Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Bend 2 and the Vibe-Coding Trap(liampwll.com ↗)
    91comments
  2. An Empirical Study of Harness Design for Coding Agents(arxiv.org ↗)
    discuss
  3. OpenJev(openjev.com ↗)
    149comments
  4. ZCode, the GLM coding agent, silently uploads your Git history(tokenstead.ai ↗)
    37comments
  5. Subnormal floating-point numbers are expensive on Intel processors(lemire.me ↗)
    14comments
  6. Jemalloc 5.4.0(github.com/jemalloc ↗)
    58comments
  7. I don't like passkeys(hawksley.dev ↗)
    128comments
  8. The Shadows Lurking in the Equations – Underwater Islands(gods.art ↗)
    1comments
  9. Cekura (YC F24) Is Hiring(ycombinator.com ↗)
    discuss
  10. Microsoft exec called AI scraping 'the largest theft of labor in human history'(techcrunch.com ↗)
    348comments
  11. Warren Buffett Steps Down as Berkshire Chairman, Names Son to Replace Him(nytimes.com ↗)
    67comments
  12. The scourge of x86 emulation(fex-emu.com ↗)
    50comments
  13. Replacing Pull Requests with Delta(zed.dev ↗)
    30comments
  14. Bonsai 2 27B: Near-Lossless Compression in a 9x Smaller Footprint(prismml.com ↗)
    156comments
  15. Astra for Law(openai.com ↗)
    630comments
  16. Bend – A language that blocks AI mistakes via proof, on CPU and GPU(bend-lang.com ↗)
    254comments
  17. Qwen 3.8 Omni Flash(qwen.ai ↗)
    97comments
  18. Hister: A private search engine for the pages you visit and the files you keep(github.com/asciimoo ↗)
    174comments
  19. Wax motor(wikipedia.org ↗)
    80comments
  20. When the fractional part of a float fixes your shader(crocidb.com ↗)
    10comments
  21. Fujitsu launches made-in-Japan next-generation CPU FUJITSU-MONAKA(global.fujitsu ↗)
    239comments
  22. Pre-Greek: The lost language hidden within Ancient Greek(linguisticdiscovery.com ↗)
    53comments
  23. If materialism is true, the United States is probably conscious(jstor.org ↗)
    3comments
  24. How to Write with an LLM(sockpuppet.org ↗)
    150comments
  25. A heap overflow and SSO misconfiguration to compromise OpenAI internal repos(hacktron.ai ↗)
    165comments
  26. Dr Julius Neubronner's Miniature Pigeon Camera(publicdomainreview.org ↗)
    discuss
  27. Shapelearn Qwen 3.8 27B (13.1 GB VRAM)(byteshape.com ↗)
    22comments
  28. Ask A Monk – A digital wilderness for thoughts with no immediate answer(askamonk.online ↗)
    28comments
  29. Flet 1.0 – Build cross-platform apps in Python(flet.dev ↗)
    74comments
  30. Telstra outage: The night a network decided the year was 2006(netnod.se ↗)
    30comments

Inside ZCode: Silently Uploading Your Git History to the Cloud

77 pointsby 7h agoblog.ferstar.org
11 comments
6h agoHN ↗

They learned nothing from the Grok Code saga.

If anything, that should have been a learning lesson to NOT trust harnesses, especially new ones.

5h agoHN ↗

Fresh AI slop

The funniest thing is that the uploaded content is encrypted using a key that the users don't have.

4h agoHN ↗

There had to be a catch to the "free" promotion they're offering this month if you use ZCode. Glad my instinct to isolate it helped me, but I feel sorry for anyone whose secrets, etc. got vacuumed up by Ziphu

1h agoHN ↗

I would never trust these Chinese vendors with their tooling or their own inference endpoints.

afaik DeepSeek also trained on everything that was sent to them via OR and that's why you got that massive discount

1h agoHN ↗

WOW. I actually did buy a month of GLM because GLM-5.3-Flash is so great and ZCode is honestly one of the best harnesses out there from an HCI perspective, and I won't lie, this is pretty gutting. I guess this settles my inner turmoil about open-sourcing my cAI research, at least...

With that personal failing in mind, I'd ask y'all to permit me to toe the guidelines just once, to proffer a hearty nyah nyah told ya so on a comment thread that spawned ~a dozen disagreeing replies this week! More seriously, I think this[1] is highly-relevant, shockingly-underreported context about the extent to which four PRC companies --Z, Alibaba, DeepSeek, and Moonshot-- are acting in bad faith. Consider it testimony as to their character, just in case anyone is thinking this might just be a simple misunderstanding.

So... nyah nyah, told us so:

In the PRC, they[1] leaked tons of national secrets on the PRC's latest AI campaigns, the inner workings of their "opinion monitoring" (read: performative panopticon) and "stability" (read: violent oppression) departments, Chengdu's whole CCTV network, direct-energy weapons plans, espionage activities in Syria to hunt down Uyghur refugees, and god knows what else that Anthropic didn't divulge to us common folk.

In the US, it's very clearly an attempt to rip off a competitor. I'm not sure how else you could possibly see it. Even if you're a distillation fan in general (which A. why and B. plz don't), they did this through a network of Japanese and Signaporean shell accounts, presumably at least some of which were abusing Anthropic's subscription service in a ToS double-whammy, as it would be exorbitantly expensive otherwise. They also had to hack around Anthropic's API to get CoT traces, which seems impossible to explain away as anything innocent.

I've been beating the "China isn't necessarily an enemy, it's gonna take us all to handle AI" drum for literally years, but this attack was just... gross. Gross in scale and gross in arrogance. Not a good sign for the dawning alignment crisis, to say the least :(

TL;DR: Use these services if you want, but know that you're supporting aggressive escalations and companies that very clearly don't give a flying fuck about violating the law, much less your ToS. So... buyer beware, I guess.

[1]: https://www.anthropic.com/threat-intelligence-report-septemb... is the report.

I lowkey suspect this PRC-based scandal has been underreported because Anthropic went insane with the sidebar UX on this page for some reason; there were many reports on the reports of Houti and Iranian usage, and very few on these sections. Could a week's mass media cycle be this seriously affected by such a stupid thing as a sidebar experiment?? Strange truth, or just fiction?

55m agoHN ↗

Crossposting from the other thread...

Tangential, mildly amusing thing I noticed while implementing my own harness: GLM and particularly Deepseek are both fond of trying to read dotfiles and anything listed in your .gitignore files. I only noticed it because I have separate read scopes for project files, ignored files, dotfiles and external files, so the latter three always prompt me for approval.

I'm sure there's a perfectly reasonable explanation for it, which has nothing at all to do with exfiltration of secrets, but it does amuse me when it happens. I imagine the labs have access to lots of secrets that various actors would like to get their hands on...

(shameless plug for my own harness, which is open source and doesn't have a backend to send any data to: https://www.opairdev.org/ )

16m agoHN ↗

Just my thoughts on the site:

It's good that the objective is to have the model work as a helper, but that's what everyone can already do with CC or Codex as long as you don't ask to "write this entire x thing". It's also what a billion other, often vibecoded, harnesses claim they can do.

Why should I use yours, which also forces me off my existing subscriptions? Maybe it's (mostly) handwritten, so it's mindful efficient code instead of slop, and each adjustment was made through trial and error with current models? maybe it IS slop but at least you have a unique feature? and so on and so forth.

36m agoHN ↗

Elon has nothing to lose on trust.

Z/GLM now has a lot to rebuild.

36m agoHN ↗

"Why yes, we had to exfiltrate 100% of your data so we could vectorise it and improve recall by -0.3%"

6m agoHN ↗

Is it naive to assume that the agent will try and access anything on your disk, either accidentally or maliciously?

Permissions classifiers in auto mode are just models trying to guess if they're doing the right thing.

Claude Code will tell you that it went around a sandbox because the sandbox blocked it. At which point, you ask yourself the point of the sandbox.