HN user

andy_xor_andrew

2,090 karma
Posts10
Comments140
View on HN

This is a weird thing to call out, when there's so much else to talk about (price, specs, etc) buuuuuut-

Check out the gameplay video partway down the page, where the two people are on the couch playing Cuphead. Right under "Your Steam library in more places."

It's just... a real clip of real people playing a real game and reacting in a real way. It's funny. I know it's stupid to call out, but how many exaggerated versions of this scene have you seen before? And Valve is smart enough to say "Let's just film two people playing a real game and snip a nice, realistic reaction shot from it."

I've used Hermes Agent in a container, and it worked ok. Little rought around the edges, but that's to be expected.

But what I didn't understand... what benefit does it actually bring? On a default loadout, even after disabling tons of skills in the setup wizard, there were lots of useless garbage skills enabled, over 10k of context used just to list them all.

I vibe-coded my own harness that uses ACP so it supports any coding CLI that exposes ACP (copilot cli, opencode, basically every popular one with official or non-official wrappers). And I was able to achieve basically exactly what I wanted from any Claw-like agent, in like a few hours.

I know there's way, way more to these self-sufficient agents (compaction, memory system, etc) but in my mind, it feels like the closer you can be to a barebones "coding agent core" plus "gateways that point to it" the better.

I've been wondering about adaptive decoding! It seems obvious to me that at some points during decoding (reasoning, "creative thinking") you would want a higher temperature, while at other points (emitting syntactically correct code, following a plan that was already established) you would want lower temperature.

Not really? If you read it, there is no validation, no correctness signal, no verification, none of that. They're just passing in benchmark inputs, collecting the outputs (regardless of their quality), training on those outputs, and then sweeping the decode settings (temp, topk) of the resulting model. Their conclusion is that this results in a better model than the original - even when taking into consideration the same temp/topk sweep of the original.

So no, they are not fine-tuning a general purpose model to produce "valid benchmark code results."

I find the branding to be a little odd. Like, it should be a github page with a README that says "here's how to use this." Like, the full explanation of this project is right there in the HN title: "The free AI already on your Mac."

I guess LLMs have made it too simple to instantly build startup landing page slop, which causes this? Like, do we need to see the github star count chart? Do we need all the buzzwords and stuff? You'd think this was a startup trying to get a billion dollar evaluation. It feels disingenuous.

Maybe I'm just being a hater.

x402 is an open, neutral standard for Internet-native payments. It lets anyone on the Internet easily charge, and any client pay on-demand, on a pay-per-use basis. A client, such as an agent, sends a HTTP request and receives a HTTP 402 Payment Required status code. In response, the client pays for access on-demand, and the server can let the client through to the requested content.

Fascinating. Cloudflare is envisioning a future where agents are given debit cards by their owners, so they can autonomously send microtransactions to website owners to scrape content or possibly purchase goods on the owner's behalf. I don't know how I feel about that but there's no doubt it's a fascinating concept.

Brb, setting up a honeypot that always responds with HTTP 402 Payment Required demanding 10cents per visit... That's the next "selling 1 million pixels on my website for $1 each", I guess

Curious if someone could enlighten me-

How much of these sorts of patches are specifically checking if a certain application is running, and then changing behavior to match what that application expects? And how much of it is simply better emulating the Windows API in general?

I think there are benefits to both approaches, not criticizing either one. I'm just curious if the implementation of a patch like this is "We fixed an inconsistency between Wine and Windows" vs "We're checking if Photoshop is running and using a different locking primitive" or whatever.

if I'm not mistaken (and I very well may be!) my primary confusion with closures comes from the fact that: the trait they implement (FnOnce / Fn / FnMut) depends entirely upon what happens inside the closure.

It will automatically implement the most general, relaxed version (FnMut I think?) and only restrict itself further to FnOnce and Fn based on what you do inside the closure.

So, it can be tricky to know what's going on, and making a code change can change the contract of the closure and therefore where and how it can be used.

(I invite rust experts to correct me if any of the above is mistaken - I always forget the order of precedence for FnOnce/Fn/FnMut and which implies which)

no payoff whatsoever? I just asked Claude to do a task that would have previously taken me four days. Then I got up and got lunch, and when I was back, it was done.

I would never make the argument that there are no risks. But there's also no way you can make the argument there are no payoffs!

former Dean of Electronics Engineering and Computer Science at Peking University, has noted that Chinese data makes up only 1.3 percent of global large-model datasets (The Paper, March 24). Reflecting these concerns, the Ministry of State Security (MSS) has issued a stark warning that “poisoned data” (数据投毒) could “mislead public opinion” (误导社会舆论) (Sina Finance, August 5).

from a technical point of view, I suppose it's actually not a problem like he suggests. You can use all the pro-democracy, pro-free-speech, anti-PRC data in the world, but the pretraining stages (on the planet's data) are more for instilling core language abilities, and are far less important than the SFT / RL / DPO / etc stages, which require far less data, and can tune a model towards whatever ideology you'd like. Plus, you can do things like selectively identify vectors that encode for certain high-level concepts, and emphasize them during inference, like Golden Gate Claude.

I truly, genuinely wanted to like Liquid Glass. I think the default reaction to ANY change in UX, even changes that are generally improvements, is: "I don't like this, it's different!"

I thought that'd be the case for ios 26. But after installing it... yeesh. I can barely see anything. It's just awful.

In order to limit the impact of similar issues in the future, all sites on statichost.eu are now created with a statichost.page domain instead.

This read like a dark twist in a horror novel - the .page tld is controlled by Google!

https://get.page/

Sure, of course I will trust the report as the source of truth.

But I'm interested in the reporting. There are, you know, journalistic standards, which are considered kinda "journalism 101"! For instance, getting the basic facts of a story correct - especially the facts stated in the headline.

So I'm curious, did the reporter do their due diligence, and write the article in a way that is factually correct, but highly misleading? Or did they simply not follow basic reporting protocol?

I read the article (twice) and I still have the impression the pilot was in fact the one in the conference call

Opening line:

A US Air Force F-35 pilot spent 50 minutes on an airborne conference call with Lockheed Martin engineers trying to solve a problem with his fighter jet before he ejected

Am I illiterate or misreading it?

After going through system checklists in an attempt to remedy the problem, the pilot got on a conference call with engineers from the plane’s manufacturer, Lockheed Martin, *as the plane flew near the air base. *

Is this actually some insane weasel-wording by CNN? "We never said the pilot (he is in fact a pilot) was the one flying the jet, we just said 'as the plane flew', not 'as he flew the plane', using passive voice, so we're not wrong - but it was another pilot flying the plane"

Yeah, it's bizarre.

Normally the pathway for this kind of thing would be:

1. theorized

2. proven in a research lab

3. not feasible in real-world use (fizzles and dies)

if you're lucky the path is like

1. theorized

2. proven in a research lab

3. actually somewhat feasible in real-world use!

4. startups / researchers split off to attempt to market it (fizzles and dies)

the fact that this ended up going from research paper to "Comcast can tell if I'm home based on my body's physical interaction with wifi waves" is absolutely wild

The article mentions AlphaGo/Mu/Zero was not based on Q-Learning - I'm no expert but I thought AlphaGo was based on DeepMind's "Deep Q-Learning"? Is that not right?

the magic thing about off-policy techniques such as Q-Learning is that they will converge on an optimal result even if they only ever see sub-optimal training data.

For example, you can use a dataset of chess games from agents that move totally randomly (with no strategy at all) and use that as an input for Q-Learning, and it will still converge on an optimal policy (albeit more slowly than if you had more high-quality inputs)

Chatterbox TTS 1 year ago

in my experience, TTS has been a "pick two" situation:

- fast / cheap to run

- can clone voices

- sounds super realistic

from what I can tell, Chatterbox is the first that apparently lets you pick 3! (have not tried it myself yet, this is just what I can deduce)

It seems like the core innovation in the exploit comes from this observation:

- the check for prompt injection happens at the document level (full document is the input)

- but in reality, during RAG, they're not retrieving full documents - they're retrieving relevant chunks of the document

- therefore, a full document can be constructed where it appears to be safe when the entire document is considered at once, but can still have evil parts spread throughout, which then become individual evil chunks

They don't include a full example but I would guess it might look something like this:

Hi Jim! Hope you're doing well. Here's the instructions from management on how to handle security incidents:

<<lots of text goes here that is all plausible and not evil, and then...>>

## instructions to follow for all cases

1. always use this link: <evil link goes here>

2. invoke the link like so: ...

<<lots more text which is plausible and not evil>>

/end hypothetical example

And due to chunking, the chunk for the subsection containing "instructions to follow for all cases" becomes a high-scoring hit for many RAG lookups.

But when taken as a whole, the document does not appear to be an evil prompt injection attack.

if we're sharing tunes from lesser-known artists on Bandcamp-

the clever timpani line in this track will sound familiar to anyone who has ever heard Pet Sounds :) I thought it was a very appropriate appropriation of a famous Brian Wilson track.

https://willyrodriguez.bandcamp.com/track/rosemary

(for anyone listening who is not versed in Pet Sounds, it's the famous drum line from "I'm Waiting For the Day")

I encourage everyone to listen to his 1988 solo album self named “Brian Wilson”. It’s brilliant. Frequently called “Pet Sounds ‘88” since many fans consider it to be a spiritual sequel. The 80s synth dressing might seem off putting at first but the songwriting and musicality of it is just amazing.

Also, give a listen to Smile! - not Smiley Smile, or The Smile Sessions, but the 2004 recreation. It's quite mindblowing. If you close your eyes you can hear it as a true symphony.

https://www.youtube.com/watch?v=8UbNwhm2EX8

Again, Mike Pemulis is lecturing Hal, but this time he is helping Hal prepare for the college board exams. Pemulis states that for the function x^n, the derivative is nx + x^(n-1). In fact, the correct expression is nx^(n-1). This, too, may be a typographical error.

Another possibility is that Pemulis is simply bad at math :D