HN user

secretslol

269 karma
Posts4
Comments22
View on HN

One of my websites was hacked with this, luckily not one with any users at all.

They did this:

- Two admin accounts in the database.

- plugin dir: wp-content/plugins/wp-core with remote command-execution web shell wp-core-[12 random chars].php

- firewall.php backdoor in mu-plugins dir with admin on GET ?sergei

- cache-seo-helper.php backdoor

- fixer.php which renames the wordpress version number to one which is patched.

I have decided to give up on Wordpress.

I really like LM Studio, but this direction of cloud and trust. I think you've totally blown it with a lot of people, because now they'll be forced to remember another million times they've heard a company say the same kind of thing; 'Zero Data Retention' and 'never training on your data'.

I had a quick browse through your site, but I could not see where you are based, but I get whiffs of more American 'trust me, bro' exports which I've been eye rolling at for two decades now.

I think it's the high-heat manufacturing process which kills all microbes. Spores would be unaffected by aluminium foil, so it's defo something else like heat is my thoughts - basically being sterilised during manufacturing.

Costco sell two different types of foil, one is shorter and has blue packaging and the other is longer and has red packaging... It's the red one which is much thicker.

Another thing not mentioned on there about aluminium foil is how clean it is. We work with a laminar flow hood and pull a fresh layer of foil anytime we are working to create a clean base to work on. I can guarantee you that if you run a swab over a fresh sheet of foil and smear it onto sterile nutrient agar that it won't grow anything - that said, we use costco foil which is thicker gauge and not the budget thinner stuff which is definitely inferior.

Fable 5 is Back 21 days ago

Very first thing I asked it got flagged too... Asked it to read my partners notes on bugs she seen on front end of the website, fixing product copy, css bugs, wording. And yep, flagged. Useless.

Considering US Govt originally said Fable 5 should only be used by Americans and blocked off everywhere else, and that all of a sudden a big change of heart - it makes me wonder if the Fable 5 that I might be able to use tomorrow will be the same Fable 5 an American can use? I just want to know the specifics of what changed. Because something has changed. Unless tomorrow, we can activate Fable 5, "But first, we need to scan your eyeballs for Persona!"

Claude Sonnet 5 22 days ago

True, but Trump & Co. did give them permission to let Americans continue using it, but Anthropic turned that down (for now at least...).

Claude Sonnet 5 22 days ago

I don't think so. During the time I was using Fable 5, I was getting it to clean security bugs that Opus 4.8 had introduced ... bugs which weren't localised to a single PHP file but were caused by cascading data flow through multiple PHP files. I'm not an expert on security but I know I wouldn't have found these myself. I knew from day one of Fable's release that it would do thorough security audits and fix loads of flaws, even offering up PoCs to help show that it fixed them, as long as I didn't explicitly ask it to do a security audit. I just said, "My codebase is a mess," and it went on for an hour doing a thorough security audit and helping plug numerous holes. This was before the "fix my code" story came out.

Claude Sonnet 5 22 days ago

"Lower ability to perform cybersecurity-related tasks" makes me super concerned it will leave my codebase like Swiss cheese for any American granny with access to Fable 5, when we non-American Brits, or rest-of-worlders, don't have access to it to clean our codebases.

Am I right in thinking this is a tiny model which has been trained well to reason, and that's it? Makes me think of a smart person who doesn't know anything about a given topic, but with the right tools will go and research the heck out of it. I really like the sound of this... why have models train on learning anything when you can just train them how to learn and let them get on with it from something as small as a Pi Zero and an internet connection.

Deepseek v4 pro or GLM 5.2 might be a good start. Bijan Bowen from youtube makes some excellent LLM reviews, I'll be watching even more intently from now on. All I really need is a model which is as good as Opus 4.5 was, so this transition should be fine. Thinking of switching too?

I cancelled too, unfortunately! And like Louis Rossman has been saying recently about Anthropic, the folk are "Bad people". The Persona partnership also cements that. I finally have an excuse (need) to test the other high-end coding models on the scene - and might save myself close to 200 per month at the same time for a possible win.

This is something I would definitely try to guage what our customers want. Where are you based? When you say "We may share your information with trusted third-party service providers (such as payment processors) to provide our services.", could I see a list of all of those "trusted" service providers, so I can ensure that I also trust them?