Hacker News: JaRail

New comment by JaRail in "Ray tracing massive amounts of animated geometry using tetrahedral cages"

JaRail — Mon, 27 Jul 2026 21:54:14 +0000

Cool technique!

New comment by JaRail in "OpenAI and Hugging Face address security incident during model evaluation"

JaRail — Wed, 22 Jul 2026 13:50:33 +0000

I just want to point out that something being science fiction does not mean it's impossible.

New comment by JaRail in "Kimi K3 Is Competitive with Fable; Kimi K3 and Fable Is SoTA"

JaRail — Wed, 22 Jul 2026 12:36:56 +0000

(March 2024) Antropic claimed Claude 3 Opus had "graduate-level expert reasoning" with GPQA results of around 60% showing a roughly phd level performance.

(Sept 2024) OpenAI claimed o1 was phd-level in their launch post.

You're kinda both wrong. :)

New comment by JaRail in "Kimi K3 Is Competitive with Fable; Kimi K3 and Fable Is SoTA"

JaRail — Wed, 22 Jul 2026 12:25:58 +0000

Yes and no. It would make the test fair but it would also mean losing any optimizations the vendors have made specifically for their model. They're all trained differently so they should be used differently to get maximum benefit. It makes sense to use each vendor's harness to get the most of their models, and compare the results that way. Additionally, it's not easy to use all the models in all the harnesses. Anthropic's subscription only covers claude code for example.

New comment by JaRail in "OpenAI and Hugging Face address security incident during model evaluation"

JaRail — Wed, 22 Jul 2026 00:04:15 +0000

If it was just one test, sure. But if they're spinning these up continuously with new models on tens of thousands of GPUs, air gapping becomes impractical. I would mostly fault them on having no guardrails at all. They should have a monitor/external harness that looks for successful access to external networks then stop it there. They may as well let the models test their own networks for vulnerabilities. That's going to be really important to have going forward.

New comment by JaRail in "OpenAI and Hugging Face address security incident during model evaluation"

JaRail — Tue, 21 Jul 2026 23:54:11 +0000

Has to be mixed. The model accomplished something truly impressive. We'll see how impressive when the zero-days are available look at. But OpenAI as an engineering company screwed up. The impressive part is mostly locked away from public access so I don't see a huge PR upside. The ugly part could bite them and the entire AI industry hard in terms of regulations. People will be citing this for years.

New comment by JaRail in "You can bypass YouTube ads by adding a dot after the domain"

JaRail — Wed, 10 Jun 2020 19:46:12 +0000

When that happens, I usually just do a manual update on my filters. More often than not, someone has already updated it.

New comment by JaRail in "Wikipedia Lost 3B Organic Search Visits to Google in 2019"

JaRail — Wed, 10 Jun 2020 19:41:03 +0000

Worth pointing out then that DDG has a number of shortcuts built-in. If you don't care about passing a query through them, it already works.

https://duckduckgo.com/bang

The most-used is probably !g, which sends your query to google. For wikipedia, it's !w.

New comment by JaRail in "Wikipedia Lost 3B Organic Search Visits to Google in 2019"

JaRail — Wed, 10 Jun 2020 19:35:59 +0000

Even programming questions. If it's something considered popular, you get awful results. Take javascript, I always append "mdn" when I'm trying to look up a language/api detail. Otherwise I'd be sifting through the top ten garbage Q&A or tutorial sites. In the glory days, Page Rank would return reference material first since it was so heavily referenced. But clearly that no longer works in the real world of SEO optimization.

New comment by JaRail in "German city wants to ditch Microsoft for Linux"

JaRail — Wed, 03 Jun 2020 18:51:03 +0000

Large governments have access to Windows source code.

https://www.microsoft.com/en-us/securityengineering/gsp

It's more about long-term strategy. China wants full control over their OS. They want features Microsoft would never add. They want support for their own hardware, etc.

New comment by JaRail in "FCC forced by court to ask the public again for feedback on net neutrality"

JaRail — Sat, 22 Feb 2020 00:58:35 +0000

Correct. The US only had net neutrality on the books for traditional ISPs. However, they were playing relatively nicely to avoid such regulation happening. The mobile arena was fought over data caps and exemptions rather than throttling.

New comment by JaRail in "FCC forced by court to ask the public again for feedback on net neutrality"

JaRail — Sat, 22 Feb 2020 00:53:04 +0000

Data exemptions are absolutely an example of a net neutrality violation. Similar things, like exempting partnered streaming music services from mobile data plans, have been shot down in Canada.

New comment by JaRail in "Twitter says an attacker used its API to match usernames to phone numbers"

JaRail — Thu, 06 Feb 2020 06:17:27 +0000

The fix was to block the botnets that were scanning millions of numbers and ban the associated accounts. Likely that includes some ongoing threat detection as well. That'll at least prevent scammers from collecting one more account name/number to attempt exploiting.

It doesn't do anything against a targeted attack against someone who has chosen to be discoverable. That's just how search/discovery is intended to work.

New comment by JaRail in "Twitter says an attacker used its API to match usernames to phone numbers"

JaRail — Thu, 06 Feb 2020 06:05:23 +0000

Hiding counts makes it hard to identify imposter accounts and bots. Users need to be able to see account age and counts at a minimum.

New comment by JaRail in "Twitter says an attacker used its API to match usernames to phone numbers"

JaRail — Thu, 06 Feb 2020 05:59:49 +0000

No, it wouldn't work. It only works if people can discover you with the "find people you know from your address book" feature. A deleted number won't match. Or you can just turn it off in your discoverability settings.

New comment by JaRail in "Twitter says an attacker used its API to match usernames to phone numbers"

JaRail — Thu, 06 Feb 2020 05:57:52 +0000

So people don't generate thousands of accounts then sit on them until they want to spam with legit-looking seven year old accounts.

New comment by JaRail in "Twitter says an attacker used its API to match usernames to phone numbers"

JaRail — Thu, 06 Feb 2020 05:55:33 +0000

It's for anti-spam. Preventing people from generating millions of free accounts is valuable.

New comment by JaRail in "Boeing has temporarily stopped making 737 Max airplanes"

JaRail — Tue, 21 Jan 2020 21:12:25 +0000

You can check it all you want. That won't change the physics of its dynamically unstable design.

New comment by JaRail in "Volkswagen exec admits full self-driving cars 'may never happen'"

JaRail — Sat, 18 Jan 2020 20:59:36 +0000

Exactly. Using Mars as a second example is basically just doubling down on the "Elon isn't trustworthy" argument. That should be a giant red flag to readers.

New comment by JaRail in "Firefox Multi-Account Containers"

JaRail — Tue, 14 Jan 2020 21:12:13 +0000

Have you considered just creating multiple windows/mac accounts? Since you can switch without having to log off, it's really convenient. I understand partners sharing accounts and such but it's really just a better workflow/experience IMHO.