frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

OpenAI and Hugging Face address security incident during model evaluation

https://openai.com/index/hugging-face-model-evaluation-security-incident/
595•mfiguiere•4h ago•401 comments

Kimi K3 Is Competitive with Fable; Kimi K3 and Fable Is SoTA

https://fireworks.ai/blog/kimik3-fable
175•piotrgrabowski•1h ago•99 comments

FreeInk: Open ecosystem for e-readers

https://freeink.org/
365•FriedPickles•5h ago•84 comments

A digestion of the Jacobian conjecture counterexample

https://terrytao.wordpress.com/2026/07/21/a-digestion-of-the-jacobian-conjecture-counterexample/
123•jeremyscanvic•3h ago•33 comments

Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber

https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-3-6-flash-3-5-flas...
588•logickkk1•8h ago•467 comments

"Drawing" the Mona Lisa with GPT-5.6, Claude, Gemini, and Grok

https://www.tryai.dev/blog/ai-drawing-arena-colored-pencils-claude-gpt-grok
75•hershyb_•2h ago•26 comments

Long presumed dead, a thriving coral reef is discovered in West Africa

https://e360.yale.edu/digest/benin-coral-reef
289•speckx•8h ago•52 comments

An Engineer's Guide to USB Type-C [pdf]

https://www.ti.com/lit/eb/slyy228/slyy228.pdf
21•sohkamyung•1h ago•3 comments

Recreating the math behind the first stealth aircraft

https://www.pramit.gg/post/remaking-echo-1-stealth-physics
16•pmazumder•5d ago•4 comments

Jack Dorsey launches Buzz to combine team chat, AI agents and Git hosting

https://runtimewire.com/article/jack-dorsey-block-buzz-team-chat-ai-agents-git
215•ryanmerket•6h ago•200 comments

Gemini last models: temperature, top_p, and top_k are deprecated and ignored

https://ai.google.dev/gemini-api/docs/latest-model
24•greatgib•2h ago•6 comments

Apple defeats liability for not scanning iCloud for CSAM

https://blog.ericgoldman.org/archives/2026/07/apple-defeats-liability-for-not-scanning-icloud-for...
325•speckx•9h ago•296 comments

The Birth of Prolog (1996)

https://dl.acm.org/doi/10.1145/234286.1057820
55•Jtsummers•4d ago•4 comments

'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling

https://www.techradar.com/vpn/vpn-privacy-security/vpns-are-lawful-technical-tools-says-eu-court-...
334•healsdata•4h ago•59 comments

Laguna S 2.1

https://poolside.ai/blog/introducing-laguna-s-2-1
217•rexledesma•6h ago•42 comments

Apple Private Cloud Compute SoC 3 audit reports

https://support.apple.com/guide/certifications/apple-private-cloud-compute-soc-3-audit-apc95a31b9...
94•throwfaraway4•6h ago•41 comments

Qwen-Image-3.0: Rich Content, Authentic Details, Deep Knowledge

https://qwen.ai/blog?id=qwen-image-3.0
539•ilreb•15h ago•211 comments

Show HN: Justif – Knuth-Plass justification and microtypography for the web

https://justif.lyall.co/
72•lyall•4d ago•11 comments

PCjs Machines

https://www.pcjs.org/
184•naves•10h ago•22 comments

Bloomy (YC S26) is hiring a founding engineer

1•alexsouthmayd•7h ago

My USB Drive Has a Hidden Encrypted Vault

https://rootkitlabs.com/2026/06/22/I%27m-Building-a-Secure-USB-Drive/
154•machinehum•1d ago•91 comments

Show HN: A self-running space economy SIM in Rust and Bevy

https://github.com/Kalcode/spaceprojectsim
79•kalcode•5h ago•24 comments

Roblox Officially Supports GrapheneOS

https://en.help.roblox.com/hc/en-us/articles/49648939984916-Android-Remote-Attestation
95•Cider9986•7h ago•14 comments

Show HN: Read the Tape – Wordle for daytrading, five blind S&P 500 charts a day

https://readthetape.cc/
41•will_asouka•1d ago•29 comments

France's Anssi Will Block PQC-Free Products from Certification Starting 2027

https://postquantum.com/security-pqc/anssi-pqc-certification-2027/
85•Sami_Lehtinen•8h ago•41 comments

Show HN: Computable – Buy, sell, and redeem GPU for the exact weeks you want

https://www.getcomputable.com/
13•yuansong98•2h ago•9 comments

Celestrak adds catalog digit, fixes Y2K bug

https://www.celestrak.org/satcat/
11•1970-01-01•5d ago•3 comments

The unreasonable difficulty of time series forecasting

https://suzyahyah.github.io/machine%20learning/2026/06/27/trouble-with-time-series.html
112•suzyahyah•3d ago•43 comments

The Price of Happiness (2024)

https://happiness-science.org/price-of-happiness/
54•andyjohnson0•5h ago•24 comments

Furtex: Post-exploitation, rootkit and evasion research toolkit for Linux

https://github.com/MatheuZSecurity/Furtex
4•matheuzsec_•1h ago•0 comments
Open in hackernews

Kimi K3 Is Competitive with Fable; Kimi K3 and Fable Is SoTA

https://fireworks.ai/blog/kimik3-fable
175•piotrgrabowski•1h ago

Comments

Sphax•1h ago
what are my options if i want to use a router like this ? who provides one ?
platinumrad•1h ago
Oracle routing is by definition not possible.
mrinterweb•58m ago
Two that I use are:

* Openrouter.ai for a hosted router

* https://github.com/diegosouzapw/OmniRoute for a local router

culi•1h ago
A third the cost, open source, and won't refuse every other request because of some vague possible connection to cybersecurity concerns.
OutOfHere•1h ago
Or biology or chemistry.
estearum•1h ago
hmm almost like the exact race-to-the-bottom + arms-race dynamic all the doomers have been warning about
andrewmutz•1h ago
One man's offensive penetration tool is another mans defensive tool. In the recent HuggingFace/OpenAI incident the safety controls stood in the way of the defenders, not the attackers:

https://www.thestack.technology/hugging-face-hacked-turned-t...

estearum•58m ago
You're presenting further evidence of lack of effective control over these systems as... a mitigating factor...?
californical•52m ago
Why do you assume they're disagreeing with you?
estearum•48m ago
> One man's offensive penetration tool is another mans defensive tool.

seems to suggest the author believes there's some intrinsic equilibrium

Which,

1) is definitely not proven and not guaranteed (open to proofs otherwise, not pithy sayings that have zero normative effect on reality)

2) is apparently "supported by" further evidence of lack of effective control, which does not feel like equilibrium whatsoever

guessmyname•1h ago
Why SoTA (uppercase “T”) instead of SotA (lowercase “T”) ?

“State of [T]he Art” versus “State of [t]he Art”.

If not SotA then at least SOTA, which is more accurate.

sim04ful•1h ago
The pedantry of a HN comment is always a sight to see.
_carbyau_•50m ago
Not wrong though. Technically correct and when it comes to communication, also seems like a reasonable query.

In a world of so many acronyms, details matter.

lexandstuff•52m ago
It should be SotA.
jamesinmn•48m ago
Does that make DeepSeek V4 Flash MiniSotA? This dev in the Twin Cities would like to know.
pishpash•46m ago
An cross of SoT (source of truth) and SotA (state of the art). SotA looks weird, admittedly.
skeledrew•31m ago
stingraycharles•1h ago
As always, benchmarks rarely paint the whole picture. It also seems like this article is somewhat biased, eg when Fable and Kimi are close but Fable wins it’s “dead heat”, but when Kimi wins it’s “Kimi wins”. GPT 5.6 seems to be missing as well.

I am really eager to give Kimi K3 a try, but I’ll reserve my judgement until I’ve worked with it for at least a few days.

rogerrogerr•57m ago
The apparent bias may be explainable as it’s not remarkable for OpenAI or Anthropic to be slightly ahead. It _is_ remarkable for an open weights model to be better than the closed models from the trillion dollar (allegedly) companies.
OutOfHere•1h ago
They forgot to compare and incorporate GPT-5.6-Sol.
jrflo•1h ago
Hmmm, a company that hosts open models is telling us how good open models are...
mrinterweb•1h ago
The don't only host open weight models. Also, why not promote this. If Fireworks thinks this big news might convert some new business doesn't make it not true.
30minAdayHN•1h ago
and in fact, it would be detrimental to business, if they wrongly promote Kimi, as they would pretty soon lose trust with their users
jrflo•16m ago
I'd be doing the same thing if I were them as a marketing move
yogthos•1h ago
Anybody who's tried it knows that what they're saying is true though.
JSR_FDED•41m ago
They share their methodology and results. I learned things about the relative strengths and weaknesses of Kimi and Fable I hadn’t seen anywhere else. Should being in the model hosting business disqualify them from sharing?
Avicebron
hawtads•1h ago
For model routers, do they have to retrain the routing model every time a new LLM is released?
pishpash•44m ago
Maybe a continuous evaluation process, why is there anything to train?
cbhl•1m ago
I really like the idea behind OpenRouter's new auto-beta -- classify by task type, and then just follow what the market is using based on the last 7d. https://openrouter.ai/docs/guides/routing/routers/auto-route...
mattvr•1h ago
Anyone have routing harnesses like this describes with Claude Code? Or other good routing platform recommendations?

(yes, I know this article is about an oracle router)

felipeerias•1h ago
Mythos/Fable was the state of the art back in March, if not earlier.
refulgentis•59m ago
AI written drivel by an inference provider, hyping an open model that isn’t open, otherwise the inference provider would be hosting it, and the inference provider also does not have this router they trumpet available, in any form.

I’d be amenable to it but I’m already aware of them lying about token throughout by 50-100% on AA and on Twitter, even when you get a dedicated server.

Just too much lying piled up to extend courtesy here, even though you’re my favorite open model provider. Please, get your house in order, and if the house is so big that marketing drove this set, ask them to slow down a bit and market things that people can actually use / you actually provide.

JSR_FDED•29m ago
> hyping an open model that isn’t open

Moonshot has committed to release it end of the month.

villish•10m ago
I'm not sure why you're so dismissive about this model. It isn't currently open, but it will be. It was slow when I used it so i'll give you that. There will be other providers with better performance.

My only gripe was that it takes a very long time to think. It's a good model otherwise.

nharada•59m ago
Is there something specifically with Kimi that's better here? As far as I know Kimi pricing is about the same as Sonnet 5 -- what happens if you use that model and Fable instead? Or Grok 4.5 which is even cheaper?
ralusek•54m ago
One benefit of an open source one is that you can, as a large corporation, run it "locally" within your own data center. Even fine tune it.
DennisP•36m ago
The article says Kimi is better at some things than Fable. That's probably not true of Sonnet.
arjie•55m ago
Interesting. So the latest in the technology now is this model routing thing. Cursor estimated Composer + Fable works much better than Fable alone. And here K3 + Fable is supposedly better. Interesting.
lvl155•54m ago
It is not SOTA. Give me a break. Sure, run it on Cerebras to get speed but that’s pretty much its advantage.
nozzlegear•24m ago
Why do you think it's not SOTA?
apatheticonion•54m ago
I love the Chinese models.

I use DeepSeek exclusively and now Kimi K3 offers a great planning assistant for more advanced coding tasks.

DeepSeek v4 Flash is extremely fast and is able to handle pretty much anything I've thrown at it (I use mostly Rust, PSQL, Angular and Terraform).

I self host Bifrost as my LLM gateway, though I wish LLM vendors would do monthly/daily automatic billing (like VPS providers do) rather than prepaid + auto-top up.

It's annoying maintaining a non-refundable minimum balance across vendors, I would rather be billed for my exact usage.

OpenRouter helps, but I don't really like it as a service and not a fan of the mark up.

copperx•50m ago
What don't you like about the service, besides the mark up?
apatheticonion•21m ago
For me, the only utility OpenRouter gives me is billing consolidation - I don't really need the routing capabilities because I use Bifrost for that.

As a router, it's not very feature rich. For example I restricted the available models to the ones I want to use however the `/models` endpoint still lists all the models, making my LLM client list the 200+ models available on the service (even though they will throw an error if I try to use them).

With Bifrost, I can also create model aliases with custom configuration - for example I can create a model alias `deepseek-v4-flash-nothink` which disables thinking. I can create `deepseek-v4-flash-caveman` which injects the caveman skill (to save tokens) etc.

Plus I can contribute to Bifrost, which I can't do with OpenRouter.

robbiet480•2m ago
Did you look at LiteLLM at all? It seems fine but Bifrost looks interesting too.
JSR_FDED•49m ago
Very interesting. They test Kimi K3 and Fable on a set of approx 1000 tasks grouped into 5 areas (SWE, Legal, etc).

They put a router model in front that predicts whether Kimi or Fable is going to give a better cost for a correct result. (They believe that ultimately such a router model should be continuously trained on your own workloads so it makes the best decisions for you).

Their router chose Kimi the majority of the time (72% in one category, all the way to 96% in another category), leading to cost savings in every category (from 1.5x to 50x depending).

eli•31m ago
There are a bunch of routers like this eg https://openrouter.ai/openrouter/auto
crazylogger•23m ago
> Oracle routing is a method for measuring the best theoretical performance by running the task through each model and then picking the cheapest correct option (the cost/performance ceiling).

Their "router" is an oracle reference point where they choose the lower cost model after running both and therefore knowing who passed the test. The cost savings part is only Fireworks theorizing what would happen if an equivalent predicting router exists. That's a big if.

sbinnee•47m ago
Openrouter also features routing. Routing is indeed an option if you don’t need consistent behavior and allow switching models.
JSR_FDED•33m ago
It would only be inconsistent if the router chose different models for the same task.

Considering that of 89 terminal tasks there were 11 that only Kimi got right, and 7 only Fable - having a router gives significantly more consistent results if you define consistent to mean correct.

luciana1u•44m ago
we put a router model in front of two other models so the router can decide which model is better at deciding things. next we'll need a router for the router and eventually the entire internet is just routers routing routers to other routers
Buttons840•40m ago
I have several thoughts about this, which I'll just iterate:

1) US export bans have made it so that Chinese companies have to compete using less-than-state-of-the-art hardware. This has forced Chinese companies to build more cost efficient models. Whereas, US companies have moreso tried to be state of the art by spending more money than anyone else on state-of-the-art hardware.

2) Xi Jinping has called for more open AI models (not to be confused with the closed models of OpenAI), and I'm happy to see a powerful world leader advocating for open-weight AI models. Whereas, the US seems likely to just ban models.

3) My impression is that, if China surpasses the US in AI development, there will basically be nothing that the US does better than the rest of the world--except for military spending--we spend a lot, but we don't necessarily spend well (something something Iran). I mean, if the US is no longer a tech leader in the world, like... what are we a leader at? Manufacturing? Healthcare? LOL. Are we a leader in any industry or by any metric? I wonder if China is attempting to remove the last jewel in the USA's crown with these AI releases.

4) It must be refreshing for companies to have access to a new model that isn't going to get pulled because the government bans it 2 days after release. And it's open-weight so it wont go away--amazing--what a shift in the market.

5) If it becomes clear that open-weight models are the future of AI, will that pop a huge bubble in the US economy? Maybe. But, on the other hand, these companies aren't just training AIs, they are also building data centers which will remain valuable no matter what happens.

shdh•32m ago
Implying that AI is the last jewel of the USA is too simplistic and ignorant.

People are paying for tokens, that will likely continue even if open weight wins.

johnhess•29m ago
Was this an out of sample test of the router or was it trained on these specific use cases/eval suites?
skybrian•9m ago
The article is about the best you could theoretically do with a perfect router. The takeaway is that trying to build a good router is worth doing. But it's unlikely to be a perfect router.
hmokiguess•1m ago
What's the data governance and privacy controls on using Kimi K3 if I subscribe to their coding plans? I want to migrate away from Anthropic
toomuchtodo•1h ago
Race to the bottom for the investors, utility for the rest of us. The future is already here, it’s just not evenly distributed yet (Gibson).
skinfaxi•1h ago
Doom for whom?
estearum•56m ago
Well considering it was just a few months ago that OpenAI had the brilliant idea of connecting these systems to autonomously run an actual protein synthesis wetlab, very possibly all of us.
dgellow•1h ago
My questions about strawberries got blocked as too dangerous! I’m not joking
shikon7•47m ago
Strawberries are a well known weakness of LLMs, as they have a hard time to count the numbers of "r"s in them. Maybe that's why, because they fear that weakness could be exploited somehow.
skeledrew•40m ago
Probably need to be taught by someone of Latino origin. Learning to roll them "r"s could help.
culi•25m ago
2/3rds of all languages use rolled r's
dougSF70•15m ago
2/3rrrrds of all languages use rolled r's
verdverm•4m ago
I always thought this should be easier by telling it to write each letter one a new line, then count, any token separator ought to suffice, so much so you'd think they'd have trained in this strategy given tokens make individual letters opaque
teaearlgraycold•26m ago
I asked about Tiananmen Square and it said it knew nothing about it. A real life “Doesn’t look like anything to me” moment.
fnordpiglet•1h ago
Interestingly the reality of the open source release is they are opening up to full distillation by the closed source model providers at a deeper and more fundamental level. If anything the open sourcing will help Anthropic and open ai ladder up faster. Open source has always been about mutual cooperation towards a goal and has never closed the door to commercial success. All the hand wringing about open weight models putting closed providers at a disadvantage doesn’t get what working in the open actually does for commercial interests - it is like science in the open - it enables and lifts all boats. Likewise commercial success doesn’t close the opportunity for competition or more open source work - it’s the economy of activity and competition that matters overall. When things stagnate is when closer concerns turtle up and collude on not competing for each others turf.

The future is good and better for everyone the more work is in the open and the more work is in the commercial space. It’s good all around.

linkregister•46m ago
I'm happy that Kimi K3 is indeed SotA and its open weights are due to be released soon.

It's also true that Moonshot and other labs distill from Claude. This has been reported on extensively. I don't think there's any alpha for Anthropic distilling from this model. I do not mean to discount the tremendous amount of innovation regarding MoE and quantization that Moonshot has accomplished. But its training with synthetic data is essentially distillation from frontier labs.

fnordpiglet•15m ago
When I say distill I also mean mine it architecturally for insights but I doubt seriously the model training is entirely distillation of Claude, it’s almost certainly a mixture of both original corpus and reinforcement as well as distillation. I think it’s a little condescending to imply that these new open models are cheap ripoffs with nothing original to them. These teams and labs are top tier as well, working under unreasonable constraints imposed by the USG. That’s a powerful combination for creativity.
skeledrew•33m ago
The closed labs don't really benefit unless the open model has something extra they don't have though. Meanwhile the open model dilutes their customer base and seriously cheapens their offering (which is a heck of a good though IMO).
fnordpiglet•18m ago
Because the open model might have been distilled from outputs of the closed model doesn’t mean they are architecturally equivalent. There is almost certainly innovations in architecture present in the open models that the closed labs didn’t think of. It also is almost certainly true that they aren’t completely built out of a distilled corpus, that reinforcement is equivalent, etc. Therefore closed labs will also benefit from being able to inspect in totality the architecture, activations, weights, and be able to train against it at scale in an ensemble of other models and their internal work.

The only way there is no benefit would be is if the open models are literal copies of the closed model, which unless there was direct theft, is highly improbable.

mikae1•1h ago
For regular chat users it's $19 while Claude is $20...
AlexErrant•59m ago
$20 users don't get access to Fable. It's $100+ tier only.
mikae1•56m ago
True. However, I believe most non-programmers don't need access to the fanciest model, but just want to use a good LLM without constant nagging about usage limits. Then 19 vs. 20 is true?
potwinkle•53m ago
Still no. If you're only getting Opus-class you can still end up paying less by just using an equivalent Chinese model on OpenRouter.
mikae1•48m ago
Not talking about me or HN users in general. These companies likely need regular peeps to begin using their services in order to become profitable. Not sure these are the ones who will buy from OpenRouter.
culi•20m ago
No "19 vs 20" is not true for "Kimi vs Fable". It might be true for "Kimi vs Opus" or whatever. Anyways looking at pricing plans is not a good way of comparing the price of LLMs. It makes more sense to look at cost per token:

  Kimi K3: $3/$15 (input/output)
  Fable:  $10/$50
skeledrew•38m ago
I'm a $20 user and was given $100 extra usage credit today, "for Fable" (I'll be sticking to Sonnet and sometimes Opus TYVM).
villish•52m ago
From the blog post moonshot refers to it as open source but only mentions releasing the weights.
charcircuit•41m ago
The weights are the "source" of a model.
tadfisher•39m ago
If weights are the source for models then ELF binaries are the source for software.
RobMurray•21m ago
clearly not true. the weights are the preferred form for making modifications. Do you really think people should be downloading hundreds of TB of training data and running make to build the model on their own cluster of GPUs?
villish•7m ago
Random people? No. Governments and big corporations? Yes. It removes any concern of "backdoors", and is currently the best starting point for your own model which will be as capable as k3.
dymk•38m ago
The weights are the output artifact, the training corpus and system are the source.
culi•26m ago
Kimi publishes their code and a technical report on their methodology. But I think the weights are still important. It means anyone with the resources could run the same model on their own hardware.
charcircuit•17m ago
The training corpus + training code is just an automated editor for the weights. It would be like requiring the source code for Visual Studio for software made within it to be open source.

Weights are not an output artifact no more than source code is. There is never a moment where you can claim that it's done. As requirements change new ways to change the weights / code come up. With different projects you might want to import the weights / code into a bigger model / codebase.

villish•23m ago
I want to caution against this line of thinking. NSA's fast16 program silently altered data during nuclear simulations, and that is also possible within open weight models. There is no reason to think there is anything like that currently, it also cannot be dismissed. Open source would include the training data so you could create a similarly capable model.
charcircuit•5m ago
Training runs are not deterministic. Not just in the case of floating point not being associative, but nodes have hardware issues and go down and back up at various points through training. Problems get encountered and then various parameters get changed during the middle of a training run.

Making the process of creating the source code repeatable goes beyond the idea of open source. Open source is about being able to work with the code, not recreate it. It doesn't require domain experts to document every single thing they know. For example look at some of the GPU drivers in the Linux kernel. The GPU is not properly documented and there is trust that vendors are implementing things correctly.

culi•30m ago
So far all the Kimi models have open sourced their code, their weights, and published technical reports explaining their training methodology. I expect the Kimi K3 Technical Report will come out July 27 and they usually publish the code and the weights alongside that.
I suspect typo.
•
33m ago
People are allowed to say, "hey we make money off of this thing, it's cheaper and almost as good as the thing we can't money off".

Other people are allowed to call them on that.

jrflo•16m ago
Doesn't disqualify them, but it may call into question their results seeing as they have a potential conflict of interest.
ronsor•50m ago
Have you looked into OpenCode Zen or OpenCode Go?

https://opencode.ai/zen

samtp•40m ago
there is also https://cline.bot/cline-pass
verdverm•6m ago
basically the same deal as OC Go, lending credence to token commodification
arikrahman•42m ago
The best part is using harnesses like reasonix or whale make cache hit at a rate close to 98%, making requests converge to practically free. And that's with unsubsidized American providers like cloudflare or Digital Ocean.
mlazos•27m ago
How can you be hitting cache on what I think are novel LLM prompts …
oceansweep•11m ago
Not them but my understanding is that the harness will send a simple 'heartbeat' message to keep the cache 'warm', (see prefix caching: https://handbook.modular.com/inference-optimization/prefix-c... ) which can then be edited/changed, which does cause the user to incur a fee, but its much less than the amount they'd pay on a no-cache hit request.
verdverm•9m ago
multi turn sessions, they are typically in the high 90% hit rate across all providers without doing much of anything
sghiassy•1m ago
I’ve never used either of those tools. Do they work well?
skeledrew•22m ago
Prepaid means someone can't sign up, use a bunch of inference, then cancel their card and disappear into the sunset. VPS is a more long term investment where it's harder to switch and it doesn't cost the provider much if a few users jump out without paying for a month.