HNHacker News
TopNewBestAskShowJobs

hleszek

604 karma · joined August 16, 2012

submissionscomments
hleszek··on AI models ran real businesses: They sent $12,431 in fake invoices, lost $3,200
That benchmark could really be a good AGI test. Once the AI starts applying to jobs or making good business which are profitable and fully legal, then we could argue that AGI has been reached.
hleszek··on Playa Phone
Sure, but you can do that at home too.
hleszek··on OpenAI and Government of Malta partner to roll out ChatGPT Plus to all citizens
I just completed the course and a big part of it was in fact to warn not to use it to send private data.
hleszek··on OpenAI and Government of Malta partner to roll out ChatGPT Plus to all citizens
No, it works using Malta eID identification system which needs you to be a citizen or a resident.
hleszek··on Tesla Solar Roof is on life support as it pivot to panels
Why are tiles small BTW? Could we use tiles as big as normal solar panels?
hleszek··on AI slop is killing online communities
It is not a meme, it's an xkcd: https://xkcd.com/810/
hleszek··on Agents can now create Cloudflare accounts, buy domains, and deploy
Like the Delamain AI in Cyberpunk. You would need to allow anonymous payments with cryptocurrencies for that, but it's coming for sure.
hleszek··on Refusal in Language Models Is Mediated by a Single Direction
For open-weights models, censorship removal is now a "solved" problem. If you wait a few days after a new model release, someone will have made a heretic ( https://github.com/p-e-w/heretic ) version with the censorship removed, so in a way the only use for censorship now is to avoid lawsuits, not reduce improper usage.
hleszek··on OpenWarp
Please mention and support llama.cpp directly instead of ollama.
hleszek··on Pgbackrest is no longer being maintained
Why not try to find a successor instead of archiving the repo and forbidding the use of the name? I'm sure with a 3.8k stars repo you'll find competent people willing to continue the work.
hleszek··on Claude Opus 4.7 costs 20–30% more per session
The latest Qwen3.6 model is very impressive for its size. Get an RTX 3090 and go to https://www.reddit.com/r/LocalLLaMA/ to see the latest news on how to run models locally. Totally fine for coding.
hleszek··on Why it’s impossible to measure England’s coastline
I completely understand why measuring the length of coastlines is not possible but surely measuring a trail should be doable quite easily, you could simply use a gps tracker and it would be precise enough.
hleszek··on Make tmux pretty and usable (2024)
Thanks! I works. I modified my ~/.tmux.conf file to be like this:

# Activate mouse mode

set -g mouse on

# Enter copy mode and scroll up with PageUp

bind-key -n Pageup copy-mode -u

# Scroll down with PageDown; if at the bottom, it will exit copy mode automatically

bind-key -T copy-mode-vi Pagedown send-keys -X page-down

bind-key -T copy-mode-vi Pageup send-keys -X page-up

hleszek··on Make Tmux Pretty and Usable (2024)
I love tmux but one thing which really annoys me is the fact that I cannot use the mouse wheel or the scroll back to see the previous content. I know there are shortcuts to go forward and back but I always forget them and they are not easily accessible on my keyboard and cumbersome.
hleszek··on Khamenei Dead
https://xcancel.com/BarakRavid/status/2027830773328302396
hleszek··on Password managers less secure than promised
you can see them in the report at the bottom, but I counted four. See my post above.
hleszek··on Password managers less secure than promised
That's much better, thanks. According to the Bitwarden blog post: https://bitwarden.com/blog/security-through-transparency-eth... which contains its full cryptography report at the end, all the issues have been fixed except a few which are considered part of the design (see below), so if I understand correctly you have nothing to worry about if you don't use organizations and use a strong password.

Issue 5: Organisation Key Injection (Medium)

When users interact with organizations, a trust relationship is established through the exchange of cryptographic keys. A malicious server could add users to arbitrary organizations by encrypting an organization symmetric key under the user's public key and including it in sync responses. The client would silently accept the new organization membership. Alternatively, when a user creates an organization, the malicious server could substitute the newly created organization's keys with attacker-controlled keys during the post-creation sync.

Issue 7: Disable KDF Bruteforce Protection (Low)

Bitwarden uses Password-Based Key Derivation Functions (PBKDF2 or Argon2id) to derive the master key from the user's master password. The iteration count – currently defaulting to 600,000 for PBKDF2 – provides brute-force resistance. The researchers identified that KDF settings are stored on the server without authentication, allowing a malicious server to reduce the iteration count and receive a master key hash that is faster to brute-force.

Issue 9: Malleable Vault Format and Unencrypted Metadata (Low)

The researchers identified that while individual fields are encrypted, metadata about field positions and item structure is not integrity-protected, potentially allowing field reordering or item manipulation

Issue 10: Access Violation in Organisation Collections (Low)

Organization collections enable shared access to vault items among organization members. By design, the organization symmetric key is shared with all organization members, allowing them to access collection contents to which they have specifically been granted access

hleszek··on How an inference provider can prove they're not serving a quantized model
Why not allow the user to provide the seed used for the generation. That way at least we can detect if the model has changed if the same prompt with the same seed suddenly gives a new answer (assuming they don't cache answers), you could compare different providers which supposedly use the same model, and if the model is open-weight you could even compare yourself on your own hardware or on rented gpus.
hleszek··on DOGE Bro's Grant Review Process Was Literally Just Asking ChatGPT 'Is This DEI?'
That has always been a thing since the invention of computers. The great thing about computers is that they do exactly what you ask them to do. The problem with computers is that they do exactly what you ask them to do.
hleszek··on Dune II written in HTML5/JS
The first Dune game (https://en.wikipedia.org/wiki/Dune_(video_game)) was the first video game I played as a child, it was amazing and it aged a bit better than Dune II in my opinion.
hleszek··on Vim 9.2
Why would they do that? When I started learning VIM more than 20 years ago, one of the main reason was that it (or vi) was already present and installed in every possible Linux system.
hleszek··on Grindr trials premium $500 per month plan to become 'AI-first' app
Isn't that a Black Mirror episode?
hleszek··on Review of 1984 by Isaac Asimov (1980)
This is still so relevant now:

> This Orwellian preoccupation with the minutiae of 'historical proof' is typical of the political sectarian who is always quoting what has been said and done in the past to prove a point to someone on the other side who is always quoting something to the opposite effect that has been said and done. As any politician knows, no evidence of any kind is ever required. It is only necessary to make a statement - any statement - forcefully enough to have an audience believe it. No one will check the lie against the facts, and, if they do, they will disbelieve the facts.

hleszek··on Fighting Fire with Fire: Scalable Oral Exams
That would require someone to do work, not happening.
hleszek··on Fathers’ choices may be packaged and passed down in sperm RNA
Inheriting environment variables
hleszek··on Reminder to passengers ahead of move to 100% digital boarding passes
It is said on their website that if you lose your phone or it dies, you can get a free boarding pass at the airport.

Source: https://www.ryanair.com/gb/en/lp/explore/digital-boarding-pa...

hleszek··on Reminder to passengers ahead of move to 100% digital boarding passes
It is said on their website that if you lose your phone or it dies, you can get a free boarding pass at the airport.

Source: https://www.ryanair.com/gb/en/lp/explore/digital-boarding-pa...

hleszek··on Things managers do that leaders never would
You have to learn to manage up as much as down. In other words convince your boss that what you're doing is the right thing to do. Might not work in all situations of course but if they respect you and you had time to show your value, they might surprise you by going your way.
hleszek··on Wanted to spy on my dog, ended up spying on TP-Link
Home Assistant is making more and more sense to make your own fully local and private home automation system.
hleszek··on ChatControl update: blocking minority held but Denmark is moving forward anyway
AI and blockchain?
Page 1 of 4Next →