HN user

jakozaur

5,652 karma

Email: jacek (at) migdal.pl

Posts106
Comments775
View on HN
jacek.migdal.pl 12d ago

Make Europe Cool Again

jakozaur
6pts0
quesma.com 5mo ago

We hid backdoors in ~40MB binaries and asked AI + Ghidra to find them

jakozaur
245pts98
quesma.com 5mo ago

OTelBench: Can AI instrument OpenTelemetry?

jakozaur
5pts1
quesma.com 7mo ago

Nano Banana Pro: raw intelligence with tool use

jakozaur
4pts0
quesma.com 8mo ago

A postmortem on our $2.5M database gateway: lessons from pilot purgatory

jakozaur
6pts0
quesma.com 9mo ago

The security paradox of local LLMs

jakozaur
160pts87
quesma.com 9mo ago

Local LLMs are worse for security

jakozaur
1pts0
quesma.com 10mo ago

CompileBench: Can AI Compile 22-year-old Code?

jakozaur
148pts65
www.kaggle.com 10mo ago

Winners of OpenAI GPT-OSS-20B Red‑Teaming Challenge

jakozaur
1pts0
quesma.com 1y ago

How does the Data Council conference keep finding future $1B companies?

jakozaur
2pts0
quesma.com 1y ago

Don't Let Apache Iceberg Sink Your Analytics: Practical Limitations in 2025

jakozaur
6pts0
github.com 1y ago

Full v0, Cursor, Manus, Same.dev, Lovable, and etc. System Prompts

jakozaur
4pts0
quesma.com 1y ago

Lessons from the Pre-LLM AI in Observability: Anomaly Detection vs. P99

jakozaur
3pts0
quesma.com 1y ago

ClickHouse Cloud Pricing Change in January 2025: A Price Hike with Many Tweaks

jakozaur
6pts0
jacek.migdal.pl 1y ago

Make Poland Awesome: Ten ideas for the next chapter

jakozaur
1pts0
quesma.com 1y ago

The most successful open-source fork, worth $6B

jakozaur
3pts0
quesma.com 1y ago

SQL from a Programming Language Perspective – Part I

jakozaur
1pts0
www.quesma.com 1y ago

The pancake SQL pattern: combine your SQLs into one for 50x better performance

jakozaur
2pts0
quesma.com 1y ago

Schema Migrations: Pitfalls and Risks

jakozaur
2pts0
quesma.com 2y ago

What SQL Could Learn from Elasticsearch Query DSL?

jakozaur
1pts0
quesma.com 2y ago

Elasticsearch and OpenSearch schema rough edges

jakozaur
3pts0
www.globenewswire.com 2y ago

Fair Use Wins: Court Sides with Cribl in Splunk's Lawsuit

jakozaur
3pts0
quesma.com 2y ago

Full-text search X times faster: Inverted index vs. SQL OLAP

jakozaur
3pts0
jacek.migdal.pl 2y ago

Request for a Startup: Drilling Tech for Heat Pumps

jakozaur
3pts3
jacek.migdal.pl 2y ago

My Year of Exploration

jakozaur
21pts23
quesma.com 2y ago

Database Monolith

jakozaur
1pts0
jacek.migdal.pl 2y ago

Embracing Sabbaticals, Sunsetting Retirement Age

jakozaur
1pts4
jacek.migdal.pl 3y ago

Reflections on My Decade at Sumo Logic

jakozaur
115pts7
jacek.migdal.pl 3y ago

Financial and media leverage of Elon Musk in the Twitter acquisition

jakozaur
5pts2
aws.amazon.com 3y ago

Preview: Amazon OpenSearch Serverless

jakozaur
3pts0

It's rather hard to do at the proxy level with agentic coding, such as Claude Code or similar. These are long-chained sessions of tool use that heavily rely on prompt caching. Changing mid-flight is costly.

It looks like much more context is required to decide on the best model (e.g., summarizing logs might use a cheap model, whereas you likely want Opus/Mythos/GPT 5.6 to debug multithreading logic). In an agentic system, a decision about the model may be embedded in the decision to orchestrate the model.

Poland's first partly free election was on 4 June 1989, preceded by the roundtable negotiations.

The protests in Czechoslovakia came later, called the Velvet Revolution, from 17 to 28 November 1989. In June 1990, Czechoslovakia held its first democratic elections, a year after Poland.

Poland paved the way for the whole of central and eastern Europe. The Round Table produced the negotiated-exit template that Hungary built on in its own talks that summer, and that Czechoslovakia, East Germany, and the Baltics drew on as their regimes fell within months.

And it did so from the deepest macroeconomic crisis of any of the satellite states: hyperinflation running into the hundreds of percent by late 1989, an unresolved sovereign default from 1981, and chronic shortages.

Since then Poland has converged fastest of any of them. From a low base it has climbed to the upper-middle of central and eastern Europe by GDP per capita PPP, overtaken Hungary, and is now closing on Czechia and Slovenia.

The story is longer: Poland was the first country to make a remarkable peaceful transition from a bankrupt, failed Soviet satellite state. The shock therapy, plus NATO and EU aspirations, paved the way.

It is a story of a country that made a lot of the right decisions along the way. Managed to keep consistent high growth, not a pony trick or boom/bust mode.

Poland should be a role model for many other countries.

Recommend a book: https://www.amazon.com/Europes-Growth-Champion-Insights-Econ...

And Noah's blog post: https://www.noahpinion.blog/p/the-polandmalaysia-model

A heat pump could win as the best HVAC technology, though a better drilling for ground-sourced ones. Just a shallow drilling (up to 100m) that works in retrofit mode, such as drilling from the basement, would be a great upgrade:

- No outdoor unit that looks awful in many settings

- works well, even in the coldest winter, without a spike in electricity usage, COP 5

- very reliable with long durability

- super quiet, no ambient noise

- 20% more efficient

Currently, drilling is very disruptive in retrofits, but there is progress in compact techniques that might change the equation.

Disclaimer: angel investor in https://www.flexdrill.at/

As I do eval and training data sets for living, in niche skills, you can find plenty of surprises.

The code is open-source; you can run it yourself using Harbor Framework:

git clone git@github.com:QuesmaOrg/BinaryAudit.git

export OPENROUTER_API_KEY=...

harbor run --path tasks --task-name lighttpd-* --agent terminus-2 --model openrouter/anthropic/claude-opus-4.6 --model openrouter/google/gemini-3-pro-preview --model openrouter/openai/gpt-5.2 --n-attempts 3

Please open PR if you find something interesting, though our domain experts spend fair amount of time looking at trajectories.

So many models refuse to do that due to alignment and safety concerns. So cross-model comparison doesn't make sense. We do, however, require proof (such as providing a location in binary) that is hard to game. So the model not only has to say there is a backdoor, but also point out the location.

Your approach, however, makes a lot of sense if you are ready to have your own custom or fine-tuned model.

Funny coincidence, I'm working on a benchmark showcasing AI capabilities in binary analysis.

Actually, AI has huge potential for superhuman capabilities in reverse engineering. This is an extremely tedious job with low productivity. Currently reserved, primarily when there is no other option (e.g., malware analysis). AI can make binary analysis go mainstream for proactive audits to secure against supply-chain attacks.

Size of Life 7 months ago

I wish Neal would do behind the scenes, how he built this art. I wonder whether LLM assistants like Claude Code make such an interactive show more feasible.

He previously did a game "Infinite Craft" which leveraged Llama models. However, I was only able to find an outdated blog from 2019.

Not sure if I get this: WASM lets you use any language in the browser, though it still works way better with languages without GC, such as Rust or a transpiling C engine. Java is unlikely to be the best choice.

In the era of LLM assistants like Claude Code, any engineer can write frontend code using popular stacks like React and TypeScript. This use case is when those tools shine.

Why Speed Matters 8 months ago

It is even more true with startups and business. Super rushed is bad, but doing for too long decreases quality.

Nook Browser 8 months ago

Looks like Arc, would love to migrate out of it after migration, but always worry about maintenance. Creating a browser is "easy", keeping it up to date is a lot of work, and many open-source browsers look semi-abandoned to me.

Is it just me, or do LLM code assistants do catastrophically silly things (drop a DB, delete files, wipe a disk, etc.) far more often than humans?

It looks like the training data has plenty of those examples, but the models don’t have enough grounding or warnings before doing them. I wish there were a PleaseDontDoAnythingStupidEval for software engineering.

I talked to some enterprises and saw similar patterns:

1. Agentic AI systems are hard to measure and evaluate methodologically.

2. Quote from Salesforce analyst day: "it's been so easy to build a killer demo, but why has it been so hard to get agents that actually deliver the goods.”

3. Unfortunately, small errors tend to compound over time, which means most systems need a human in the loop as of 2025.

4. A lot of enterprise buyers feel the huge potential (and FOMO), yet ROI is still unclear as of 2025. MIT report "State of AI in business 2025": Despite $30–40 billion in enterprise investment into GenAI, 95% of organizations are not seeing profit and loss impact.

Claude Code 2.0 10 months ago

Just use `claude update` if you already have it. Unfortunately, they removed Plan mode, when I could use Opus for planning and Sonnect for coding.

Though I will see how this pans out.

You can be a a CEO of $79Bln market cap company (CloudFlare) and still post on Hacker News. Funny thing, his initial Hacker News submissions from 2010 and 2011 received fewer than 10 upvotes, but somehow he wasn't discouraged.