Hacker News: 6thbit

New comment by 6thbit in "Binance-hacker-1029 – $5.6B stolen from Binance"

6thbit — Thu, 29 Oct 2026 22:27:14 +0000

implying the keys were the hacker's ?

New comment by 6thbit in "Binance-hacker-1029 – $5.6B stolen from Binance"

6thbit — Thu, 29 Oct 2026 22:26:32 +0000

that one was over (years?) time, wouldn't call that a heist really

New comment by 6thbit in "Binance-hacker-1029 – $5.6B stolen from Binance"

6thbit — Thu, 29 Oct 2026 21:59:18 +0000

If true I think we're looking at the biggest heist in history.

Current largest was ~1B

New comment by 6thbit in "Zero click, silent, remote Android DoS"

6thbit — Thu, 29 Oct 2026 19:31:10 +0000

What confused the people dismissing this all over the comments here? It was clearly a DoS bug.

Perhaps the site's tagline was all they read and admittedly I'd have phrased differently.

  > A single malformed WAP Push SMS crashes com.android.phone on Android, dropping active calls (including emergency calls), with zero interaction from the victim.

An easier way to deliver the point across could be:

  > Anyone can send an specially crafted SMS to repeatedly crash the victim's phone app on Android without user interaction. Google didn't fix it, here's an app you can download to send that SMS and disable anyone's phone remotely.

Just my 2 cents for OP, good job on finding and reporting this and it sounds great that it was actually patched, glad you persisted through the frustration of dealing with google's triaging.

New comment by 6thbit in "For the first time ever, Google Search is less than 50% of Alphabet's revenue"

6thbit — Thu, 29 Oct 2026 17:18:18 +0000

Where is AI in this?

Search was $63.4B "Everything else" was $64.2B, out of which GCP was $30.7B

Is AI on the 33.5B remaining post GCP? or within the 30.7 of GCP?

Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants

6thbit — Thu, 29 Oct 2026 14:19:20 +0000

Article URL: https://blog.cloudflare.com/ddos-threat-report-2026-q3/

Comments URL: https://news.ycombinator.com/item?id=50289526

Points: 1

# Comments: 0

New comment by 6thbit in "Apple's git still trusts the compromised eMudhra certificates"

6thbit — Wed, 28 Oct 2026 20:12:47 +0000

This would've been true a while back prior to major browsers checking for certificate transparency log entries as part of the handshake.

So, I do agree this could be problematic, on specific cases where people not using a major browser were accessing resources some is interested on, on a network they have control of. Makes the surface quite small.

The threat here is more so for 'backend' services than regular browser users.

Legora is building the agentic operating system for legal work

6thbit — Wed, 28 Oct 2026 13:38:47 +0000

Article URL: https://openai.com/index/legora-agentic-operating-system-for-legal-work

Comments URL: https://news.ycombinator.com/item?id=50273353

Points: 1

# Comments: 0

Artificial Analysis v5 and the benchmarker's dilemma

6thbit — Wed, 28 Oct 2026 13:38:04 +0000

Article URL: https://www.interconnects.ai/p/artificial-analysis-v5-and-the-benchmarkers

Comments URL: https://news.ycombinator.com/item?id=50273340

Points: 44

# Comments: 32

New comment by 6thbit in "Apple's git still trusts the compromised eMudhra certificates"

6thbit — Wed, 28 Oct 2026 13:37:28 +0000

It’s interesting they call out as “optional” removing sectigo roots.

If you’re not removing them you better be sure anything that runs on the system has full revocation support including intermediates. Which is.. kind of an impossible thing to assert as true. Which is why most trust stores just removed that as well last week.

New comment by 6thbit in "Apple's git still trusts the compromised eMudhra certificates"

6thbit — Wed, 28 Oct 2026 13:33:33 +0000

Yeah, why may that be hard? That’s the question

I don’t think it’s gross incompetence, since they documented the steps to remove. They may have some unexpected dependency on the file? Looks mysterious from the outside.

New comment by 6thbit in "Apple's git still trusts the compromised eMudhra certificates"

6thbit — Wed, 28 Oct 2026 12:57:32 +0000

There must be a long list of things that aren’t fully patched for this yet, on laptops, on servers. Think of packages that ship their own trust anchors, isn’t there a rust crate that compiles with some root certs embedded?

On one hand there’s unmaintained packages that won’t update dependencies. On the other hand, fixed dependencies did not necessarily backport to all possible versions in the wild, making update as a fix unviable for those.

New comment by 6thbit in "Tailscale SSH: Investigation and remediation update"

6thbit — Tue, 27 Oct 2026 20:19:44 +0000

  > Most of the Tailscale SSH issues we've identified concern privilege escalation. In some circumstances, someone already authorized to connect over Tailscale SSH may be able to perform actions beyond the permissions of their configured local user, including potentially gaining elevated privileges.

"Most"? "In some circumstances"? Makes me think that they could also be investigating a full on unauthorized connection issue, or am I reading too much into it?

Cerebras and Oracle Team Up to Bring Cerebras AI Inference to OCI

6thbit — Tue, 27 Oct 2026 16:24:10 +0000

Article URL: https://www.cerebras.ai/press-release/cerebras-and-oracle-team-up-to-bring-cerebras-ai-inference-to-oracle-cloud-inf-3389429

Comments URL: https://news.ycombinator.com/item?id=50261568

Points: 5

# Comments: 0

Oracle Brings Google TPUs to Oracle Cloud Infrastructure

6thbit — Tue, 27 Oct 2026 16:21:08 +0000

Article URL: https://www.oracle.com/news/announcement/ai-world-oracle-brings-google-tpus-to-oracle-cloud-infrastructure-2026-10-27/

Comments URL: https://news.ycombinator.com/item?id=50261532

Points: 3

# Comments: 0

OpenAI expands partnership with Oracle to bring its apps to ChatGPT

6thbit — Tue, 27 Oct 2026 16:09:32 +0000

Article URL: https://openai.com/index/oracle-apps-in-chatgpt/

Comments URL: https://news.ycombinator.com/item?id=50261365

Points: 1

# Comments: 0

New comment by 6thbit in "Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)"

6thbit — Mon, 26 Oct 2026 23:01:32 +0000

Last year it happened to me more than once that dictating something in chatgpt would become a completely different message after processing, not in a misheard type of way but just a separate conversation more easily explained by the same type of KV cache issue here.

New comment by 6thbit in "GPT-6.1 Terra"

6thbit — Mon, 26 Oct 2026 19:27:41 +0000

Instead of benchkmarks it'd be useful to get a sort of Radar chart across measured capabilities like computer use, communication, coding, etc.

We're probably headed to further specialized agents where a single ordering or even model size won't mean a lot.

New comment by 6thbit in "GPT-6.1 Terra"

6thbit — Mon, 26 Oct 2026 19:23:13 +0000

  GPT-6 Astra
  Input:$10.00 / 1M tokens Cached input:$1.00 / 1M tokens Output:$50.00 / 1M tokens
  
  
  GPT-6.1 Sol
  Input:$2.00 / 1M tokens Cached input:$0.10 / 1M tokens Output:$10.00 / 1M tokens
  
  
  GPT-6.1 Terra
  Input:$1.00 / 1M tokens Cache read:$0.05 / 1M tokens Output:$5.00 / 1M tokens
  
  
  GPT-6 Luna
  Input:$0.10 / 1M tokens Cached input:$0.01 / 1M tokens Output:$0.50 / 1M tokens

That's how their pricing tiers end up now. https://openai.com/business/pricing/#api

(For some reason they say "Cache read" instead of "Cached input" for 6.1 Terra)

6.1 Astra and 6.1 Luna must be coming up soon. Will they reduce their prices further?

New comment by 6thbit in "Microsoft offers mass buyouts for roughly a quarter of its workforce"

6thbit — Mon, 26 Oct 2026 18:59:34 +0000

Is there any word on which divisions/lines of business they are offering for?