Hacker Newsnew | past | comments | ask | show | jobs | submit | why_only_15's commentslogin

To what degree can you say something like "if the kernel doesn't have metaprogramming [or some other set of features] it's fine". When were the last bugs with a reduced feature set?


Read the article. The elaborator (where metaprogramming is evaluated) is not part of the trusted computing base. The security model is that bad proof terms get rejected, not that they're never generated.


The whole point is that these are security bugs that didn't necessarily bother people so far but could be exploited


I really don't like this. Don't post your AI-generated articles here. https://www.pangram.com/history/fce67fb4-4f6a-4eb4-a323-5048...


I like ast-grep and I think the changes are interesting, but it isn't fun reading an ai-generated article.

It seems like a lot of the speedup comes from using an arena, using realloc with offsets rather than raw pointers and some change to the graph that enabled this (though I don't want to re-read it to confirm).


The correct comparison is not sonnet, but qwen3.5-27b on a cloud. Alibaba's pricing [0] is $0.20/m input $1.56/m output, so $0.72 for the prompt processing or $0.22 for the generation. Yours is still cheaper but the margins are less.

My guess is that this math gets less good with MoE (because you will be limited by VRAM, but clouds won't).

[0]: https://openrouter.ai/qwen/qwen3.5-27b


I run 3.6 but yeah you are right


Why is the post AI-generated? If you're going to make something for us to read you pay us the courtesy of actually writing it first.

https://www.pangram.com/history/61fbc90e-180d-4d91-a85d-16ff...


The post itself is totally AI-generated. It has tons of tells, in addition to Pangram saying so.

https://www.pangram.com/history/61fbc90e-180d-4d91-a85d-16ff...


why do you think so? they provide some evidence of this in the article, but there have been several improvements in e.g. nanogpt-speedrun or openai parameter golf made by AIs


Does China subsidize housing construction? Is your claim something like "China encourages/forces consumers to save at high rates which lowers interest rates and makes there be more construction"?



what's the origin of your $20k/vuln estimate?


It's the same as the origin of "Codex/Opus subscription usage is heavily subsidized" - the sales departments equipped with AI agents with the prompt: "use anonymous accounts on the internet to make it easy for me to sell it at $price".


The formal Ottoman name was Kostantiniyye=Constantinople until the empire's fall in 1922. The official shift happened in 1930, with the Turkish Postal Services Law changing the name to Istanbul.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: