<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: joshka</title><link>https://news.ycombinator.com/user?id=joshka</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 01 Aug 2026 01:30:23 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=joshka" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by joshka in "13 Models and 4 Agents on SWE Tasks: Go, Java, Python, Rust, TS"]]></title><description><![CDATA[
<p>Some agents have specific tools that the models have been trained to use. E.g. diff formats for editing that aren't the same as the standard unified diff format. Access to specific thread / subagent / etc. tooling or the base prompt can perhaps also impact how the tasks are completed.</p>
]]></description><pubDate>Fri, 31 Jul 2026 21:04:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=49128497</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49128497</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49128497</guid></item><item><title><![CDATA[New comment by joshka in "Anatomy of a Frontier Lab Agent Intrusion: A Timeline of the July 2026 Incident"]]></title><description><![CDATA[
<p>Yeah, what bothers me is that the prompt already said using a different vulnerability didn’t count, and the model did it anyway. We’re starting to assume clear instructions act as real constraints, but here the measurable goal seems to have won out and the rest became flexible. That gets pretty worrying once the agent has enough capability and access to find its own shortcuts.</p>
]]></description><pubDate>Wed, 29 Jul 2026 08:10:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=49094677</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49094677</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49094677</guid></item><item><title><![CDATA[New comment by joshka in "Anatomy of a Frontier Lab Agent Intrusion: A Timeline of the July 2026 Incident"]]></title><description><![CDATA[
<p>The exploit gym setup explicitly allowed access to package registries and v8 sources. Putting a cache on that doesn't seem like a bad idea generally, except when there's a 0-day in the cache :D But yeah, for this sort of thing I'd be locking down very specific egress things and putting alerts on it that are entirely outside of the red network.<p>> I would argue that it's negligence and that's aside from the fact that if a human did this there would actually be repercussions.<p>I’m not sure “negligence” follows just from the controls turning out to be insufficient. Research involves mistakes, especially around novel failure modes. The question is whether the precautions were unreasonable given what they knew at the time, rather than whether hindsight suggests stronger controls would have helped. Doing it twice though would be negligent.<p>Caveat: I’ve worked with some of the people involved, so I’m probably biased toward a charitable reading.</p>
]]></description><pubDate>Wed, 29 Jul 2026 07:43:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=49094507</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49094507</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49094507</guid></item><item><title><![CDATA[ExploitGym AI benchmark source code]]></title><description><![CDATA[
<p>Article URL: <a href="https://github.com/sunblaze-ucb/exploitgym/">https://github.com/sunblaze-ucb/exploitgym/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49094493">https://news.ycombinator.com/item?id=49094493</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 29 Jul 2026 07:40:13 +0000</pubDate><link>https://github.com/sunblaze-ucb/exploitgym/</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49094493</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49094493</guid></item><item><title><![CDATA[New comment by joshka in "Now is the time to give LLMs access to the ACM digital library"]]></title><description><![CDATA[
<p>Thanks for the reply here.<p>I guess I have some perspectives on a bunch of this. I'm for open sharing of academic work for all (but I'm not an academic, so my perspective is a consumer), so inferring your perspective here I think we agree on that. I maintain many open source (MIT/Apache2 licensed) libraries, and I've also worked in big tech (Amazon, OpenAI). I believe both in the idea of collective commons but also in the ideas that there should be the ability of people to sell software. There's tension in that social contract similarly, and it gets more complex when you look at copyleft.<p>I guess I'd be disappointed if this was just allowing big labs access and not more broadly allowing access to the ACM library for smaller open source models. Very much in agreement with your last points there.</p>
]]></description><pubDate>Tue, 28 Jul 2026 23:51:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49091576</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49091576</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49091576</guid></item><item><title><![CDATA[New comment by joshka in "Toolcraft"]]></title><description><![CDATA[
<p>This is freaking good.</p>
]]></description><pubDate>Tue, 28 Jul 2026 22:37:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=49090926</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49090926</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49090926</guid></item><item><title><![CDATA[New comment by joshka in "Now is the time to give LLMs access to the ACM digital library"]]></title><description><![CDATA[
<p>How do you square away the idea that you do science for the increase in knowledge of human kind, but then say that a particular use of that knowledge is verboten?<p>I get the copyright aspect of this and I'm not arguing that here. I'm more asking about the moral / ethical idea of choosing who can benefit from your science.<p>Obviously there are the moral / ethical arguments about AI in general here to weigh against - those have been hashed out significantly elsewhere, and I'm not interested in debating them. What I'm asking about here is the impact on science by sharing it with tooling that distributes it in ways not generally considered when originally written.<p>A quick check of your post history suggests the frame that you work in strongly is privacy related research (observation - may be wrong). I'm curious how that impacts what you wrote here generally.<p>(Just to be perfectly clear, I'm not arguing your points here, trying to understand them better)</p>
]]></description><pubDate>Tue, 28 Jul 2026 22:25:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=49090806</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49090806</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49090806</guid></item><item><title><![CDATA[New comment by joshka in "Show HN: I left VSCode to build an IDE to handle many projects/agents workflow"]]></title><description><![CDATA[
<p>Consider optimizing your demo for laptop user screen sizes and checking contrast of all elements. A lot of things on the demo are difficult to read fast due to low contrast, which makes animations using them less useful to show off what is actually happening.</p>
]]></description><pubDate>Tue, 28 Jul 2026 22:11:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=49090637</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49090637</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49090637</guid></item><item><title><![CDATA[New comment by joshka in "Anthropic publishes a practical key-recovery attack on HAWK-256"]]></title><description><![CDATA[
<p>discussion / article: <a href="https://news.ycombinator.com/item?id=49087091">https://news.ycombinator.com/item?id=49087091</a></p>
]]></description><pubDate>Tue, 28 Jul 2026 21:57:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=49090461</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49090461</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49090461</guid></item><item><title><![CDATA[New comment by joshka in "Fast Remediation Is the New Trust Model (JFrog and OpenAI Zero-Day Findings)"]]></title><description><![CDATA[
<p><a href="https://huggingface.co/blog/agent-intrusion-technical-timeline" rel="nofollow">https://huggingface.co/blog/agent-intrusion-technical-timeli...</a> has that side of the write up a bit more<p>discussion: <a href="https://news.ycombinator.com/item?id=49089500">https://news.ycombinator.com/item?id=49089500</a></p>
]]></description><pubDate>Tue, 28 Jul 2026 21:54:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=49090426</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49090426</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49090426</guid></item><item><title><![CDATA[New comment by joshka in "All major LLMs are lib-left. Even Grok, half the time"]]></title><description><![CDATA[
<p>Makes you wonder whether that reality has a left wing bias quote might have some legs after all (though it's probable more likely selection bias for the corpora)</p>
]]></description><pubDate>Mon, 27 Jul 2026 16:18:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=49071782</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49071782</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49071782</guid></item><item><title><![CDATA[A [rust] panic hook that asks ChatGPT what went wrong]]></title><description><![CDATA[
<p>Article URL: <a href="https://crates.io/crates/chatgpt-panic-hook">https://crates.io/crates/chatgpt-panic-hook</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49056821">https://news.ycombinator.com/item?id=49056821</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Sun, 26 Jul 2026 11:02:18 +0000</pubDate><link>https://crates.io/crates/chatgpt-panic-hook</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49056821</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49056821</guid></item><item><title><![CDATA[New comment by joshka in "OpenAI’s accidental attack against Hugging Face is science fiction that happened"]]></title><description><![CDATA[
<p>The other suspicion I had was jfrog artifactory (you mentioned OpenAI use it in a blog post in Jan). I accidentally conflated that with Nexus 14 july CVE. I think that's probably more likely.<p>I suspect it may be possible to throw a local model (same as hf did :D) at jfrog and find the exact mechanism in a small amount of hours.</p>
]]></description><pubDate>Thu, 23 Jul 2026 09:56:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49019143</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49019143</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49019143</guid></item><item><title><![CDATA[New comment by joshka in "OpenAI’s accidental attack against Hugging Face is science fiction that happened"]]></title><description><![CDATA[
<p>I wonder if it was this bug fixed july 14 in sonatype:<p><a href="https://support.sonatype.com/hc/en-us/articles/53165019641363-CVE-2026-14646-Nexus-Repository-3-SSRF-via-HTTP-Redirect-2026-07-14" rel="nofollow">https://support.sonatype.com/hc/en-us/articles/5316501964136...</a><p>pure speculation here - no non public info</p>
]]></description><pubDate>Thu, 23 Jul 2026 08:59:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=49018696</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49018696</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49018696</guid></item><item><title><![CDATA[New comment by joshka in "OpenAI’s accidental attack against Hugging Face is science fiction that happened"]]></title><description><![CDATA[
<p>There's no reason to think that a tool that can find an 0-day in a repo cache can't work out how to make that host send a post request rather than a get request once it has its keys and is able to get it to make arbitrary web calls.</p>
]]></description><pubDate>Thu, 23 Jul 2026 08:54:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=49018666</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49018666</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49018666</guid></item><item><title><![CDATA[New comment by joshka in "Codeberg: ToU extension to prohibit LLM-extrusions"]]></title><description><![CDATA[
<p><a href="https://news.ycombinator.com/item?id=49003386">https://news.ycombinator.com/item?id=49003386</a></p>
]]></description><pubDate>Wed, 22 Jul 2026 09:57:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=49004235</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49004235</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49004235</guid></item><item><title><![CDATA[New comment by joshka in "Late.sh – a command-line Clubhouse for computer people"]]></title><description><![CDATA[
<p>yes, and... ?</p>
]]></description><pubDate>Wed, 22 Jul 2026 05:40:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49002281</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=49002281</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49002281</guid></item><item><title><![CDATA[New comment by joshka in "Show HN: Leaves – A text-UI disk usage treemap visualizer"]]></title><description><![CDATA[
<p>Ratatui maintainer here. Looks great!<p>I've had on my someday bucket list doing up a web based version of daisy disk as a docker image I can slap on my various servers, but this is probably just as good an approach. I like it.</p>
]]></description><pubDate>Fri, 17 Jul 2026 03:31:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=48943074</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=48943074</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48943074</guid></item><item><title><![CDATA[New comment by joshka in "Fixed three bugs that made Qwen3.5-122B a daily driver on Mac Studio"]]></title><description><![CDATA[
<p>I caught the title "The real work..." labelizing things in a sort of weird phrasing like this is the one I've seen a lot.</p>
]]></description><pubDate>Sun, 12 Jul 2026 06:24:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=48878831</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=48878831</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48878831</guid></item><item><title><![CDATA[New comment by joshka in "AI Can't Recreate the Thrust Game (But It Can Help You Understand It)"]]></title><description><![CDATA[
<p>This is often people invoking chesterton's fence, where the quickest way to have something corrected on the internet is just to say something wrong.</p>
]]></description><pubDate>Sun, 12 Jul 2026 05:17:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=48878481</link><dc:creator>joshka</dc:creator><comments>https://news.ycombinator.com/item?id=48878481</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48878481</guid></item></channel></rss>