Hacker News Reader

jooops1on OpenAI agent hacked Australian government website, PM says

I hope this includes politicians in power as well, who acted like software security is an after thought.

jooops1on Quasar 438B: Europe's Leading AI Model

I do care, because those models can contain backdoors and 'open weight' models can require specialized hardware to run in the future.

jooops1on Malicious Rust crate Arrayref runs a build-time payload

Can you explain how an effect based language helps here? Also to note filesystem access can allow network access on many systems and also the other way around.

jooops1on Malicious Rust crate Arrayref runs a build-time payload

The author proposes to reinvent the wheel and depend on stale dependencies, which are EOL. Neither of that is an acceptable solution with LLM-based Agents being able to produce exploit(ExploitGym) chains in minutes from known bugs. The other issue is that Rust's forces the user to provide more information and APIs are usually kept generic for systems programmer, so standardizing things is not as straight-forward compared to Go where you can assume a memory-management, a virtual thread runtime and mostly ignore dynamic dispatching.

jooops1on Mistral Patent for “Code implemented tool calls”

Can there be consequences for those who grant those patents? It seems the primary examiner Brian W Wathen also granted prior Art patents to Salesforce and NCR Voyix as well.

jooops1on Assembly Hall of Shame

It increments rip by one.

jooops1on How memory safety CVEs differ between Rust and C/C++

Yep I agree C++ lacks many features Rust has solid support for. But the real issue with C++ is the development process, almost all the people involved in the Module system are rather old and worked for Microsoft once. They are just in their own bubble and not having an open RFC-process blocks experts in that field.