HNHacker News
TopNewBestAskShowJobs

super256

2,182 karma · joined September 18, 2022

submissionscomments
super256··on Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps
A better name is Konduktsemmel, which is a bread roll (Semmel) which you eat on a funeral (Kondukt) in Austria. Fits to Brotli, doesn't it?

(Actually you eat cake and drink coffee on a funeral, but it's still called like that in some parts of Austria.)

super256··on Kimi K3.1 Pro and K3.1 Pro Highspeed
Oh, I remember I experienced that behavior too in one of my private projects, where it didn't want to origin. :D
super256··on Kimi K3.1 Pro and K3.1 Pro Highspeed
I have my agent sandboxed, codex is sandboxing by default.
super256··on German court calls Google aerial imagery 'spying'
You can still do aerial photography for universities while accepting that some people might want their non-public property to be blurred. It's not mutually exclusive.
super256··on German court calls Google aerial imagery 'spying'
I agree. With the mount on the roof it's like, what, 3 meters high? The pole is raising the camera way above head height.

https://www.rnd.de/digital/google-erneuert-street-view-kamer...

super256··on Kimi K3.1 Pro and K3.1 Pro Highspeed
I was recently adding Windows Support for some open source software on GitHub which is maintained by someone else. I gave 6.1-Sol all the instructions needed for creating a build, testing it on my machine, setting up an action on GitHub for CD, and it all did all of it very well BUT THEN IT AUTOMATICALLY OPENED A PR ON BEHALF OF ME WITHOUT ME ASKING FOR EXPLICIT PERMISSION??

That was incredibly embarrassing, I instantly converted the PR to a draft PR and added a comment that I would still need some time to verify everything locally. Ended up doing a few more commits to fix stuff. But damn, it opening a PR without my explicit permission was very scary.

super256··on AHM Statement on OpenAI's October 6 Release of Mathematical Documents
> Structurally there are two distinctive things about heresy: (1) that it takes priority over the question of truth or falsity, and (2) that it outweighs everything else the speaker has done.

https://www.paulgraham.com/heresy.html

super256··on AHM Statement on OpenAI's October 6 Release of Mathematical Documents
This is language Paul G warned us about since, I don't know, at least a decade. Literally ticks all the boxes.
super256··on GPT‑6 and Intelligent UI for everyone
>understandable for any computer science masters graduate

That's a very high bar.

super256··on Decisions API is in public beta
Existing enterprise contracts? Data retention contracts (some have zero data retention contracts)? Staying with a single provider because it's easier to have everything in one place?

There are probably a lot more reasons.

super256··on Mistral Large 4
They say "open weights frontier performance". Of course they aren't comparing to Anthropic, because they are not putting their weights online.
super256··on Show HN: How Stale Is Your AI? Release age and training cutoff for 20 models
It's a "problem" of compute, I think. If you query without an account on ChatGPT you will see the model look up less stuff and research less, than when you have a paid account and choose "medium" or "high" in the effort slider.

Which makes sense, because of you have looked into search and crawlers you notice that search is actual quite expensive (which is why e.g. Kagi charges a few bucks for search every month).

super256··on Tell HN: PayPal blocks GrapheneOS
I do have Version 10.10.0 since today and it also started crashing on open. Guess I'll have to downgrade to an older version for the time being.
super256··on iCloud+ Hide My Email addresses will remain on icloud.com
Maybe hidemyemail allows easily creating many accounts on a site. And some big site didn't like it.

The "Sign-up via Apple" button and creating an iCloud email yourself have a slightly higher barrier than creating a new throwaway hidemyemail email (1 API call w/o captcha/phone verification or whatever).

We might find out later this year if some site starts blocking @icloud.com but keeps allowing @private.icloud.com.

super256··on Every Model Cheats
>Anthropic’s Claude Opus 4.6 system card described Cybench as “saturated,” reporting near-100% pass rates without a cheating audit. If these estimates were representative, cheating would be a marginal artifact.

One would assume that LLM creators do run the benchmarks on systems with least privileges. Which means that the LLMs don't have general internet access, can't read config files etc by design. That's why you also should run agents in a sandbox/vm (codex does this by default).

super256··on Strait of Hormuz Live Traffic Tracking
It was a joke :)
super256··on Strait of Hormuz Live Traffic Tracking
I tried looking you up but were unable to find your profile site.
super256··on Codex in ChatGPT desktop app for Linux is now in preview
It's built on OWL, which is their own Chromium integration. It's not electron.

Seems pretty solid for Mac, but idk about Windows and Linux.

https://openai.com/index/building-chatgpt-atlas/

super256··on Stealing Reasoning Traces from Proprietary LLM APIs
Crawling the internet and dumping it to disk is not "stealing".
super256··on ChatGPT starts blocking direct requests to copy an author's style
Haven't they been doing this for a long time already? I remember trying to copy Hunter S. Thompson's style many moons ago and getting a refusal.
super256··on Judge Rejects Google's Attempt to DMCA Its Way Out of Being Scraped
I don't know! I recently tried to download all posts by Matt Levine for a funny analysis, but GPT wouldn't let me do it.
super256··on Judge Rejects Google's Attempt to DMCA Its Way Out of Being Scraped
If only GPT wouldn't refuse my requests to write a crawler for $site. :(
super256··on Restructuring GitHub's bug bounty program
tbh hackerone should just implement a +/- reputation points feature on researcher profiles. Like, the researcher submits a slop report to GitHub via H1, GitHub looks at it and identifies it as slop, GitHub presses the -rep button on reaearcher profile which bans them from submitting to GitHub on H1 again and makes their rep points minus 1. Companies should be able to configure you need at least 10 rep points to receive payouts. Only specific (by H1 chosen) companies can +/- rep.

So, researchers first need to collect some positive rep. But the rep points are global, so once you have fixed a few bugs for Google, you've gotten enough +rep that you can also receive stuff at GitHub.

Oh, and ID check when signing up at H1.

Long term all beg bounty submitters would be banned for pretty much all of tech.

super256··on Codeberg Bans Cryptocurrency Projects
Fun fact: They deliberately chose to host in the EU because they were concerned that malicious actors could abuse the DMCA by filing fraudulent copyright claims to take down legitimate software repositories.

I guess software that doesn't fit their world view is illegitimate now.

Here is a talk from one of their presidium members about GitHub DMCA takedowns: https://vimeo.com/246282607?fl=pl&fe=sh

super256··on Kimi K3, Qwen 3.8, and Anthropic's (Potential) Unravelling
You will be very happy once OpenAI serves GPT-5.6-Sol on Cerebus at 750 token/s.
super256··on Microsoft Can Track Users via a Windows Device ID
I can recommend the LibRedirect extension for doing this automatically: https://addons.mozilla.org/en-US/firefox/addon/libredirect/

(I don't use it for Twitter, because I find the 5s xcancel redirect more annoying than logging into Twitter. But I use it for Imgur and Tiktok, as Imgur straight up denies serving many VPN IPs, and Tiktok serves a really annoying captcha.)

super256··on ChatGPT Work
The old ChatGPT is now ChatGPT Classic. Codex is now ChatGPT.

There is a funny interaction in the Microsoft store, where ChatGPT turns into Codex when you click on it: https://f003.backblazeb2.com/file/sharexxx/ShareX/2026/07/Ap...

(Also GG @ MSFT for opening a nag about Windows Hello twice while I wanted to stop the recording.)

super256··on GPT-5.6
On the tiny voids demo: does your Firefox js thread lock up as well, when you try to interact with it?

https://openai.com/index/gpt-5-6/#a-leap-forward-in-design

super256··on How to sequence your own DNA at home
I used myheritage and simply exported all my data and then requested an account closure and data deletion.

The main factor for using myheritage was that they have this cheap 30€ offering at the moment.

super256··on Microsoft Can Track Users via a Windows Device ID
Related thread by some Massgrave.dev devs explaining some GDID mechanisms:

https://x.com/massgravel/status/2074304593303892354

Page 1 of 16Next →