Hacker Newsnew | past | comments | ask | show | jobs | submit | reassess_blind's commentslogin

How much profit do they deserve exactly? How exactly is it calculated, and who decides how it is calculated? These questions aren't in bad faith, I'm genuinely curious how people with your world view would answer them.

I don't have an answer, but I don't think the framing should be about what they deserve or not. It should be around how much money an individual can have/control before it becomes detrimental to society.

Not as smart as everyone thinks it is, maybe, but a model like Fable 5 without safeguards against offensive cyber attacks would be a nightmare. There are millions of improperly secured web applications that, in the wrong hands, would be easily exploited by these models.

There have been millions of trivially exploitable vulnerabilities out there for decades — many of which could be easily discovered by using simple scanning tools or manual probing. This is hardly a new situation and LLMs really aren't that impressive at pentesting — even with these simple exploits. Maybe they are if you're not a pentester, but then ZAP, Burp, Nessus, SQLMap, etc. are likely also impressive if you put a little effort into learning how to use them, but many AI-advocates aren't interested in learning skills themselves.

It's the same situation as with vibe coding. Everyone and their grandma can have an LLM spit out a web application without any programming experience, but if you're a programmer, you'll likely quickly see some issues with maintainability and further development of the code base.


>LLMs really aren't that impressive at pentesting

The point is that Mythos apparently is quite capable and has developed novel exploits on its own.


That's the claim, yes. Has any proof been made available yet? (Genuinely asking here because I haven't been paying that close attention.)

In a substantially different way then how it is now? You can put something listening on 22, 80 and 443 and log how much stuff tries to get in.

Yes, it is substantially different. A targeted, relentless attack by a state of the art cybersecurity model is far more likely to find obscure vulnerabilities than a traditional automated attack/fuzzer. These models are so much better at finding security holes than anything we've seen before.

The death of development, ladies and gentlemen.

don't be so gloom. code that's more difficult than a zero-shot is worthy of sharing.

That’s the unlock.

It's about average.

Was thinking of making something like this with an eink board and an esp32.


"The phrase “Always free” disappeared from the personal password manager page in mid-April."

It's still on the pricing page, albeit not as prominently. "Just getting started? Get basic password management today. Always free."


Took a while but she loaded. I've seen enough, we're pushing this to production.


Then they quit or die.


Yep this is like comparing master craftsmanship with a production line. You're gonna get good attention to detail and a masterpiece from one, and a limited thing that will break after few years from the other. But for majority of use cases the second one is enough. And pointing out the master craftsmanship is "better" is besides the point.

And with one you need to train a guy for 25 years and with the other you need plan mode for a few minutes and then it runs 24/7.


Our society needs more experts, not less.


Do we? We have many buildings built and very little master masons or whatever nowadays. The amount of craftsmen needed to build a 10 story building is very limited. That's what we should aim for software, much less experts needed for the same outcome so more people can benefit from software.


I want the people building the buildings I live, work and shop in to know what they’re doing so those buildings don’t fall down or let in the wind and rain or require too much maintenance.

And the equivalent for software. It’s usable, intuitive, responsive, stats up and running, and doesn’t leak my private data.


Ok but you do want the people building your home to be experts at building homes, yes?


No house I ever lived in was ever made by experts. The apartment building I grew up in was all built by minimum wage guys that may or not even speak the language of the building overseer and had zero specific training or certifications. Some architect somewhere did the plans for a standard building, which the developer purchased and just used.

Then the only "experts" (not even close, just a guy with a form and some technical training) are the building inspectors who come at the end to verify if some stuff is done up to code.

Other than the original architect who draw the plans that got used for many buildings and the electrical engineer that cleared the electrical, no experts were involved. This is basically how the whole city and most of the country was built.

There's no expert mason or painter or whatever involved. Just a dude that can hold a paint roller. That's the same as going from a craftsman programmer to some dude with claude. Individual quality goes down, but more importantly price goes down way more and so many more people get access to much better quality than having nothing.


there is a large incentive for computer programmers to build themselves up in importance. higher wages, better love lives, more status. but most software is pretty mundane and straight forward, or at least should be. fancy architectures rarely pay off and the best solutions are sometimes the most obvious. although i could be suffering from that phenomenon that people in maths have where they struggle to understand then once they grasp it they feel dumb like "ofc i should have known that!"


It’s the old developers who have been doing it the longest who pick the simple and obvious solution.


What is your argument? Should we stop training people on how to do something because we're mortals?


Is there a native way to work remotely with Claude/Codex on a local folder or git repo on your main machine without having to connect it to GitHub? For creating apps for personal use I’d rather just keep the files local.

Edit: Running into issues setting it up on Windows. There's no "/remote-control" command in the CLI, so I installed the Windows Codex app. Then I updated the iOS app which now has the "Codex" feature in the sidebar, which should allow remote access to the Windows machine's instance - except it doesn't connect. The iOS app shows my desktop's hostname, so it knows there's an instance there, but refuses to connect. Issues like this would persuade a lot of folks to switch back to Claude.


This is what /remote-control does in Claude Code, once it's running on your main machine. You can open it up in the phone app.


It flakes out in less than 24 hrs. I tried leaving a session open on remote control mode in a VM but it inevitably stopped with some token auth error.


That’s this announcement.


I ask because I tried the other week to use /remote-control in Claude, and it prompted to connect a Github repo with no local alternative. Things may have changed since then.

My experience today with the new Codex remote control has been that it doesn't connect at all.


I tried apps that do this workflow (happy coder being one), but the workflow itself is rather clunky. You have to first start the session inside the remote machine. I now only do ssh, I can start or resume on whatever device suits at the time. The only downside is latency and connection drops, mosh solves it.


I think the `/remote-control` feature does this, if I understand you correctly.


It's supposed to. I've always found it buggy and unreliable but maybe that's just me. (This command exists in Claude btw not sure about Codex)


Looks like codex has it too since last week, https://github.com/openai/codex/releases/tag/rust-v0.130.0


You can also connect remotely. Tailscale to connect to your network/machine. Then use SSH to login. Then use tmux to persist the session even if you log out.


Does it work on windows? And how do you then remote in?


You can run Codex and Claude on mobile from https://github.com/happier-dev/happier


I wish codex supported this, I use it all the time for claude.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: