Hacker News: 112233

New comment by 112233 in "The Goose Programming Language"

112233 — Sun, 25 Oct 2026 05:41:39 +0000

Does it have (or can it in principle support) "parallel" pools? So that structs can be stored in "columnar" fashion, yet accessed without knowing the particular way they are sliced?

New comment by 112233 in "Five Qwen3.8-27B models match Fable 5 Using GVS5H Harness"

112233 — Sun, 25 Oct 2026 04:44:01 +0000

the qwen flash next result is the actual interesting part. The 27b dense model has more active parameters than, e.g. latest deepseek flash.

New comment by 112233 in "Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'"

112233 — Sat, 24 Oct 2026 19:19:00 +0000

exactly. somehow many people have the idea that C-like imperative code harbours bugs because it cannot be formally reasoned about, and the answer is writing code that can be formally reasoned about.

That the resulting code is many orders of magnitude larger and more complicated than the "informal" original, and often simply cannot exist, and is incomprehensible to most humans if it does, is left as an exercise for the reader.

I mean, formal methods cannot even prove collatz conjecture terminates. Somehow that thing seems to be running some sort of almost turing complete machine in the number encoding. Good luck formalizing existing software!

New comment by 112233 in "Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'"

112233 — Sat, 24 Oct 2026 18:43:08 +0000

(where in the article did you read about OpenAI working with researchers to publish vulnerabilities?)

Yes, exactly, that is my premise (minus the "working with researchers" bit). The current rate of exploitation is direct consequence of actions of Anthropic, OpenAI, Alibaba and whoever else is making these things. How can I know my false premise is true? By looking at the situation just a year ago, that is how!

You are focused on the binary: vulnerability exists or it does not. It can be exploited or it can not.

That is not what is causing the issues!

New comment by 112233 in "Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'"

112233 — Sat, 24 Oct 2026 18:11:55 +0000

The fact that vulnerabilities exist is not being disputed, and is not causing any controversy. The fact that vulnerabilities are getting exploited does. Even having AI that would simply find all existing vulnerabilities and list them would not be as destructive as current situation. The same AI that finds the previously unknown vulnerability also finds the way to exploit it (NOT THE SAME THING), writes actually usable exploit (also not the same thing), then orchestrates and oversees the mass campaign. THAT is what makes current situation unsustainable.

Let's all recall old times when vulnerabilities of this magnitude were discovered - windows defender had some nice ones, linux kernel did, a lot of software did. They got discovered, communicated to vendor, patches were made, people updated.

Now? You have HOURS from discovery to full-out campaign. You published a patch? HOURS before it is disassembled, all fixed bugs PoC-ed and full out campaign started. You cannot update anything meaningfully in that window of time.

New comment by 112233 in "Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'"

112233 — Sat, 24 Oct 2026 17:53:47 +0000

Both my analogies use hyperbola to comically exaggerate the claimed lack of any difference. just as claiming that advancing a demise of a human makes no difference because it will eventually happen, or claiming that breaching a bank in practice is not a big deal because it was possible in theory, so also claiming that theoretic possibility of a vulnerability being exploited is more or less the same as many of them being exploited at the same time.

The covid was not a lot deadlier and not a lot more contagious than normal seasonal flu. That "not a lot" overloaded hospitals and caused global shutdown.

The increase in rate at which software is being breached right now in in no way "not a lot". Devs were overloaded even without this deluge. We can tank one such php exploit. Then another one. But for how long? If all your smartcards, secure elements, cloud providers, wireless protocols, drivers, government registries etc etc will be having weekly breaches of this magnitude, won't the effect be systemic?

New comment by 112233 in "Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'"

112233 — Sat, 24 Oct 2026 17:31:35 +0000

Ah yes. Everyone eventually dies, we just shorthen the wait.

This is like telling that bank vaults always were breachable, and giving out explosives to everyone just made them get breached sooner.

(edit: fact of existance of a vulnerability is not a binary yes/no. the amount of effort needed to exploit even known vulnerabilities is usually staggering, requiring months from very capable individuals with very specific skillset.)

New comment by 112233 in "Kimi K3.1 Pro and K3.1 Pro Highspeed"

112233 — Sat, 24 Oct 2026 14:38:49 +0000

Are you sure providers allow you to submit modified assistant turns? Because, if they do, great! Last I heard most of that was neutered, with some providers (ahem anthropic) even signing everything and encrypting the "precious" thinking turns

New comment by 112233 in "How big is a Git commit?"

112233 — Sun, 11 Oct 2026 19:46:15 +0000

my local experiments showed any tricky scheme I could come up beaten by plain large window zstd. both on speed and resulting size (memory needed for the window is another matter completely). zstd also was beating the git xdelta+deflate.

The most "free lunch" actually is compressing fast export (or similar format) — if the goal is packing repo as small as possible, then all the SHA in commits and tree objects are derivative incompressible data, and plain references like in fast export can even halve archive size

New comment by 112233 in "Anthropic asks users to stop being mean to Claude"

112233 — Sun, 11 Oct 2026 07:18:22 +0000

Same. After this, it becomes "abuse department" skit from monty python. The model constantly generates strongly abusive language (weaponized incompetence after user detects that model was lying and fabricating success reports, and had made fake work; blaming user; mansplaining its own hallucinations -- all the while user is forced to consume that because the important information is not located at predictable position in output text), but usually it was possible to temper the model behaviour by calling out such behaviour out in very strong terms. If now that is being disabled, then using Anthropic models becomes such high mental hazard, it simply is not worth any percieved benefit.

New comment by 112233 in "Show HN: Free open source Adobe Lightroom alternative, completely local with AI"

112233 — Sat, 10 Oct 2026 03:48:40 +0000

I made my own with AI! It does the thing I need that no existing software does!

I do not however feel urge to upload it an ask strangers to look at what code tool assembled from bits and pieces of existing software by hallucinating into compiler.

It is objectively bad. Also very fun. Even useful. I do not understand the bit about publishing though.

New comment by 112233 in "Git 3.0's upcoming SHA-256 default will be a costly mistake"

112233 — Thu, 01 Oct 2026 18:11:49 +0000

Once this starts being actual pain, we will each vibe the replacement index creator (git already supports replacement objects), for back-forth conversion, populated on pack and object indexing.

For massive perf and mem use damage. But oh well. And then we will wait for official version

New comment by 112233 in "Writing Efficient C++ Code (2013)"

112233 — Thu, 01 Oct 2026 14:48:39 +0000

In my domain, code size is critical, so we use -fno-exceptions and -fno-rtti from necessity, for a good reason. Which means our code is non-conformant C++. Committee forces everyone to have exceptions and rtti always.

New comment by 112233 in "Show HN: I created a BGP-based blackhole system that you can set up in minutes"

112233 — Thu, 01 Oct 2026 14:45:33 +0000

It will, however, stop projects like these from blacholing IP ranges belonging to others

New comment by 112233 in "Show HN: I created a BGP-based blackhole system that you can set up in minutes"

112233 — Wed, 30 Sep 2026 19:14:02 +0000

Hopefully upstream peers will use RPKI properly. It would be sad if this actually worked.

Machine will eventually solve face powder, in theory.. (2021)

112233 — Tue, 29 Sep 2026 04:49:11 +0000

Article URL: https://www.reddit.com/r/opus_magnum/s/vNe9IWl3pq

Comments URL: https://news.ycombinator.com/item?id=49888382

Points: 2

# Comments: 0

New comment by 112233 in "Who should be held accountable when an AI Agent (accidentally) acts maliciously?"

112233 — Tue, 29 Sep 2026 03:37:04 +0000

Was not groundwork laid when people were talking for decades about legal entities using such language? Look at the posts here. Microsoft always acts like that, Meta like this, Apple did that, Nvidia never does this. In a tone that ascribes agency and accountability to a company name. Even though it is always individuals that are responsible, not "company".

Well, here we are.

New comment by 112233 in "Writing Efficient C++ Code (2013)"

112233 — Mon, 28 Sep 2026 12:33:43 +0000

Yes? Instead, we have committee declaring large bodies of existing code invalid and non-conformant, because it does not fit their spherical cow C++. You would think, with amount of no-exceptions and no-rtti code out there, and feature being present in most compilers for decades, they would take a hint and reflect actual usage in their standard? No, why would they. Any C++ that has no exceptions, rtti or std:: namespace is invalid. Not even against guidelines.

New comment by 112233 in "Writing Efficient C++ Code (2013)"

112233 — Sun, 27 Sep 2026 19:11:16 +0000

How do you process read-only mmaped data in C++, in accordance with the language rules? As an example.

New comment by 112233 in "Writing Efficient C++ Code (2013)"

112233 — Sun, 27 Sep 2026 19:08:46 +0000

eh, yes-ish, but only thanks to compiler writers. at one point committee went all-out enforcing their lifetime model, making bit_cast not an option. If your code accesses same data using different types, you are spelunking ruins with snake pits and lava. more and more stuff needs magic support code in std::, making no-lib code less and less possible (it used to be that with no-rtti and no-exceptions, you could use all c++ features and only needed cxa_at_exit, operator delete, and few other little things. NOT ANY MORE).

On one hand, you have consteval and stuff, letting you FINALLY initialize data at compile time (hey, 20 years late but still!)

on other hand, it is done in most non-debuggable way possible. try setting breakpoint or adding print to constexpr function that causes your requires clause to fail...

so no, newer C++ the language is not possible to use for low level work. The dialects that compiler makers support are. We will see for how long