HNHacker News
TopNewBestAskShowJobs

mariopt

742 karma · joined July 3, 2014

submissionscomments
mariopt··on DeepSeek v4.1 Flash Is Now Our Best Hacking Model
Both these models are not bad but you can not trust them to make good decisions. I meant GLM 5.1/5.2/5.3 in the previous answer, not the flash version
mariopt··on DeepSeek v4.1 Flash Is Now Our Best Hacking Model
Makes sense, GLM 5.1/5.2/5.3 is a lot better than DS v4.1, I found the same results in other domains.

Given how fast and cheap DS is, it's just an ideal model with enough "IQ" to let it loose. Another thing they left out of the article, DS becomes really good if you provide custom tools for the task, on it's own it's mediocre.

mariopt··on Salesforce Global Outage
Could it be people doing Claude/GPT automations and they just can't handle it?
mariopt··on Parque Arqueológico do Solstício
100% SLA
mariopt··on GLM-5.3-Flash
It's only 320B, local frontier AI is getting closer, sooner than expected.
mariopt··on What happens if an entire class of workers loses faith in their careers
Let's see.... Unemployment, AI Lunatics, forced to use AI, AI Slopping...

Much of joy we got from coding was taken way, I can not even imagine anyone wanting to get back to a coding role to vibe slop all day long.

I even heard from colleagues that presented algorithms better than the AI slop and heard verbatim from their boss: I prefer the AI solution instead of your.

So yeah, AI lunatics are ruining tech

mariopt··on Micro-SaaS Is Dead. Service With A Software Replaces It
I don't buy it, this is essentially vibe-consulting.

Deal with one customer can be quite a nightmare, and honestly, sometimes using off the shelf solutions can result in saving time and money.

Even today I'm creating SaaS, not every problem is simple to solve. Take a look at CRMs, there are thousands of CRMs due to enormous egos wanting to build "my way", "the way", "the superior way", "our company is not like others (LOL)", etc. At the end of the day it's just a database with CRUDish UI.

My customers pay me to solve their problem well because they can not solve it themselves, when they do they just don't have the time.

Reality check: I have been coding many products with all frontiers models: Still takes a lot of time and, surprise surprise!, money for tokens. Ironically software development became more expensive for serious software that won't vibe-break/vibe-delete-prod/vibe-delete-database.

mariopt··on AWS: Inaccurate Estimated Billing Data – $1.7 billion
VibeBilling, love it
mariopt··on Claude Code May–July 2026 weekly limits promotion
They're already feeling the effects of competition.

They try to push the narrative of having the best models but people finally discovered that Chinese models are actually great and a lot cheaper, I don't even think this is a reaction to GPT 5.6

mariopt··on Show HN: Getting GLM 5.2 running on my slow computer
I wonder if you could replicate this in a Colourful GeForce RTX 50-series GPU, they ship it with 2 NVMe drive slots.
mariopt··on Better Auth is joining Vercel
So, it's just a matter of time until they destroy this project in favour of their cloud interests. Such a shame, it is (was) a nice open source project.
mariopt··on 98% Isn't Much
Nice in theory, in practice I remember having to support Internet Explorer about 4 years ago. Hard to justify the investment sometimes, at least polyfills gave use some sanity back. The only reason to do it was: Rich old enterprise customer who can't install chrome due to policies created by Dinosaurs.

Websites are surprisingly hard to maintain long term, specially for a broad audience of devices. Developer Experience can lead to better UX, the easier it is to build/maintain, the more likely we're to do it.

Given how bad AI is at design plus all the unstoppable slop train, I expect websites to become much, much worse.

mariopt··on Steam Machine launches today
Now game devs can optimised their game for it and Steam Machine will get royal treatment. It's not unusual for a PS5 game to run slow on a PC with much better hardware due to not being optimised. The Nintendo switch is a great example, pretty old hardware but the games run well (for their intended experience).

Many people are complaining about the price but you can bring you entire steam game collection and even use as a PC if you want, I sold my PS5 once it became a useless brick cause Sony prevents you from running Linux.

mariopt··on Show HN: Verso – A $14.99 Mac word processor with no subscription
Yep, the website looks vibecoded.

Quite suprised this managed to be on HN first page with a fresh account.

mariopt··on LLMs are eroding my software engineering career and I don't know what to do
I think the core issue is not AI itself, it's people.

Right now non-tech people just think AI will do anything they want and are the one in charge of hiring/firing, managing, etc. It's horrible to be a software dev right now, you've to deal with AI and lunatics.

Of course Domain Knowledge is important but, right now it's very hard to have reasonable conversation because... you know... AI this, AI that. I had a customer showing me a Claude vibe coded atrocity trying to convince me it's was a great app, now ask yourself: How are devs even supposed to collaborate with this without going insane? Simple, you can't.

mariopt··on Nvidia is proposing a beast of a CPU system for Windows PCs
I think most people are not understanding what this kind of laptop will provide.

Before we get local AI, we'll be using hybrid AI.

Running big models locally is unrealistic ($$$$$) but, if you imagine an Agentic Workflow where some bits run on the cloud and other smaller tasks locally, it's an amazing deal. You don't need Opus/Code/DeepSeek/Kimi/etc to do basic stuff that models like Gemma4:12b/Qwen-27b can do locally with much less latency.

Having a laptop where I can use a remote big model and combine it with 5 local domain specific models, is something I would love to do today. Imagine using OpenCode and you've a small model deciding which tasks run locally, then decides if you've a good local model for XYZ task or if we use a cloud model.

My main concern is: Is this hardware powerfull enough to allow local quick models switch? Unlikely but I hope I'm wrong

mariopt··on I built a vulnerable app and spent $1,500 seeing if LLMs could hack it
Discovering vulnerabilities is a highly creative task, it's when you explore unsual paths that you discover atttack angles. Some bugs are simple, other are a complex orchestration of many factors.

By "Working with the model", is essentially reading the ouput of prompts and pointing in a direction just to decide the next steps. You could try to increase the prompt limit and create an agent that explores multiples directions in a DFS manner.

The issue with vulnerabilities is the agent not knowing when to stop because it's hard to validade if you reach the final result or not. I get amazing result when I code with AI, letting the AI go wild is just a waste a time and tokens.

I recommend you to read the write up on the crackme (https://crackmes.one/crackme/698f40f1e2ba6023bfacaa82), I think most experience developers would need, at least, 2 months of learning reverse engineering techiques to hopefully crack this one. GLM 5.1 manage to solve it, it didn't "copy pasted" any answer from it's training data. It did a binary analysis, anti debug patching, patching binaries, debugging memory during runtime etc. It only took about 20 minutes.

After seeing what GLM did, I do believe Anthropic concerns about Mythos are real. Cracking software just became a lot easier, too easy for my taste. Video games cheats will be the norm, cracked desktop apps without licenses and infected with malware. It's not a new thing but it just became too easy.

mariopt··on I built a vulnerable app and spent $1,500 seeing if LLMs could hack it
The methodoly used is quite naive.

I've used glm 5.1 on fairly advanced crackme challenges (example: https://crackmes.one/crackme/698f40f1e2ba6023bfacaa82), and to my suprise it was able to patch binaries, doing runtime analysis, bypassing anti debug techniques, etc.

Expecting the model to do everything by itself is unrealistic, I found that working along the modal works really well. I'm not speaking about spoiling the solution, just tell it which direction to explore. Chinese models are much more capable than people give it credit for, but Claude/Codex won the marketing game.

The only usecase of this methodology would be for CI integration, which can be nice but I think security reviews still need human attention and expertise.

mariopt··on Rsync 3.4.3 has hundreds of Claude commits
I suspect that many of the new cute CLI tools that people are vibecoding will turn into malware given some time.

Seeing this happening in trusted CLI tools makes me wonder what will happen to Linux

mariopt··on Is AI causing a repeat of frontend’s lost decade?
I’m using AI to create UIs and I find myself having more time to think about UX rather than CSS. It actually gave me “time” to quickly test design ideas an implement minor details.

I’m actually building better UIs just because it became less time consuming to do so.

There is just a super noisy minority that spams the internet with slop so bad that no one can take their product seriously.

mariopt··on Claude Opus 4.8
I use opencode with all of them except Kimi, I noticed Kimi performs better with kimi-cli and also save a bit of quota.

Z.ai does recommend to use claude cli as a harness for GLM5.1, I still get good results with opencode.

mariopt··on Claude Opus 4.8
I’ve been using Kimi 2.6, GLM 5.1 , Minimax 2.7 and lately deepseek. I only spend 40$ a month and I don’t see the point in paying for Opus/Codex.

Chinese models are really quite good at a lot of stuff.

mariopt··on Xiaomi MiMo-v2.5 price drops 99% – AI pricing war
MiMo-V2.5 Series

Input (Cache Hit) Input (Cache Miss) Output mimo-v2.5-pro $0.0036 $0.435 $0.87

mimo-v2.5 $0.0028 $0.14 $0.28

mariopt··on Ferrari Luce
The car front looks ugly to me but, I do remember getting used to car designs that I previously found ugly.

It looks weird/ugly because electric cars no longer need to be longer and have enough space for massive sport engines. Maybe we'll get used to it over time, still I would prefer the front of a Ferrari 458

The interiors look really nice, I'm a fan of the dashboard elements, blending touch with actual physical buttons.

mariopt··on Bun's unreleased Rust port has 13,365 unsafe blocks
The current level of insanity with AI is off the charts.

Porting to a safe language without the safety features.

mariopt··on Going full AI engineer, not touching code anymore
If you never coded that architecture yourself, you are not able to tell if it fits the problem, pros and cons, if the implementation is in accordance.

Imagine reviewing CQRS without having built one

mariopt··on Going full AI engineer, not touching code anymore
I’m forcing myself to write code.

This idea of reviewing an architecture that you never coded is just a fantasy.

At some point in time, me and a lot of people, thought that using Redux was a great idea until we had to manage verbosity and middlewares. Now we had to deal with the consequences of our decisions and we learned.

I also think this article is just a rage bait

mariopt··on AI is making me dumb
I feel your pain.

Today I'm forcing myself to learn SwiftUI and type each character with my hands, there is a part of me asking "Why are you wasting your time instead of prompting it and getting the UI you want in minutes?". Well, even I use AI I must know the domain I'm operating in to create good products instead of useless slop. Even though I've been coding for 20 years now, I still need to be humble to grown in anything new. I can vibecode full apps but I'm not gonna pretend that my experience isn't playing a massive role in guiding the models.

Don't let AI take away your joy for building stuff, it's totally fine not being "productive" and taking your time. Just force yourself to have, at least, 2 AI days off every week.

mariopt··on The US is winning the AI race where it matters most: commercialization
Guess it really depends on what you use them for. I've been able to built whole apps with them, not slop. Kimi is quite good at design, for 3D, I noticed Gemini 3.1 is excellent for basic to medium use cases.

I've tried both Opus and GPT 5.4, they also hallucinate just like the rest at a much higher cost.

The more you use a model overtime, the better you become with it. It's really hard to measure, my main metric lately has been tokens per second/time to complete task.

At this point I've the feeling frontier models are optimizing for benchmarks and one shot prompts.

mariopt··on The US is winning the AI race where it matters most: commercialization
True, many people don't know GLM 5.1 and Kimi 2.6, really on par with frontier models. There's also Minimax 2.7, DeepSeek 4, Qwen, Xiaomi 2.5 Pro, etc.

China is leading in open source frontier models, so I don't really see how the US wins this one. At some point, companies and people will start running their own models in the cloud and locally, Chinese models will be everywhere.

Page 1 of 7Next →