact that they are not shut down is evidence that people do not in fact view them as such, or at least not as much people view data centers as a waste of water.
PlasmaPower··on Nashville uses eminent domain to block data center near zoo
Yeah, those might be some of the other factors. My point is just that actual water use does not explain datacenter pushback well, despite being a predominant argument against them.
PlasmaPower··on LLMs won't break symmetric crypto
It's indeed thought to be really hard to factor multiples of two massive primes, but we don't know that for certain. See https://en.wikipedia.org/wiki/Integer_factorization -- "Unsolved problem in computer science: Can integer factorization be solved in polynomial time on a classical computer?". In fact, we don't even have a proof that this is more complex than multiplying the component primes.

And of course, many cryptosystems are reliant on primitives with much less algebraic structure.

But to be clear, LLMs would presumably break these cryptosystems by building new algorithms and writing code to break them, not by "intuiting" their way to a specific private key.

PlasmaPower··on Nashville uses eminent domain to block data center near zoo
Then why is no one eminent domaining golf courses? Clearly there are other factors at play here
PlasmaPower··on LLMs won't break symmetric crypto
The oversight in your thinking is that we have no proofs about how much computation is needed to break cryptography. For all we know, it could be possible to break all modern cryptosystems in under a second on a computer from a decade ago with the right algorithms.

This is how cryptography has been broken in the past: not just advances in the amount of compute we can do, but exponential speedups in the algorithms to break them. While I agree with the author of this post that modern cryptosystems are very secure and LLMs are not currently near breaking them, I don't think it's unreasonable to consider that if LLMs continue to get exponentially smarter they may make strides in cryptanalysis that we had never considered and break cryptography in unexpected ways. After all, many past cryptography breaks have come from previously unknown methods of cryptanalysis.

PlasmaPower··on An update on residential proxies and the scraper situation
I don't think PoW scales, because if the bot authors get serious they'll start using native implementations that are much more efficient than the web ones real users are running. In theory maybe Anubis could start using WebGPU to help close that gap, but then anyone without WebGPU support is out of luck.

Then again, a large portion of the problem seems to be bots making way too many requests and in general not being optimized in the first place, and this does help filter those out.

PlasmaPower··on New serious vulnerabilities spiked around release of Claude Mythos Preview
I might be missing something here, but why do you assume this spike in CVEs is from bad guys? I would assume it's at least largely good guys finding and reporting vulns, not based on in-the-wild exploitation by bad guys.
PlasmaPower··on CarPlay Is Additive
I'm not sure if the parent comment was written by AI or not (you're probably right) but consistency is indeed one of the main things I think about with Android Auto. Not just consistency between cars, but also consistency with the rest of my phone. The principle seems worth considering.
PlasmaPower··on Statement on US government directive to suspend access to Fable 5 and Mythos 5
No, he specifically gave a proprietary OpenAI model as an example (unless you meant OpenAI models instead of open source models)
PlasmaPower··on FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack
They have a similar command for the Arch Linux forum, where beginners are encouraged to ask questions
PlasmaPower··on Waymo updates 3,800 robotaxis after they 'drive into standing water'
Maybe you don't drive into flood waters, but your Uber driver might, and that's what Waymo is trying to replace, not your personal driving.

In that context I think comparing it to the average human driver makes a lot of sense, because even if you personally are an even better driver, or even if human drivers are better at some specific things, we have more than enough data to show that Waymo reduces accident rates overall in their current rollout.

PlasmaPower··on You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
You're probably right, but that seems like the less important part of this. At that point you've already got an out-of-bounds write. Another comment speculated that you could use PageJack as an alternative exploit path once you have that primitive: https://news.ycombinator.com/item?id=48069623
PlasmaPower··on You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
"static analysis" is usually deterministic rules you can e.g. put in CI. AI is also somewhat dynamic in that it can execute commands to try stuff out. The best AI vuln finding harnesses work that way, by essentially putting the AI inside of a fuzzer-like environment and telling it to produce a crash.
PlasmaPower··on You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
If static analysis could actually find these issues with a reasonable false positive rate, the companies behind them would be running them on Linux to get the publicity of having found the issues like all the AI companies are doing now. Imo the good static analysis heuristics are already built into compilers or in open source linters.
PlasmaPower··on You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
No, you can grant yourself this inside an unprivileged user namespace. `unshare -Ur capsh --print` lists the capabilities inside a user namespace and demonstrates that it has both CAP_SYS_ADMIN and CAP_NET_ADMIN.

Almost all distros allow unprivileged user namespaces, and in my opinion this is the right decision, because they're important for browser sandboxing which I think is more important than LPEs.

PlasmaPower··on Costco sued for seeking refunds on tariffs customers paid
It's not like Costco told them that. Buying something because a third party misinformed you (or in this case, was only temporarily right) doesn't invalidate the transaction.
PlasmaPower··on Tell HN: Anthropic no longer allowing Claude Code subscriptions to use OpenClaw
Yes, but very few people are actually doing that compared to OpenClaw. If everyone else was doing that, they'd be cracking down on it too.
PlasmaPower··on Please do not A/B test my workflow
Why do you think it doesn't have understanding of semantics? I think that was one of the first things to fall to LLMs, as even early models interpreted the word "crashed" differently in "I crashed my car" and "I crashed my computer", and were able to easily conquer the Winograd schema challenge.
PlasmaPower··on Agent Safehouse – macOS-native sandboxing for local agents
Why not? They're definitely not perfect security boundaries, but neither are VMs. I think containers provide a reasonable security/usability tradeoff for a lot of use cases including agents. The primary concern is kernel vulnerabilities, but if you're keeping your kernel up-to-date it's still imo a good security layer. I definitely wouldn't intentionally run malware in it, but it requires an exploit in software with a lot of eyes on it to break out of.