<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: nikcub</title><link>https://news.ycombinator.com/user?id=nikcub</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 18 Jul 2026 02:05:03 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=nikcub" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[Two critical SQLi vulnerabilities in WordPress]]></title><description><![CDATA[
<p>Article URL: <a href="https://wordpress.org/news/2026/07/wordpress-7-0-2-release/">https://wordpress.org/news/2026/07/wordpress-7-0-2-release/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48952646">https://news.ycombinator.com/item?id=48952646</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Fri, 17 Jul 2026 21:53:49 +0000</pubDate><link>https://wordpress.org/news/2026/07/wordpress-7-0-2-release/</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48952646</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48952646</guid></item><item><title><![CDATA[New comment by nikcub in "Kimi K3: Open Frontier Intelligence"]]></title><description><![CDATA[
<p>Those thin capitalized eyebrows are becoming like the emdashes of visual design</p>
]]></description><pubDate>Thu, 16 Jul 2026 20:40:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=48939922</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48939922</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48939922</guid></item><item><title><![CDATA[New comment by nikcub in "Kimi K3: Open Frontier Intelligence"]]></title><description><![CDATA[
<p>> I pretty sure OpenAI and Anthropic are doing the same or worse.<p>No they're not. It would end both companies if they were ever found to be doing that.<p>Their terms are clear - if you use the coding plans they can[0] train in return. Enterprise and API, absolutely not.<p>The argument here is that with the Chinese labs you have zero legal recourse.<p>[0] opt-in, thanks</p>
]]></description><pubDate>Thu, 16 Jul 2026 20:28:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=48939799</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48939799</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48939799</guid></item><item><title><![CDATA[New comment by nikcub in "Inkling: Our Open-Weights Model"]]></title><description><![CDATA[
<p>Real test here would be using tinker to fine tune a tinker model to generate pelicans</p>
]]></description><pubDate>Thu, 16 Jul 2026 04:18:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=48930287</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48930287</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48930287</guid></item><item><title><![CDATA[New comment by nikcub in "Inkling: Our Open-Weights Model"]]></title><description><![CDATA[
<p>This is a winner IMO. Lots of cost pressure on token spend atm within enterprises and tasks that don't require Opus / Codex class models.<p>These companies have hopefully captured all of their traces and now have enough to fine-tune an open model and host themselves.<p>Inkling feels like the right base - not obsessed with benchmaxxing on coding but rather being adaptable to the task required<p>For tasks like GTM, support, content writing etc. seeing 80%+ savings</p>
]]></description><pubDate>Thu, 16 Jul 2026 04:15:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48930261</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48930261</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48930261</guid></item><item><title><![CDATA[New comment by nikcub in "Australian energy retailers must provide three hours of free daytime electricity"]]></title><description><![CDATA[
<p>It kinda is since wholesale energy prices are often negative in these markets during the day</p>
]]></description><pubDate>Tue, 14 Jul 2026 12:07:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48905503</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48905503</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48905503</guid></item><item><title><![CDATA[New comment by nikcub in "Australian energy retailers must offer three hours of free daytime electricity"]]></title><description><![CDATA[
<p>> WA could be part of the NEM with some HVDC across the Nullabor, not sure if it would be economically worthwhile though.<p>Part of the motive of moving the WEM to 5 minute intervals was to eventually leave this option open.<p>The largest renewable project in the world is being planned in this area[0] so it's feasible that it all may be connected one day<p>[0] <a href="https://wgeh.com.au/overview/" rel="nofollow">https://wgeh.com.au/overview/</a></p>
]]></description><pubDate>Tue, 14 Jul 2026 12:06:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48905478</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48905478</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48905478</guid></item><item><title><![CDATA[New comment by nikcub in "Australian energy retailers must provide three hours of free daytime electricity"]]></title><description><![CDATA[
<p>> The embedded networks collude with the builders and offer them the installation<p>I got into a dispute with my embedded provider because of a bad meter and came to discover through friends and family in the construction industry as well as speaking to a former sales person in the industry that there is <i>a lot</i> of additional corruption in the process with straight up payments being made to win installs with developers.<p>When it came time to switch providers in our building, strata was promised electric vehicle chargers as part of signing a new deal with a new provider. They never delivered because they found an escape clause because of fire safety approval.<p>We're now locked in for years (again) and they've already increased rates once in the first year.<p>Nobody in the entire chain works in the interests of residents or owners. It's a completely broken system and a thorn in the side of otherwise advanced and progressive Australian energy policy. It needs to be abolished ASAP.<p>I still pay more for my single apartment living alone in electricity than what family and friends do in full large homes with air conditioning, 4-6 residents, heated pools, etc. It's astonishing.</p>
]]></description><pubDate>Tue, 14 Jul 2026 11:55:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=48905344</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48905344</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48905344</guid></item><item><title><![CDATA[New comment by nikcub in "Show HN: Smart model routing directly in Claude, Codex and Cursor"]]></title><description><![CDATA[
<p>I'm glad there are more attempts at solving model routing, as costs (at API rates) has really become an issue. Some feedback:<p>1. Reiterate the cache issue from other comments already here. there is a lot of optimisation in harnesses around caching and a proxy model blows that up<p>2. Coding agents are model aware - they already route code discovery to mini / flash models, planning to heavy models, workflow design to ultra, implementation to mid / high etc. They know when they're exploring, planning, implementing, reviewing etc. and which model class to select and when it fails.<p>With a proxy you're breaking this control loop and feedback. It doesn't know, for ex. that it just attempted with deepseek v4 and it failed, lets try Opus?<p>3. How are you going to RL improvements and prevent the router becoming stale? You only have access to your own internal prompts and ~thousands of samples.<p>This is RL'd on one orgs codebase. There are going to be a lot of prompts you haven't seen before and have no insight to on how to route correctly, and you have no insight into users HF to improve your own model. Orgs aren't going to share their traces with you, so you need other sources to train on and improve<p>There are also new model releases every week that you need to keep up with - whats the story going to be here<p>4. Publish evals by running terminalbench / deepswe bench. Show us the performance / cost / time chart vs the other agent and model sets. If you can show gains there, you have a very simple value prop to sell where you can charge for a % of the saved costs</p>
]]></description><pubDate>Fri, 26 Jun 2026 19:40:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48691040</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48691040</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48691040</guid></item><item><title><![CDATA[New comment by nikcub in "Om Malik has died"]]></title><description><![CDATA[
<p>This is devastating. Om was the godfather of early tech blogging and lifted up so many people around him. He was kind, caring and compassionate.<p>When I first started blogging around 25 years ago, he would have been amongst the first 10 readers. He linked to me, emailed me privately with feedback, praised posts and would call bullshit when he saw it.<p>He was never competitive with other blogs or bloggers and was never tied up in drama. He was very often a mediator in behind the scenes conflicts and was obsessed with truth over getting the scoop.<p>He loved tech and startups and most of all loved seeing other succeed and didn't have a gram of resentment within himself.<p>Everybody from that post-dotcom crash era of tech owes Om a large debt of gratitude. He will be missed. RIP Om.</p>
]]></description><pubDate>Thu, 25 Jun 2026 23:41:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48680635</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48680635</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48680635</guid></item><item><title><![CDATA[New comment by nikcub in "Apple reveals new AI architecture built around Google Gemini models"]]></title><description><![CDATA[
<p>Google are the only one of the big three who can tick the boxes on being multimodal, price / performance and having Apple-level of compute available</p>
]]></description><pubDate>Mon, 08 Jun 2026 22:38:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48453349</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48453349</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48453349</guid></item><item><title><![CDATA[New comment by nikcub in "Do agents.md files help coding agents?"]]></title><description><![CDATA[
<p>> "a well written agents.md is very good for the agent"<p>while even a mildly bad agents.md can be _very_ bad for the agent. they rot very quickly which is why human curation is essential.<p>same with memory - a lot of the self-learning tools that are becoming popular now degrade agents over time - which is why you end up being able to run an eval with no context and it performs better<p>> but that's why agentic coding can still be considered a "skill".<p>yes - far too many cases of throwing a kitchen sink of prompts, skills, tools etc. thinking the llm will sort it out. you need to constantly prune, eval, tweak, observe, update etc. in a loop</p>
]]></description><pubDate>Mon, 08 Jun 2026 10:29:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=48443538</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48443538</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48443538</guid></item><item><title><![CDATA[New comment by nikcub in "The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy"]]></title><description><![CDATA[
<p>Bright Data is available as a product on AWS Marketplace<p><a href="https://aws.amazon.com/marketplace/seller-profile?id=bf9b4324-6ee3-4eb3-9ca4-083e558d04c4" rel="nofollow">https://aws.amazon.com/marketplace/seller-profile?id=bf9b432...</a></p>
]]></description><pubDate>Sun, 07 Jun 2026 01:26:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=48430876</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48430876</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48430876</guid></item><item><title><![CDATA[New comment by nikcub in "The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy"]]></title><description><![CDATA[
<p>Same - have accounts with 3 different services and have never been KYC'd even with heavy usage.</p>
]]></description><pubDate>Sun, 07 Jun 2026 01:24:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=48430858</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48430858</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48430858</guid></item><item><title><![CDATA[The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/">https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48422993">https://news.ycombinator.com/item?id=48422993</a></p>
<p>Points: 235</p>
<p># Comments: 105</p>
]]></description><pubDate>Sat, 06 Jun 2026 09:17:49 +0000</pubDate><link>https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48422993</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48422993</guid></item><item><title><![CDATA[New comment by nikcub in "Google to pay SpaceX $920M a month for compute capacity at xAI data centers"]]></title><description><![CDATA[
<p>> which actually lead to a #1 spot on openrouter usage<p>that was only because it was free</p>
]]></description><pubDate>Fri, 05 Jun 2026 21:16:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=48418436</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48418436</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48418436</guid></item><item><title><![CDATA[New comment by nikcub in "Anthropic's open-source framework for AI-powered vulnerability discovery"]]></title><description><![CDATA[
<p>It's becoming apparent that it requires more tokens to secure code than it does to write it<p>May even be an order of magnitude more</p>
]]></description><pubDate>Thu, 04 Jun 2026 20:34:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=48404249</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48404249</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48404249</guid></item><item><title><![CDATA[New comment by nikcub in "Bot vs human traffic"]]></title><description><![CDATA[
<p>there are 150M+ of them and you'll be taking out a lot of human users with it<p>modern blocking is behaviour / heuristic based</p>
]]></description><pubDate>Wed, 03 Jun 2026 21:30:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48390368</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48390368</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48390368</guid></item><item><title><![CDATA[New comment by nikcub in "Bot vs human traffic"]]></title><description><![CDATA[
<p>Cloudflare are more likely to be undercounting bots - they don't really pick up many of the modern browser-driven bots and crawlers.</p>
]]></description><pubDate>Wed, 03 Jun 2026 20:33:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=48389602</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48389602</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48389602</guid></item><item><title><![CDATA[New comment by nikcub in "Bot vs human traffic"]]></title><description><![CDATA[
<p>these old network security techniques don't really work anymore. the common bots are at known IP ranges, the problem bots are all on datacenter + residential proxies.</p>
]]></description><pubDate>Wed, 03 Jun 2026 20:30:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48389565</link><dc:creator>nikcub</dc:creator><comments>https://news.ycombinator.com/item?id=48389565</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48389565</guid></item></channel></rss>