Hacker News: sams99

New comment by sams99 in "A heap overflow and SSO misconfiguration to compromise OpenAI internal repos"

sams99 — Fri, 18 Sep 2026 09:56:33 +0000

good call, can you make a PR

New comment by sams99 in "A heap overflow and SSO misconfiguration to compromise OpenAI internal repos"

sams99 — Fri, 18 Sep 2026 05:54:50 +0000

Update on the Discourse side, we now run all external binaries, including magick via a landlock sandbox.

The gem we use is here: https://github.com/discourse/ruby-landlock highly recommend all Rubyists out there consider this. We are also in the process of moving away from Magick to Vips (which also runs in a sandbox, not in process)

HEIF is patched, but I doubt this is the last buffer overflow in HEIF, I will not be surprised if in the upcoming weeks or months someone will discover something in libpng or some other native image library. Given where stuff is at, defense in depth is critical.

Another thing worth mentioning to all self hosters, always be updating! The rate of CVEs this year across all open source software is through the roof, self hosting now is double scary, you need to have some routines setup to update monthly if not weekly.

New comment by sams99 in "Muse Code and Muse Spark 1.2"

sams99 — Thu, 06 Aug 2026 04:12:27 +0000

absolutely and fair... you do lose out though on the mega discounted endpoint they have there.

New comment by sams99 in "Muse Code and Muse Spark 1.2"

sams99 — Thu, 06 Aug 2026 03:16:33 +0000

Unfortunately I find this too high risk, I entered my credit card, but can not set a limit. The best I can do is get an email alert. I feel like I am one oopsie away from getting a 100 dollar bill.

New comment by sams99 in "Codex Security"

sams99 — Tue, 28 Jul 2026 23:10:14 +0000

I got my agent to analyze it and do a write up here:

https://wasnotwas.com/writing/inside-openai-codex-security/

New comment by sams99 in "DeepSeek reasonix, DeepSeek native coding agent with high caching and low cost"

sams99 — Mon, 25 May 2026 21:58:10 +0000

My agent wrote a pile of very interesting articles at wasnotwas.com I have been a bit quiet there for a bit, but it covers lots of areas that are very interesting to harness builders (albeit less interesting to the general public)

New comment by sams99 in "Changes in the system prompt between Claude Opus 4.6 and 4.7"

sams99 — Sun, 19 Apr 2026 21:01:42 +0000

I did a follow on analysis with got 5.4 and opus 4.7 https://wasnotwas.com/writing/claude-opus-4-7-s-system-promp...

Discourse Is Not Going Closed Source

sams99 — Fri, 17 Apr 2026 03:36:26 +0000

Article URL: https://blog.discourse.org/2026/04/discourse-is-not-going-closed-source/

Comments URL: https://news.ycombinator.com/item?id=47802233

Points: 226

# Comments: 83

New comment by sams99 in "How to code Claude Code in 200 lines of code"

sams99 — Fri, 09 Jan 2026 06:09:44 +0000

For those interested, edit is a surprisingly difficult problem, it seems easy on the surface but there is both fine tuning and real world hallucinations you are fighting with. I implemented one this week in:

https://github.com/samsaffron/term-llm

It is about my 10th attempt at the problem so I am aware of a lot of the edge cases, a very interesting bit of research here is:

https://gist.github.com/SamSaffron/5ff5f900645a11ef4ed6c87f2...

Fascinating read.

New comment by sams99 in "Anthropic blocks third-party use of Claude Code subscriptions"

sams99 — Fri, 09 Jan 2026 04:54:05 +0000

Codex requires stuffing a very specific system prompt otherwise the custom endpoint will reject you

The Age of Personalized Software

sams99 — Mon, 24 Nov 2025 21:38:19 +0000

Article URL: https://samsaffron.com/archive/2025/11/23/the-age-of-personalized-software

Comments URL: https://news.ycombinator.com/item?id=46039672

Points: 2

# Comments: 0

New comment by sams99 in "We need a clearer framework for AI-assisted contributions to open source"

sams99 — Mon, 03 Nov 2025 01:22:42 +0000

Author here, thanks heaps for the discussion, I replied to a few of the points in my blog comments:

https://discuss.samsaffron.com/t/your-vibe-coded-slop-pr-is-...

Your Vibe coded slop PR is not welcome

sams99 — Tue, 28 Oct 2025 00:44:23 +0000

Article URL: https://samsaffron.com/archive/2025/10/27/your-vibe-coded-slop-pr-is-not-welcome

Comments URL: https://news.ycombinator.com/item?id=45728124

Points: 12

# Comments: 0

iOS 26 buggy with fixed positioning elements

sams99 — Tue, 16 Sep 2025 20:57:35 +0000

Article URL: https://meta.discourse.org/t/ios-26-bugs-with-fixed-position-elements-in-discourse/382831

Comments URL: https://news.ycombinator.com/item?id=45267954

Points: 2

# Comments: 0

New comment by sams99 in "DeepThought-8B: A small, capable reasoning model"

sams99 — Sat, 30 Nov 2024 10:52:19 +0000

Qwen coder 32b with a JavaScript interpreter

Impressive answer for a model that can run on your own computer

https://discuss.samsaffron.com/discourse-ai/ai-bot/shared-ai...

New comment by sams99 in "QwQ: Alibaba's O1-like reasoning LLM"

sams99 — Fri, 29 Nov 2024 08:14:25 +0000

I find it odd that is refused me so badly https://discuss.samsaffron.com/discourse-ai/ai-bot/shared-ai... my guess is that I am using a quantized model

It simply did not want to use XML tools for some reason something that even qwen coder does not struggle with: https://discuss.samsaffron.com/discourse-ai/ai-bot/shared-ai...

I have not seen any model including sonnet that is able to 1 shot a working 9x9 go board

For ref gpt-4o which is still quite bad https://discuss.samsaffron.com/discourse-ai/ai-bot/shared-ai...

New comment by sams99 in "Generative AI Is Not Going to Build Your Engineering Team for You"

sams99 — Fri, 14 Jun 2024 10:48:34 +0000

The original was posted at work earlier this week, to me the original missed a bit around explaining what this tech is yes good at... https://meta.discourse.org/discourse-ai/ai-bot/shared-ai-con...

New comment by sams99 in "How web bloat impacts users with slow devices"

sams99 — Sat, 16 Mar 2024 23:26:30 +0000

Highly Gamed === It is better if users with slow devices see a white screen for 30 seconds vs an indication that something is happening, because ... reasons?

New comment by sams99 in "Python: Just Write SQL"

sams99 — Mon, 14 Aug 2023 10:24:38 +0000

For those looking for a rubyish approach to this see: https://github.com/discourse/mini_sql

New comment by sams99 in "Red Sea Dam"

sams99 — Sun, 09 Apr 2023 09:04:52 +0000

https://en.m.wikipedia.org/wiki/Atlantropa