Hacker News: lmc

New comment by lmc in "Microsoft's open source tools were hacked to steal passwords of AI developers"

lmc — Tue, 09 Jun 2026 17:25:53 +0000

If classic PATs were to blame, doesn't this mean further private repos could be at risk as well? (apart from the GitHub ones the other day).

New comment by lmc in "Zeroserve: A zero-config web server you can script with eBPF"

lmc — Sun, 07 Jun 2026 04:04:05 +0000

True, we use S3 a lot too. But it's interesting to think of alternatives like this project, e.g., for when we don't have the setup for a full on block storage service.

New comment by lmc in "Zeroserve: A zero-config web server you can script with eBPF"

lmc — Sat, 06 Jun 2026 19:03:09 +0000

Depends on the domain. There's a bunch of sciences using large datasets served up efficiently using static file formats, e.g., https://zarr.dev/ and https://parquet.apache.org/

New comment by lmc in "Actually, democracy dies in H.R."

lmc — Tue, 19 May 2026 03:25:32 +0000

Absolutely not. Just to not give in to populist figures that absolutely will not make it better.

New comment by lmc in "Actually, democracy dies in H.R."

lmc — Mon, 18 May 2026 18:07:32 +0000

> Americans don't have to do that when crossing between states either.

That's a bit of an apples to oranges comparison.

> Are you saying that Americans' social media histories aren't considered when they wish to travel to Europe?

Yes.

> Weird example. Stars and Stripes is a government-created periodical that covers the military.

Which typically had editorial independence - exactly the kind of free speech Americans used to be proud of.

New comment by lmc in "Actually, democracy dies in H.R."

lmc — Mon, 18 May 2026 16:46:49 +0000

> I don't see the difference between what's happening in the US and the supposedly good guys that rule me.

Many EU countries' current obsession with E2EE and age verification is fucked, but we are still (thankfully) a way from the state of the States.

- We don't need to submit a history of our social media accounts before crossing a border

- (Most) of our libraries aren't having to make joint statements about free speech (https://www.orbiscascade.org/free-speech-statement/)

- And regarding free press - https://www.wfae.org/2026-01-20/stars-and-stripes-top-editor...

New comment by lmc in "“Too dangerous to release” or just too expensive?"

lmc — Fri, 15 May 2026 20:31:59 +0000

> Don't you want to test mythos against state of the art projects?

Yes, I'm just saying don't make judgements based on this single project alone.

New comment by lmc in "“Too dangerous to release” or just too expensive?"

lmc — Fri, 15 May 2026 16:22:15 +0000

Curl had a prominent bug bounty programme, has 180k lines of prod code, and is mainly a client app/lib. I would look at other projects before making judgements about mythos on this one.

New comment by lmc in "UK Biobank health data keeps ending up on GitHub"

lmc — Fri, 24 Apr 2026 14:49:49 +0000

marimo notebooks give you the best of both worlds (https://marimo.io)

New comment by lmc in "Composition Shouldn't be this Hard"

lmc — Fri, 24 Apr 2026 12:21:47 +0000

Fair point but AWS is also highly extensible, and i'm not sure about Palantir but i guess it must be too to a point? Maybe it's a classic case of good abstractions vs bad ones

New comment by lmc in "Composition shouldn't be this hard"

lmc — Fri, 24 Apr 2026 10:48:55 +0000

I'm not disagreeing but I was reminded of a counterexample: https://www.theregister.com/2026/01/29/birmingham_oracle_lat...

New comment by lmc in "Mercor says it was hit by cyberattack tied to compromise LiteLLM"

lmc — Thu, 02 Apr 2026 08:44:14 +0000

By all means, run your npm in docker, but please stop telling others it's a secure way to do so.

New comment by lmc in "Mercor says it was hit by cyberattack tied to compromise LiteLLM"

lmc — Thu, 02 Apr 2026 08:39:47 +0000

Read this: https://kayssel.substack.com/p/docker-escape-breaking-out-of...

New comment by lmc in "Mercor says it was hit by cyberattack tied to compromise LiteLLM"

lmc — Thu, 02 Apr 2026 07:53:18 +0000

Docker is not a strong security boundary and shouldn't be used to sandbox like this

https://cloud.google.com/blog/products/gcp/exploring-contain...

Nicholas Carlini – Black-hat LLMs – [un]prompted 2026 [video]

lmc — Sat, 28 Mar 2026 09:18:50 +0000

Article URL: https://www.youtube.com/watch?v=1sd26pWhfmg

Comments URL: https://news.ycombinator.com/item?id=47552951

Points: 3

# Comments: 0

New comment by lmc in "CERN to host a new phase of Open Research Europe"

lmc — Fri, 27 Mar 2026 04:50:16 +0000

Aside: I really like the graphic on this and the linked homepage.

As a European working in a university on EU funded projects, I'm not sure how I've not heard of this before :/.

New comment by lmc in "Updates to GitHub Copilot interaction data usage policy"

lmc — Thu, 26 Mar 2026 05:54:07 +0000

Thank you for clarifying this.

New comment by lmc in "Cursor Composer 2 is just Kimi K2.5 with RL"

lmc — Fri, 20 Mar 2026 20:11:06 +0000

That's debateable. How about, e.g, "10. No provision of the license may be predicated on any [...] style of interface."

Anyway, if it was clear cut, it shouldn't be difficult to get it approved.

These kinds of discussions show why it's a pain to use non standard licenses.

New comment by lmc in "Cursor Composer 2 is just Kimi K2.5 with RL"

lmc — Fri, 20 Mar 2026 12:44:42 +0000

This 'Modified MIT' is not a license that has been through the OSI process: https://en.wikipedia.org/wiki/The_Open_Source_Definition#Com...

You can't just add random terms to an existing license and use its name. "Modified MIT: Like MIT but pay us 50 million dollars."

Perhaps CC-BY would've been more appropriate.

New comment by lmc in "Cursor Composer 2 is just Kimi K2.5 with RL"

lmc — Fri, 20 Mar 2026 11:15:07 +0000

Which contradicts what they say on their website.