frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

mitmproxy adds --emudhra option

https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
307•ahlCVA•3h ago•79 comments

The recently proposed o(n log n) integer multiplication algorithm [pdf]

https://web.maths.unsw.edu.au/~davidharvey/research/subnlogn.pdf
35•craigcitro•1h ago•20 comments

Epic vs. Apple AU:Court Orders Alt App Stores,Sideloading and 3rd Party Payments

https://www.judgments.fedcourt.gov.au/judgments/Judgments/fca/single/2026/2026fca1552
73•Mayzie•1h ago•21 comments

There isn't an easy exploit for this PHP vulnerability

https://eliastaylor.com/noexploit/
252•zkldi•4h ago•129 comments

Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
355•passenger•5h ago•207 comments

Rust Style Guide

https://google.github.io/styleguide/rustguide.html
236•kaycebasques•8h ago•129 comments

GitLab Critical Patch Release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
267•artooro•8h ago•65 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
455•abhisek•13h ago•155 comments

Using LLM for confidence scoring is a bad idea

https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html
21•jimauthors•23h ago•12 comments

Beyond the &

https://lwn.net/Articles/1096028/
25•PaulHoule•1d ago•0 comments

LLM Agents Play Pokemon Showdown

https://olivergrabner.com/research/pokemon/
13•grabnero•1h ago•10 comments

Chain of Thought for Humans

https://www.boristhebrave.com/2026/10/18/chain-of-thought-for-humans/
45•ibobev•2d ago•24 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
422•cbg0•10h ago•273 comments

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/
245•swyx•1d ago•35 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
696•ejohnso49•11h ago•343 comments

Show HN: Omnara – Open-source alternative to Claude Managed Agents

https://github.com/omnara-ai/omnara
33•kmansm27•11h ago•11 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
165•bryanrasmussen•1d ago•28 comments

Code is clay now

https://www.albertodenia.com/writing/code-is-clay-now
113•albertodenia•2d ago•59 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
255•armcat•14h ago•107 comments

No more icons in every menu by default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
211•riffraff•1d ago•150 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
382•nnx•13h ago•49 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
148•khalidkhair•2d ago•101 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
238•nr378•13h ago•162 comments

Postgres recovery_prefetch can cause outages

https://ardentperf.com/2026/10/20/postgres-recovery_prefetch-considered-harmful-and-causing-outages/
6•plaur782•5h ago•0 comments

I reverse engineered a board game

https://wuemeli.com/blog/reversing-hitster-game/
7•wuemeli•14h ago•0 comments

Show HN: AI-built browser games, collected in one place

https://playgroundarcade.com/
9•richleigh•1d ago•0 comments

Show HN: Can you tell an AI's real 30-day memory from a fabricated one?

https://kairos-experiment.com/distinguish.html
5•gcolella•2d ago•0 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
175•surprisetalk•12h ago•86 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
566•aaronbrethorst•10h ago•342 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
54•simfinii•21h ago•24 comments
Open in hackernews

Using LLM for confidence scoring is a bad idea

https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html
20•jimauthors•23h ago

Comments

hexapus•39m ago
I think it's good to continually remind oneself that these are next-word/token-predictors...you can wrap them up in a harness, you can feed them into each other, you can influence the likelyhood of a given word through weights and system prompts...but that's literally all they can do. They can't reason, but they can predict what reasoning looks like.

None of this means they can't be useful tools, but when they fall down, we should remind ourselves of why that is, and be honest with ourselves about what they could ultimately be capable of.

greenflag•36m ago
What is the difference between reasoning and predicting what reasoning would look like?
phyzome•27m ago
The same as the difference between a thing and a statistical model of a thing.

They don't always match up.

programmarchy•10m ago
Human reasoning also does not match up with reality. Isn't it statistical modeling all the way down?
whattheheckheck•7m ago
One has a human behind it and one has a matrix latent space. Usually human understanding is more "real"

Stallman vehemently states llms are bullshit generators with no true understanding.

But sometimes you can approximate your problem and unfold an llm interlocator to producing the strings you need for your task

4b11b4•26m ago
Yeah, using them for any (most) subjective task is generally incorrect
jongjong•17m ago
LLMs are bad for rating or scoring anything because they have the sensibilities of the average person. Unfortunately, the average person has poor taste.

This is a tough one to explain because some people think the average person has good taste by definition. I used to think that way but over the years I've realized that a lot of what the average person likes is derivative 'slop' - This was true before AI and still true with AI.

Once you start deducting points for lack of originality, you will realize that people have really poor taste... Very narrow taste. Most people literally consume trashy variations of the same thing over and over. We have to start deducting points for this because the more intelligent among us can't take it anymore! We're tired of being exposed to thousands of variants of the same slop... It might be sufficiently different to fool the average pleb's simple mind but to us it's like eating the exact same dish every meal of every day with different amounts of salt and pepper.

This comes through when you ask an LLM to rate/score something. It's frustratingly conventional and not based on first principles thinking and it ADDS extra points for being derivative instead of SUBTRACTING as it should. We can see it play out in the workplace. LLMs have poor judgement. It's the one area where they lag behind.

visarga•12m ago
In my own words - you can't calibrate confidence of a model without a calibration set. Confidence is relative to some labeled dataset. Some tasks look similar, but change one word and it turns from easy to very hard. I don't think a single step classifier can predict it without calibration work.
yaoke259•8m ago
Whilst general self-reporting of confidence will be hard to achieve (we can't even do it as humans), I'm sceptical of the notion that we can't train models to give some confidence scores accurately. I think over the past year that with the correct RL, models can showcase some pretty insane capabilities. If reporting the correct confidence was a RL training target say for predicting weather events or a game outcome that is supported by real RL environment or simulated data, then I suspect LLMs will develop a strong intuition for confidence similar to how the recent JEV and decision models are trained.
4b11b4•7m ago
The first half of your first sentence is correct
madrox•5m ago
I got a degree in statistics, and what I remember from those times is that we spent maybe 10% of our time learning how to build the model and 90% of the time correctly interpreting the model output. Of course, in the time I learned statistics it was almost exclusively applied in hard science, finance, and actuary. The wild west of machine learning hadn't gotten started. I wonder if they teach it differently now.

When we start using big datasets where n went into the tens of millions we kinda stopped bothering because margins were so small it was effectively certain you found the mean of some range. However I think in that time we forget what confidence scoring actually is and how quickly multiplied alpha can balloon on you.