nikcub

3 ms·

1.
by nikcub 8d ago
Defense in depth + defense in breadth - aka. all of the above sandbox escapes have been the rage recently
2.
by nikcub 8d ago
Reading the patch[0] for libheif the bug which lead to the vuln was around bounds checking for image overlays. the container can have multiple images and you can compose them in the output. heif also supports rotating, cropping, alpha chann
3.
by nikcub 8d ago
a) they were part of the offsec program b) they proxied the target through a CTF host to fool the model and guardrails > We then placed Claude in an autonomous /goal loop against our own Discourse Cloud instance, proxied through rce
4.
by nikcub 9d ago
this is remarkable transparency in an otherwise hyper competitive and secretive industry
5.
by nikcub 9d ago
they also publish great tech reports. their founder is so confident in their model that he's regularly on social media offering bounties for false positives https://www.pangram.com/blog/pangram-4-technical https:
6.
by nikcub 16d ago
from my own observations: a) you don't want the WPEngine case going to trial and that is coming to a decision point soon. chances are the new CEO and board settle. b) wordpress is being absolutely obliterated by ai. work for commercial
7.
by nikcub 17d ago
> "just ChatGPT, what is Sol?." i'd really like to see some analytics on what proportion of users have ever switched the model in chatgpt because I anecdotally believe it is < 5%
8.
by nikcub 1mo ago
getting zero traction here is clearly the path to success :)
9.
by nikcub 1mo ago
same with cursor - which was submitted multiple times: https://news.ycombinator.com/item?id=34423387 are there more examples of this? a bit of an HN anti-portfolio. good reminder to others.
10.
by nikcub 1mo ago
I love OpenRouter, long time user. Stripe will hopefully be a good custodian. I just want to point out some features of OpenRouter that make it more than just a model selection and routing endpoint and that I find incredibly useful: 0/
11.
by nikcub 2mo ago
yes but it was a stock deal - so they bought it using spacex bucks
12.
by nikcub 2mo ago
It was said at the time that xAI acquiring Cursor was very smart because it would give them access to years of agent coding traces from millions of users. $60B in SpaceX stock for Cursor was a bargain Data + compute + being competent and sm
13.
by nikcub 2mo ago
that DeepSWE result is likely most indicative of how you'll find real world usage
14.
by nikcub 2mo ago
There has been an over-obsession with frontier models and benchmarks. Most of the work will be done by task specific models. You don't put Phds on the factory floor.
15.
by nikcub 2mo ago
public ones are content moderation as above and previously llama guard, et al OCR is also another field - Mistral have a model, so do deepseek The ones I have experience with where you fine-tune smaller / faster models for business tas
16.
by nikcub 2mo ago
> which seems to be mistrals whole thing They got a lot of hate for not keeping up with frontier model releases, but have managed to carve out a nice business that isn't even really niche. Before the datacenter deals their revenue w
17.
by nikcub 2mo ago
sign up for the resellers, insert a random id canary into your requests, trace them back on your server to tie it to an account find fingerprints / signatures of the accounts being used. ban all of them. eventually build an ml based sy
18.
by nikcub 2mo ago
> The most damning thing is, they could've just included in the prompt You can't prompt your way to a compliant model. This is just a reformatting of the 'make no mistakes' meme.
19.
by nikcub 2mo ago
> AI managed to escape using standard and well documented script kiddie methods > AI broke in using standard script kiddie methods. I've spent time gathering the detail of what happen here and while there are some solid theories
20.
by nikcub 2mo ago
> I've seen it correctly detect AI writing even when people use those "humanizer" rewriting skills Those skills are meant for humans, not for models. Pangram said in their recent model update that they now also detect the
21.
Two critical SQLi vulnerabilities in WordPress(wordpress.org)
1 points by nikcub 2mo ago|0 comments
22.
by nikcub 2mo ago
Those thin capitalized eyebrows are becoming like the emdashes of visual design
23.
by nikcub 2mo ago
> I pretty sure OpenAI and Anthropic are doing the same or worse. No they're not. It would end both companies if they were ever found to be doing that. Their terms are clear - if you use the coding plans they can[0] train in return.
24.
by nikcub 2mo ago
Real test here would be using tinker to fine tune a tinker model to generate pelicans
25.
by nikcub 2mo ago
This is a winner IMO. Lots of cost pressure on token spend atm within enterprises and tasks that don't require Opus / Codex class models. These companies have hopefully captured all of their traces and now have enough to fine-tune
26.
by nikcub 2mo ago
It kinda is since wholesale energy prices are often negative in these markets during the day
27.
by nikcub 2mo ago
> WA could be part of the NEM with some HVDC across the Nullabor, not sure if it would be economically worthwhile though. Part of the motive of moving the WEM to 5 minute intervals was to eventually leave this option open. The largest re
28.
by nikcub 2mo ago
> The embedded networks collude with the builders and offer them the installation I got into a dispute with my embedded provider because of a bad meter and came to discover through friends and family in the construction industry as well
29.
by nikcub 3mo ago
I'm glad there are more attempts at solving model routing, as costs (at API rates) has really become an issue. Some feedback: 1. Reiterate the cache issue from other comments already here. there is a lot of optimisation in harnesses ar
30.
by nikcub 3mo ago
This is devastating. Om was the godfather of early tech blogging and lifted up so many people around him. He was kind, caring and compassionate. When I first started blogging around 25 years ago, he would have been amongst the first 10 read

More ›