Top of Hacker News

Zero bits in the top of several published seeds were the tell: they matched lrand48, which returns only 31 bits of a 48-bit state. Claude brute-forced the hidden bits for the binary curves and used lattice reduction for the prime ones, dating the prime-curve seeding to between May 1997 and April 1998.

The HN thread skipped the cryptography and argued about who is allowed to run this kind of analysis.

The check lives in the Supervisor, hashes values locally and sends only a 5-character SHA-1 prefix to HIBP. It has existed for years; a recent release merely made its warning visible, which is how a user noticed it.

The maintainer's apology didn't end the argument. Readers objected to the premise: a home automation hub that phones out, even with a prefix, is not what they installed it for.

Of 18,797 tasks in the US occupational database, only 924 have at least five benchmark prompts behind them. Software engineering and financial analysis are heavily tested; truck driving and gas plant operation barely appear.

Readers argued about whether that gap means safety for physical jobs or just a longer wait for robots.

Anthropic says merged PRs for Claude Code more than doubled from June to September while reverts fell by over 40%. A classifier now sorts changes into no-human, one-human or two-human review, and an agent's approval never counts as a human's.

Hacker News mostly doubted that throughput measures anything.

Waymo is partnering with Toronto's Element Fleet Management to run the fleet and says the work will create hundreds of local roles. It cites 400 million fully autonomous kilometres and claims 95% fewer serious-injury crashes than human drivers.

The thread was dominated by riders from other cities saying the same thing: it just works.

Archibald tested avifenc, libjxl, jixel and cwebp on an M4 Pro, scoring with SSIMULACRA2. JPEG XL lost on lossy photos and screenshots (30-90% larger), but dominated lossless and can recompress existing JPEGs 9-20% smaller.

Commenters disputed whether the benchmark or Chrome's earlier decision was the real story.

The ARRL asked eBay to clarify, and eBay confirmed devices that can operate only on amateur frequencies are exempt. Two-way VHF/UHF radios able to transmit outside ham bands still need FCC certification.

The thread's real question: why ham radio operators police each other so hard.

Committer Peter Eisentraut blames part of the delay on LLM-assisted review, which turned up many small edge-case defects that would once have surfaced years after release. Forty reports needing three-line fixes each ate the remaining beta time.

Calif's researchers chained that use-after-free with a separate out-of-bounds write and got a root shell on OpenBSD with KARL, SMAP and SMEP enabled and no information leak. The counter, shm_nattch, was a signed short inherited from roughly 37 years ago.

Apple's MLX team tested tensor parallelism over RDMA on Thunderbolt 5: four machines decode at 36.73 tokens/s at 8,192 tokens of context, against 15.74 with two-machine pipelining. A single M5 Ultra is about 1.6x faster at decoding than the M3 Ultra.

On a PS5 Slim, the README reports 207 tokens/s for a 0.8B Qwen model, 55 tokens/s for a 9B, and about 20 tokens/s for a 27B model at 64k context. The console gives the model 11.4 GB of shared memory.

A linear layer holds about as many memories as its key dimension. Fitting them jointly doubles that, ReLU MLPs reach about 2d, and softmax attention with sharpness sqrt(d) and d=64 stores around 1.2 million.

The Xena Project post names a 13-million-line AI formalization of Fermat's Last Theorem and a sphere-packing attempt as adding little lasting value, while Mathlib's 950 contributors and 65 reviewers keep the quality bar.