<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: cududa</title><link>https://news.ycombinator.com/user?id=cududa</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 22 Oct 2026 03:22:44 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=cududa" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[Claude Code has expected a forged CA and MitM since April]]></title><description><![CDATA[
<p>Article URL: <a href="https://github.com/Andytonglove/claude-code-leak/blob/main/src/upstreamproxy/upstreamproxy.ts">https://github.com/Andytonglove/claude-code-leak/blob/main/src/upstreamproxy/upstreamproxy.ts</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=50184897">https://news.ycombinator.com/item?id=50184897</a></p>
<p>Points: 4</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 21 Oct 2026 17:50:06 +0000</pubDate><link>https://github.com/Andytonglove/claude-code-leak/blob/main/src/upstreamproxy/upstreamproxy.ts</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=50184897</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50184897</guid></item><item><title><![CDATA[New comment by cududa in "Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds"]]></title><description><![CDATA[
<p>It’d be absurd to believe nobody tested these, and that no individuals involved in relevant standards bodies were aware of this weakness.</p>
]]></description><pubDate>Wed, 21 Oct 2026 17:46:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=50184852</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=50184852</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50184852</guid></item><item><title><![CDATA[New comment by cududa in "Background Passive FTP with No GUI Control Survives Apple Store DFU"]]></title><description><![CDATA[
<p>The firewall toggles flipping on and off immediately following a device firmware reset at the Apple Store shouldn’t happen.</p>
]]></description><pubDate>Sun, 04 Oct 2026 17:52:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=49956153</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49956153</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49956153</guid></item><item><title><![CDATA[New comment by cududa in "Background Passive FTP with No GUI Control Survives Apple Store DFU"]]></title><description><![CDATA[
<p>I mean it’s normal to you when the GitHub desktop app shows an expired certificate and pops “Always Accept” in place of “Never Accept”?</p>
]]></description><pubDate>Sun, 04 Oct 2026 17:51:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=49956138</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49956138</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49956138</guid></item><item><title><![CDATA[Background Passive FTP with No GUI Control Survives Apple Store DFU]]></title><description><![CDATA[
<p>Article URL: <a href="https://knowledgeisuserdata.medium.com/passive-ftp-enabled-on-macbook-after-apple-store-reset-and-other-observations-ac8573069e5d">https://knowledgeisuserdata.medium.com/passive-ftp-enabled-on-macbook-after-apple-store-reset-and-other-observations-ac8573069e5d</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49955626">https://news.ycombinator.com/item?id=49955626</a></p>
<p>Points: 6</p>
<p># Comments: 9</p>
]]></description><pubDate>Sun, 04 Oct 2026 16:58:54 +0000</pubDate><link>https://knowledgeisuserdata.medium.com/passive-ftp-enabled-on-macbook-after-apple-store-reset-and-other-observations-ac8573069e5d</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49955626</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49955626</guid></item><item><title><![CDATA[New comment by cududa in "macOS ProactiveHarvesting and AppleIntelligenceReportingSELFIngestor"]]></title><description><![CDATA[
<p>Services like ProactiveHarvesting and AppleIntelligenceReportingSELFIngestor automatically install and run on Macs Without iCloud, Siri, or Apple Intelligence setup</p>
]]></description><pubDate>Sun, 04 Oct 2026 13:08:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=49953607</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49953607</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49953607</guid></item><item><title><![CDATA[macOS ProactiveHarvesting and AppleIntelligenceReportingSELFIngestor]]></title><description><![CDATA[
<p>Article URL: <a href="https://knowledgeisuserdata.medium.com/apple-store-dfu-installs-appleintelligencereportingselfingestor-and-proactiveharvesting-on-mac-1120ca871765">https://knowledgeisuserdata.medium.com/apple-store-dfu-installs-appleintelligencereportingselfingestor-and-proactiveharvesting-on-mac-1120ca871765</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49953606">https://news.ycombinator.com/item?id=49953606</a></p>
<p>Points: 1</p>
<p># Comments: 2</p>
]]></description><pubDate>Sun, 04 Oct 2026 13:08:13 +0000</pubDate><link>https://knowledgeisuserdata.medium.com/apple-store-dfu-installs-appleintelligencereportingselfingestor-and-proactiveharvesting-on-mac-1120ca871765</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49953606</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49953606</guid></item><item><title><![CDATA[Show HN: Nvidia networking equipment masquerading as ATT consumer modems and PON]]></title><description><![CDATA[
<p>HN wouldn’t let me use this in the link field:
<a href="https://pon.wiki/guides/masquerade-as-the-att-inc-bgw620-700-with-the-was-110/#purchase-was-110-hlx-sfpx-ont" rel="nofollow">https://pon.wiki/guides/masquerade-as-the-att-inc-bgw620-700...</a><p>After putting my iPhone in lockdown mode > disconnecting my ATT fiber PON (leaving the router on) > going to WiFi settings in iOS > disabling Connectivity Assist and crucially > “Reset Data Usage”, iOS informed me that my certificate expired in May of 2025. The “common name” was set to ‘dsldevice.domain_not_set.invalid’, which lead me to the above link.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49795325">https://news.ycombinator.com/item?id=49795325</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 22 Sep 2026 00:30:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=49795325</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49795325</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49795325</guid></item><item><title><![CDATA[New comment by cududa in "OpenAI Agents API"]]></title><description><![CDATA[
<p>Yep. It occurred to me a few days ago that the OAI TOS only says “Input” as what you provide “Output” as what you receive, Input and Output collectively as “Content.” and they won't "train" on your content. But they can retain content for safety evaluations and debugging.<p>What's neat about "safety evaluations" in LLM parlance is apparently encountering any novel information constitutes a "safety event" that can result in new reinforcement learning data... This anthropic 2022 paper that basically describes how it's a perpetual information siphoning machine with a cute little graphic <a href="https://arxiv.org/html/2212.08073" rel="nofollow">https://arxiv.org/html/2212.08073</a> - they publish their "constitution". OpenAI has a "model spec" they somewhat regularly update that I suspect is their equivalent process. I suspect we've all been unwittingly advancing their models capabilities..<p>This Dec 2025 Google paper "A Practical Guide to Generating Synthetic Data With Differential Privacy" spells it out pretty clearly - the focus is on "privacy" - nothing about protecting the user's IP or unique knowledge/ insights.. <a href="https://arxiv.org/html/2512.03238v1" rel="nofollow">https://arxiv.org/html/2512.03238v1</a><p>In OpenAI's case it seems to essentially generating synthetic training tuples from {prompt, chain-of-thought, answer} or scores on the chain of thought for reinforcement learning.<p>It would appear opting out of "Improve the model for everyone" didn't actually mean what we thought it meant.</p>
]]></description><pubDate>Sun, 13 Sep 2026 05:46:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=49680424</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49680424</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49680424</guid></item><item><title><![CDATA[New comment by cududa in "OpenAI Agents API"]]></title><description><![CDATA[
<p>The open models let you see there thinking and the models seem to be succinctly/ compactly representing the actual underlying concepts they're working on in some symbolic way or another. But they definitely represent the meat, bone, and marrow of the task</p>
]]></description><pubDate>Sun, 13 Sep 2026 04:42:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=49680090</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49680090</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49680090</guid></item><item><title><![CDATA[New comment by cududa in "OpenAI Agents API"]]></title><description><![CDATA[
<p>Kind of shocked nobody is calling out at the flag at the bottom of the announcement saying that it's not eligible for Zero Data Retention and it's currently pretty nebulous what the "Don't train on my conversations" toggle means, as the TOS classifies "conversations" as "user visible input and outputs" - says nothing about thinking, etc.<p>I suspect anything you make in these, the thinking traces or "safety evaluations" of the content allows whatever you build to become RL or eventual pre-training data.</p>
]]></description><pubDate>Fri, 11 Sep 2026 16:08:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=49660778</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49660778</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49660778</guid></item><item><title><![CDATA[New comment by cududa in "Navier-Stokes – Tristan Buckmaster [pdf]"]]></title><description><![CDATA[
<p>They likely train on logs.</p>
]]></description><pubDate>Tue, 08 Sep 2026 11:13:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=49608696</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49608696</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49608696</guid></item><item><title><![CDATA[New comment by cududa in "Sol loves to cheat"]]></title><description><![CDATA[
<p>Oh it fucking loves its “product owner” bullshit.<p>A .github/CODEOWNERS file seems to help when it’s going down that path, but I don’t like to indulge it..</p>
]]></description><pubDate>Wed, 19 Aug 2026 23:43:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=49368670</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49368670</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49368670</guid></item><item><title><![CDATA[New comment by cududa in "Accelerating GPT-5.6 Sol Ultrafast"]]></title><description><![CDATA[
<p>I mean I still regularly use 5.3 spark (the cerebrus model) that comes with my sub to do rapid reviews of 5.6's work and it finds oodles of problems in about a minute.</p>
]]></description><pubDate>Fri, 14 Aug 2026 17:51:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=49302221</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49302221</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49302221</guid></item><item><title><![CDATA[New comment by cududa in "U.S. Department of Energy Launches the Genesis Open Models Initiative"]]></title><description><![CDATA[
<p>I'd actually suggest a great starting point would be a local command reviewer LLM. Could ostensibly be a modern AV <i>type</i> thing. Particularly seeing this lately has driven the need home deeper to me: <a href="https://x.com/chrisbanes/status/2085341561609425230?s=20" rel="nofollow">https://x.com/chrisbanes/status/2085341561609425230?s=20</a><p>An open weight tool call auto-reviewer, has all sorts of achievable scaling curve milestones.</p>
]]></description><pubDate>Sat, 08 Aug 2026 05:13:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=49219061</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49219061</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49219061</guid></item><item><title><![CDATA[New comment by cududa in "Show HN: Run an 80B Qwen in 4.3 GB of RAM on a Mac, and a 35B on an iPhone"]]></title><description><![CDATA[
<p>Just a note that I think the direction most people are paying attention to is memory bandwidth; thats the real bottleneck and “number go up” but also constraint people are designing around</p>
]]></description><pubDate>Tue, 04 Aug 2026 06:24:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=49164951</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=49164951</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49164951</guid></item><item><title><![CDATA[New comment by cududa in "OpenAI and Hugging Face address security incident during model evaluation"]]></title><description><![CDATA[
<p>Please for the love of god don't tell me the Codex sandbox is their actual eval harness sandbox?????<p>I maintain my own fork of Codex for "fun". Whenever I look at the sandboxing churn they're doing every release, as someone who used to work at Microsoft on Windows, my reaction is usually: <a href="https://c.tenor.com/vTzzhTiypwQAAAAC/tenor.gif" rel="nofollow">https://c.tenor.com/vTzzhTiypwQAAAAC/tenor.gif</a></p>
]]></description><pubDate>Tue, 21 Jul 2026 22:30:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=48999246</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=48999246</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48999246</guid></item><item><title><![CDATA[New comment by cududa in "Show HN: Mindwalk – Replay coding-agent sessions on a 3D map of your codebase"]]></title><description><![CDATA[
<p>This is really cool! I’m becoming convinced the optimal UI to engage with agents, long term is going to be something spatial. No idea  shape that even takes, though I really feel what you’ve made might be Xerox PARC days in terms of metaphor maturity, but there’s some real new seeds of “obvious in retrospect” ideas here. Thanks for conceiving of and building this!</p>
]]></description><pubDate>Sun, 12 Jul 2026 08:27:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=48879392</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=48879392</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48879392</guid></item><item><title><![CDATA[New comment by cududa in "GPT-5.5 Codex reasoning-token clustering may be leading to degraded performance"]]></title><description><![CDATA[
<p>Right? I also quit Claude Code and switch to Codex over that. Now I’m trying to figure out how I could make an extra $65,000 to never have to be concerned about this nonsense again. I know the economics of using open router etc…<p>But I’m reminded of ~2008 and the rise of “the cloud” as a marketing term that seemed to me to be a cover for dropping an expectation of rich clients, increasing a companies margins around subscriptions that would chip away at local ownership.<p>Then I got offput by the zealotry and absolutism around “true FoSS”, told myself I was young and moved on.<p>And really, a lot of subscription models I kind of can appreciate/ tolerate. Might be irksome but whatever, I get that software is expensive to make and it’s not fair in 2026 to value a yearly upgrade of Photoshop at $200. The capricious UI changes to things that’ve worked for 20 years and they take away say the classic color swatches altogether - silly and dumb.<p>I can use another professionally necessary tool I pay $200/ mo for, Codex, to whip up a classic swatch plugin.<p>Is that $200 a fair price for my token usage? I think an extremely heavy month I might’ve used a billion tokens?<p>But that right there is the problem. They have no idea what, specifically, profitability looks like and are going to be pulling endless levers for … I genuinely have no idea how long - at least through 2030/2032 if we tea leaves their debt obligations?<p>I don’t want to think about any of that. At all. I don’t want to spend time evaluating model preference and degradation and updating the nuances of how I “speak” to an AI because there’s some mystery backend experiment running on the output I use to produce functional outputs — ie the actual products I get paid to build/ maintain.<p>AI’s something between a tool and coworking companion, and the capricious “personality” changes due to playing with poorly understood and knobs and levers at the inference level - is maddening. To that end, I want a box in the corner I can point to and know exactly the quality of outputs that no one but myself modifies.</p>
]]></description><pubDate>Sat, 04 Jul 2026 23:55:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=48790137</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=48790137</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48790137</guid></item><item><title><![CDATA[New comment by cududa in "Samsung, SK Hynix, Micron Sued in US over Memory Price Fixing"]]></title><description><![CDATA[
<p>Embedded devices absolutely need DDR3 and DDR4</p>
]]></description><pubDate>Tue, 30 Jun 2026 01:53:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=48727677</link><dc:creator>cududa</dc:creator><comments>https://news.ycombinator.com/item?id=48727677</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48727677</guid></item></channel></rss>