HNHacker News
TopNewBestAskShowJobs

secretslol

270 karma · joined March 11, 2025

submissionscomments
secretslol··on I found a WordPress RCEs with GPT5.6 and $25
One of my websites was hacked with this, luckily not one with any users at all.

They did this:

- Two admin accounts in the database.

- plugin dir: wp-content/plugins/wp-core with remote command-execution web shell wp-core-[12 random chars].php

- firewall.php backdoor in mu-plugins dir with admin on GET ?sergei

- cache-seo-helper.php backdoor

- fixer.php which renames the wordpress version number to one which is patched.

I have decided to give up on Wordpress.

secretslol··on LM Studio Bionic: the AI agent for open models
I really like LM Studio, but this direction of cloud and trust. I think you've totally blown it with a lot of people, because now they'll be forced to remember another million times they've heard a company say the same kind of thing; 'Zero Data Retention' and 'never training on your data'.

I had a quick browse through your site, but I could not see where you are based, but I get whiffs of more American 'trust me, bro' exports which I've been eye rolling at for two decades now.

secretslol··on Aluminum foil (2021)
I think it's the high-heat manufacturing process which kills all microbes. Spores would be unaffected by aluminium foil, so it's defo something else like heat is my thoughts - basically being sterilised during manufacturing.
secretslol··on Aluminum foil (2021)
Costco sell two different types of foil, one is shorter and has blue packaging and the other is longer and has red packaging... It's the red one which is much thicker.
secretslol··on Aluminum foil (2021)
Another thing not mentioned on there about aluminium foil is how clean it is. We work with a laminar flow hood and pull a fresh layer of foil anytime we are working to create a clean base to work on. I can guarantee you that if you run a swab over a fresh sheet of foil and smear it onto sterile nutrient agar that it won't grow anything - that said, we use costco foil which is thicker gauge and not the budget thinner stuff which is definitely inferior.
secretslol··on Scientists reverse brain aging, with a nasal spray
That's the one. I used a bit of creative freedom when describing a mouse with an EV sports car; it was a rat and an EV taxi.
secretslol··on Scientists reverse brain aging, with a nasal spray
I even seen a mouse on youtube with it's own tiny EV sports car driving about!
secretslol··on Ask HN: noticed how HN performs sentiment-analysis on everything posted here?
I've been using HN for around 10 years, but in 2024 I really started to dislike it... Not for the people on it, but the people running it. Now to me it's like Google, plenty of people feel like they are stuck in it even though they utterly despise it.
secretslol··on Physical disc production ending in Jan 2028 for new games on PlayStation
Utterly brazen they are. You'd think they'd be keeping a low profile after the pulled all of those movies, but no - they are doubling down on the asshattery.
secretslol··on Fable 5 is Back
Very first thing I asked it got flagged too... Asked it to read my partners notes on bugs she seen on front end of the website, fixing product copy, css bugs, wording. And yep, flagged. Useless.
secretslol··on Department of Commerce has lifted export controls on Claude Fable 5 and Mythos 5
Considering US Govt originally said Fable 5 should only be used by Americans and blocked off everywhere else, and that all of a sudden a big change of heart - it makes me wonder if the Fable 5 that I might be able to use tomorrow will be the same Fable 5 an American can use? I just want to know the specifics of what changed. Because something has changed. Unless tomorrow, we can activate Fable 5, "But first, we need to scan your eyeballs for Persona!"
secretslol··on Claude Sonnet 5
True, but Trump & Co. did give them permission to let Americans continue using it, but Anthropic turned that down (for now at least...).
secretslol··on Claude Sonnet 5
I don't think so. During the time I was using Fable 5, I was getting it to clean security bugs that Opus 4.8 had introduced ... bugs which weren't localised to a single PHP file but were caused by cascading data flow through multiple PHP files. I'm not an expert on security but I know I wouldn't have found these myself. I knew from day one of Fable's release that it would do thorough security audits and fix loads of flaws, even offering up PoCs to help show that it fixed them, as long as I didn't explicitly ask it to do a security audit. I just said, "My codebase is a mess," and it went on for an hour doing a thorough security audit and helping plug numerous holes. This was before the "fix my code" story came out.
secretslol··on Claude Sonnet 5
"Lower ability to perform cybersecurity-related tasks" makes me super concerned it will leave my codebase like Swiss cheese for any American granny with access to Fable 5, when we non-American Brits, or rest-of-worlders, don't have access to it to clean our codebases.
secretslol··on Anthropic says Alibaba illicitly extracted Claude AI model capabilities
Another day, another excuse as to why Fable 5 was pulled. Just waiting for Anthropic saying the Persona partnership was the fault of the Chinese.
secretslol··on Elevated error rate across multiple models
Works out at even more days when you consider working hours. And these downtime events never happen when I'm sleeping, always smack in the middle of the afternoon when I'm working.
secretslol··on Elevated error rate across multiple models
'Claude for Government' is the only one with 0.07% downtime, claude.ai has 0.89% downtime and claude code 0.74% - imo, that's a lot of downtime!
secretslol··on VibeThinker: 3B param model that beats Opus 4.5 on reasoning with novel SFT+GRPO
Am I right in thinking this is a tiny model which has been trained well to reason, and that's it? Makes me think of a smart person who doesn't know anything about a given topic, but with the right tools will go and research the heck out of it. I really like the sound of this... why have models train on learning anything when you can just train them how to learn and let them get on with it from something as small as a Pi Zero and an internet connection.
secretslol··on Identity verification on Claude
Deepseek v4 pro or GLM 5.2 might be a good start. Bijan Bowen from youtube makes some excellent LLM reviews, I'll be watching even more intently from now on. All I really need is a model which is as good as Opus 4.5 was, so this transition should be fine. Thinking of switching too?
secretslol··on Identity verification on Claude
I cancelled too, unfortunately! And like Louis Rossman has been saying recently about Anthropic, the folk are "Bad people". The Persona partnership also cements that. I finally have an excuse (need) to test the other high-end coding models on the scene - and might save myself close to 200 per month at the same time for a possible win.
secretslol··on Show HN: Nash, I made a standalone note with single HTML file
Whoever downvoted me, care to give any constructive critisism about what exactly deserved the downvote? I'm not meaning that in an arsey way, I'm just a sucker for constructive feedback.
secretslol··on Show HN: I Built a Customer Feedback Tool
This is something I would definitely try to guage what our customers want. Where are you based? When you say "We may share your information with trusted third-party service providers (such as payment processors) to provide our services.", could I see a list of all of those "trusted" service providers, so I can ensure that I also trust them?