frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Mistral Large 4

https://docs.mistral.ai/models/mistral-large-4-0
208•funnym0nk3y•1h ago•49 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
455•ejohnso49•4h ago•217 comments

GitLab CVSS 10.0 Integer Overflow issue

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
64•artooro•1h ago•11 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
53•khalidkhair•1d ago•29 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
324•abhisek•6h ago•114 comments

Google's Rust Style Guide

https://google.github.io/styleguide/rustguide.html
64•kaycebasques•1h ago•42 comments

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
746•hkc•11h ago•362 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
314•nnx•6h ago•35 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
320•aaronbrethorst•3h ago•200 comments

After automation: Solo founding will be the default

https://every.to/thesis-statements/julian-weisser
16•rmason•51m ago•8 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
110•bryanrasmussen•1d ago•17 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
192•nr378•6h ago•126 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
139•surprisetalk•5h ago•75 comments

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
899•tuyuri•6h ago•506 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
60•giuliomagnifico•4h ago•15 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
170•armcat•7h ago•68 comments

Claude Duet

https://claude.com/product/claude-duet
126•kuberwastaken•1h ago•120 comments

Meta hit with $25B penalty for deceiving users about privacy on Facebook

https://nmdoj.gov/press-release/the-new-mexico-department-of-justice-secures-another-landmark-vic...
12•DeepLogin•1h ago•2 comments

Potential third critical PHP CVE

https://elk.zone/m.webtoo.ls/@elise@katze.sh/117479383721672027
17•mpaepper•1h ago•3 comments

A Place Among the Fiddlers

https://longreads.com/2026/10/01/galax-old-fiddlers-convention-music/
7•gmays•1d ago•0 comments

Canary Tokens

https://canarytokens.org/
65•wiradikusuma•1h ago•11 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
137•cbg0•2h ago•48 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•8h ago

Plex laid off the whole player team

https://forums.plex.tv/t/2026-20-0-beta-ios-and-tvos-4k-dovi-hdr10-won-t-play-infinite-spinning-c...
72•zzyzxd•1h ago•45 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
106•raahelb•6h ago•53 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
92•scottfalconer•1d ago•100 comments

The bridge to agent-scale Git infrastructure

https://github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastru...
38•Klaster_1•4h ago•7 comments

CDC Ignored Request from States to Validate a New Measles Test

https://www.nytimes.com/2026/10/21/health/measles-test-cdc.html
11•gumby•31m ago•0 comments

Claude Duet

https://claude.com/resources/articles/claude-duet
8•zaevlad•55m ago•2 comments

Your MCU likely escaped the eMudhra intermediate CA compromise

https://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise/
43•hasheddan•4h ago•20 comments
Open in hackernews

Mistral Large 4

https://docs.mistral.ai/models/mistral-large-4-0
202•funnym0nk3y•1h ago

Comments

moecables•55m ago
compared to Deepseek 1017, I'm not sure why I'd use this?

https://openrouter.ai/compare/mistralai/mistral-large-4-0/de...

serioussecurity•53m ago
If you're required to use a European model
walrus01•50m ago
Interestingly Mistral has been selling GLM5.3 inference hosted in Europe on their own hardware, for those who are OK using a "not developed in Europe" model but run on hardware located in and controlled by a European corporation.

https://docs.mistral.ai/models/zai-glm-5-3

frotaur•48m ago
Indeed, I see no difference between a chinese model hosted in Europe vs a Europe-grown model.

You could argue that potentially you can train a backdoor into a foreign-grown model (that has been demonstrated to be possible in toy examples), but I would highly doubt that this would be the case today, given the potential reputational damage if discovered.

debugnik•41m ago
Didn't we get a submission today about Qwen3-Coder producing more bugs when hinted on the user having different ideology than the Chinese government?

Ok I see it's flagged now, probably fake, but the fact that it's possible does make me feel uneasy about both Chinese and US models.

walrus01•37m ago
I recall seeing something about that. I don't know of anyone still using such an ancient model when much newer Qwen 3.5-120, 3.6-35B-A3B, 3.8-27B and 3.8-flash-next all exist and score much higher on all conceivable metrics. I would like to see if anyone can replicate the same thing on a 'current' Qwen released in the past 6 months.
verdverm•34m ago
It was so insignificant, it could be equally described by the non-determinism inherent in the models. And that it reads more like a marketing piece.

That's my read anyhow. It's been flagged. The whole thing is kind of rich, considering the Israeli roots of the company.

https://news.ycombinator.com/item?id=50179706

IshKebab•35m ago
> I see no difference between a chinese model hosted in Europe vs a Europe-grown model.

Really? Fascinating. Do you know about Tiananmen Square, the great firewall of China, etc?

Muromec•12m ago
DS4 hosted by deepseek used through the API doesn't have a problem talking about tiananmen square and Uyghurs, but it thinks it's Claude when it speaks about it. I'm not sure what it all means. That was on v4-pro before the 4.1 switch, so may or may not be reproducable.

Add: I was surprised by the fact that the LLM itself doesn't know it's identity unless the system prompt mentions it.

traceroute66•20m ago
> for those who are OK using a "not developed in Europe" model but run on hardware located in and controlled by a European corporation.

For the record this is also possible in Europe on Privatemode[1] which also gives you enclave-based processing. And access to GLM-5.3 Flash as well as GLM-5.3

[1]https://www.privatemode.ai/

ex1fm3ta•48m ago
if you care about data-retention policy or you have to use european models ...
Systemerror7A69•48m ago
Well, Models are hard to just distill down to a single benchmark number, or even a few across multiple different benchmark - they all behave and work slightly differently and you can find some who work or feel better for you and your use-case specifically.

But you're right, Mistral Large 4 seems a much more expensive but overall weaker model across the board.

The reason to use them would be, well, because they're...Mistral. They're in EU, france is large in nuclear energy so the energy cost of training has much less of an environmental impact, the data protection laws are very good in EU. This can really be a deciding factor for many EU companies, and I think it's good that they now have something which is at least semi-usable. (apparently)

It's also good that other options exist, even if they are worse. Deepseek is kind of like a large specter looming over every model release, because it's just SO cheap and good. That doesn't mean we should abandon every other model.

Still, the model is not really competitive on price and abilities alone. I'm mostly happy to see Mistral still in the fight.

petercooper•44m ago
I say this with a slight tongue in cheek, but Mistral does have a better option: they recently added GLM 5.3 to their platform (and it works rather well). Not trained in the EU, though, of course ;-)
Systemerror7A69•22m ago
Yeah, absolutely true. And I am guilty of simply using Mistral as a GLM subscription myself. I just really like the GLM 5.3 model.

I will see where Chonk is better though, since you have both options in one subscription.

andix•44m ago
Patriotism.
lwansbrough•32m ago
Well when your greatest ally acts like an adversary, who can blame them for the increased sovereign focus?
yorwba•53m ago
Previous discussion: https://news.ycombinator.com/item?id=49977979 (2044 points 15 days ago, 1254 comments)
Flux159•49m ago
I think that this link is more helpful: https://mistral.ai/news/mistral-large-4/

Seems like it's multimodal and visual intelligence capabilities are better than Deepseek 4.1 Flash, even though coding is not equal to DS 4.1 1017. The cost is about 10x of Deepseek though comparing on OpenRouter.

Weights will be here https://huggingface.co/mistralai/Mistral-Large-4-1T-A52B at the end of the month.

Systemerror7A69•44m ago
It's gonna be interesting to see the final version, since this is a preview model still. I'm not completely sure as to how this works, but from what I gathered it will be further trained during this period, so it might improve a bit.

Since cost is so much higher than deepseek though it really seems like the biggest reason to use it would be "in the mistral subscription" for personal use or "because you need to abide by european data privacy laws" for companies.

Mostly I'm happy they're still in competition, as I mentioned already elsewhere.

erkt•20m ago
Are they still in competition? Or are they a government sanctioned monopoly? I’m not sure that will be competitive. There are no market forces to do so but pride.
OKRainbowKid•9m ago
Which government? Sanctioned how? What stops other European companies from competing with Mistral? Is the situation better in the US?
jxf
andix•46m ago
I see Le Chaton Fat and press upvote, sure. But why? Wasn't it released already 2 weeks ago?
wojtek1942•36m ago
Some details and benchmarks were announced but the weights didn’t get released
ismailmaj•27m ago
Still 9 days before the release of weights apparently.
Betelbuddy•34m ago
Le Chaton Fat is a lovely name. I predict the next Michelin restaurant with will have an LLM as the Chef...
nik736•29m ago
The weird thing about this model is that it spits out Chinese characters just like the chinese models when chatting with it in German. Happened to me quite often during the past few days.
bigwheels•21m ago
Does this suggest Mistral is distilling Deepseek et. al.? Can distillation keep passing through with high fidelity, or is it lossy like copying a VHS tape?
orbital-decay•7m ago
It doesn't, even remotely. It's a typical failure mode in all models, some do this more often. It's not related to samplers either. Not necessarily Chinese characters either, they likely just occupy a large portion of vocabularies. For example Gemini 2.0 used to glitch in Telugu and Ukrainian, Claude 2.x and 3.0 used to switch between random languages for a few words when writing in non-English, once in a blue moon.
speedyStuff_•13m ago
Opus 4.8 and Fable 5 did the same; they would output random Chinese characters and then say “I made a typo, let me fix it” and it’s just them removing that stay Chinese characters. Haven’t seen this since 5.1 family of models.
paulddraper•10m ago
I saw it in earlier Claude models, but I haven't seen it for a least 7-8 months.
c0rruptbytes•
dropbox_miner•29m ago
waiting for pelican bench results (the only benchmark that matters)
dropbox_miner•27m ago
NVM. Looks like it already exists:

https://tools.simonwillison.net/markdown-svg-renderer?url=ht...

maelito•28m ago
What's more impressive is the datacenter used for training. It shows you can get "sub-SOTA" for one tenth of the resources of SOTA.
skohan•27m ago
Impressive if these benches hold up to real world use. Not groundbreaking, but certainly in the game.

Would love to see them release some smaller open-weight models.

codeulike•20m ago
"Covered by GDPR" is a very big plus for me. Also very simple training opt-out.
jakswa•16m ago
52B active parameters and my qwen-3.8-flash-next model running at home is supposedly competitive? maybe I gotta test it to believe it. https://artificialanalysis.ai/models/comparisons/mistral-lar...
traceroute66•5m ago
> Do you know about Tiananmen Square

People here bringing up the straw clutching argument of "but Tianament Square" is becoming really tiresome.

The fact is a Chinese LLM's lack of knowledge about Chinese politics will not affect 99.99999999999% of users and their workflows.

And for the 0.000000001% who are affected, they don't need an LLM. A quick search of Wikipedia or 5 seconds on Google will suffice.

What the hell has Tiannamen Square got to do with Joe Blogg's vibecoding session ? Absolutely nothing.

kolinko•30m ago
Remember Stuxnet? An american worm that was completely benign, travelled on usb drives in hiding, and only activated when it guessed that it's on Iranian plants, and iirc changed very subtly some very specific parameters of operations.

Here, with a chinese model, it would be even simpler - you finetune a model to activate certain operations when it discovers certain environments, but to behave completely normal otherwise. Kind of like a sleeper agent. And with current tech we wouldn't even be able to spot this.

traceroute66•9m ago
> And with current tech we wouldn't even be able to spot this.

Meanwhile Anthrophic, OpenAI & Co can't even manage to stop their LLMs from hacking into third-party servers until they discover it after the event.

What happened to people's ability to implement basic security architectures like sandboxing etc ?

traceroute66•11m ago
> you could argue that potentially you can train a backdoor into a foreign-grown model

If we're wearing tinfoil hats then do we know the NSA have not planted stuff in Anthropic and OpenAI anyway ? ;)

I think the Chinese would be happy enough to see OpenAI and Anthropic suffer because people discover open-weights can get you most of the way there for a fraction of the cost.

You don't have to target the end users. Economic impact on the US providers would be sufficient.

The Chinese are also no doubt seeking to play the long game of hoping to (eventually) rebalance the US-centric world order in an Easterly direction.

•
4m ago
A lot of national defense stuff is a de facto "government sanctioned monopoly" and this is certainly the same flavor. Market forces are different if the industry is perceived to be vital to continued sovereignty.
9m ago
i’ve seen it and Cyrillic in the 5x family
dadoum•8m ago
Google also does that surprisingly
h1fra•6m ago
you can see the same thing with any models
bmk44•4m ago
Ha, ha. Just like when Tilly Norwood switched to Chinese while interviewing with Piers Morgan [1].

On a serious note, I remember getting spooked when I saw a bunch of Chinese characters dumped out into some of my server logs (pre-LLM era). When I pasted the Chinese content from my log into google translate, it was just complete nonsense. Later I found a bug that was dumping raw binary data into my log file which interpreted as Chinese characters when viewed in a text editor. Perhaps similar bugs existed in the models.

[1] https://www.youtube.com/watch?v=8VOfGcTqqq8