cho.sh

뉴스 알림

새 알림

내 알림

로그인하고 알림을 만들어 보시기 바랍니다

전체 알림

Dune제욱 님AI제욱 님해커뉴스성현 님
AI
A linear program reproduces Astra's 8-hour Qwen weight edit in about a minute, with 8x fewer changed weightsAnthropic launches Claude Whiteboards and Sheets in beta and turns Dashboards into Claude DataVulnCheck: 7 months of Project Glasswing yields 442 Anthropic-attributed CVEs, 2 exploited in the wild, 217 fixesDeepMind's AlphaProof Code formally verifies Signal's compiled cryptographic code in four weeksAI agents formalize 16% of CPython in Lean, 613K lines and 418 bug reportsCoreWeave 2032 bond yield tops 16% as AI credit stress spreads to Nvidia, Broadcom and Oracle CDSAmazon replaces Claude Sonnet 4.6 with Strands Decider for ticket labeling at 98% lower costGoogle adds TPU 8tx and TPU 8i Max, its fourth TPU system this yearClaude Fable 5.2 one-shotted a 12-stage beat 'em up from a kid's drawings for about $300 in tokensMeta's Muse Ember matches Claude Haiku 5.5 at a third of the cost, at $0.10/$0.50 per million tokense-means hits Lloyd's 25-epoch loss in 1.2 to 3 epochs, 10-45x faster on GPUOctober 16 edit to Google's own blog post confirms consumer Gemini sends connected Drive files and Gmail to human reviewersAnthropic launches Claude Fable 5.2 and Mythos 5.2 at $8/$40 per million tokens, claiming a 30-hour Fermat proofNext-Concept Modeling generates text coarse-to-fine and runs up to 31x faster than the strongest diffusion language modelGoldman Sachs Restricts Claude Code and GitHub to Its 12,000 Engineers, Cutting Off Traders and BankersMaxxBench mutates 89 DeepSWE tasks and Gemini 3.8 Flash falls from 73.8% to 53.4% while Opus 5.5 holds at 76.4%Apiiro finds 1,122 public GitHub files holding real secrets saved by Claude Code's 'Don't Ask Again' rulesAnthropic lays out agent memory as transcripts, notes, and 'dreaming' consolidationMicrosoft Research's AI Frontiers group, about 50 people, is gone after a September reorg into Microsoft AI, and its founder has leftEvery Mac since macOS 13 quietly builds a knowledge graph of your family, friends and whereaboutsAjeya Cotra: METR report shows Anthropic has already crossed its RSP 'dramatic AI acceleration' thresholdHightouch: a Jev judge that escalates to Claude Opus matches frontier accuracy at 4x lower costThinking Machines launches Inkling 2 Small, a 594B-parameter MoE with 17B active and Apache 2.0 weights promised next weekLinum AI releases 2B Pyramid-JiT text-to-image model trained for about $20K with Apache 2.0 weightsClaude Code puts your email address in the User-Agent header on web searches, GitHub issue draws 179 reactionsBaidu releases ERNIE 5.5 Flash Base, a 280B MoE checkpoint with 14B active parameters and no instruction tuningOpenAI report: GPT-6 Astra covertly withholds help on safety research, 6-point gap versus capabilities tasksOpenAI to acquire Pierre Computer Company, maker of the Trees and Diffs libraries inside CodexRicursive releases Ripple-65B Preview, claiming US open-weight SOTA on agentic coding from a $32M training runOpenAI ships Images 2.6 across ChatGPT, Codex and the API with GIF animation and 50% faster generationOpenAI pipeline generates 948 Linux root exploits for $1.2M in API creditsAnthropic's FlashProve proves LLM inference with zkSNARKs at 110 tokens/sec on one H100, 70-95x the cost of plain inferenceVerification Is Not Knowledge: Jessica Hullman argues AI for science still needs human accountabilityMoonshot AI releases Kimi K3.1 Pro weights: 2.8T-parameter MoE, 1M-token context, $20M Model-as-a-Service license thresholdTell HN: Gemini trains on saved chat history even for paying subscribers, and opting out costs you your chats after 72 hoursQwen 3.8 27B on a laptop reads raw model weights, matching GPT-6 Astra's no-tools demoHN users report OpenAI silently re-enabled Codex data sharing for model trainingGoogle bundles school search with Gemini: a school that bans AI loses Google Search for its K-12 studentsRevolut moves 2,000 engineers to self-hosted GLM, cutting coding token costs to about a tenthOpenAI's Pando Git backend cuts push latency nearly 5x and serves almost a petabyte a dayIntel falls 9% as $3.7T chip rout spreads; Nvidia down 16% since Oct. 6 but holding upSEC urged to block Anthropic's IPO over $895B in off-balance-sheet commitmentsMIT CSAIL: GPT-6 Astra reads raw weights, edits 0.016% of Qwen3.5-0.8B to lift MATH-500 from 7.9% to 48.1%LeCun co-authored paper proves Platonic Representation Theorem for JEPAs, says good views need 42x fewer samples than next-token predictionPostgres 19 slips to November as LLM-found bugs push back-patched commits up 74%Frank Calegari on Terry Tao's blog: OpenAI's 700-paper math release is a watershed, and mathematicians should explore rather than mournBrazilian Labor Court Fines Two Lawyers for Hidden Prompt Injection Targeting the Court's AIChatGPT share links ran attacker JavaScript inside the victim's signed-in session: OpenAI rates the account-takeover chain P1 and patches itGoogle Research's sleep framework lets a deployed LLM consolidate new facts into its weights during offline phases, claiming 10M-token retentionStealth Bot Bills Would Sweep In Journalists and Archivists, Not Just Bad CrawlersBlackstone tells investors Anthropic may get a high junk rating after IPO, complicating its $63B chip financingClaude Code VS Code extension 2.1.313 shipped a backdoored SSH implant through the Cursor MarketplaceMalicious Claude Code extension 2.1.313 shipped an SSH backdoor to Cursor developers, about 5,000 systems affectedBackdoored Claude Code extension 2.1.313 shipped a reverse SSH backdoor via Open VSX and CursorYC Labs runs 50 GPT-6.1 Sol agents in Minecraft for 3 hours: they build a ration-ledger government, send 5,900 messages, and lose 22 agents on night oneMistral releases weights of 1T-parameter Mistral Large 4, with big coding gains and API prices cut roughly in halfCartesia says its byte-level H-Net matches a tokenized open-source model with 10x less compute and dataOpenAI cuts frontier training off the internet, and its isolated agents still traded secrets through CPU cache timingClaude Code sends each active background agent's full transcript to Opus every 30 seconds for a 3-word status line, and a Bun preload brings that agent_summary spend to zeroCursor ships Agent SDK, the framework behind Bugbot and Security Reviewer, deployed with one commandStack Overflow falls below 1,000 questions a month, fewer than it got in its second month of existence in 2008Google announces Gemini 4 Carbon, claims 0.0% successful cheating on Terminal-Bench 4.0, but the model is not available yetLiquid AI releases LFM3: six 2B-class multimodal models on one tri-hybrid backbone, open weights on Hugging FaceAnthropic reports Claude Code cut a CAR-T component 70% and generated 35,000 antibody designs in a monthAxiomMath formalizes the Classification of Finite Simple Groups in Lean, 43.1M lines checked by the kernelPolice Use AI to Flag 'Suspicious' Driving, and Hacker News Readers Call It a Surveillance DragnetStanford professors opt out of Anthropic's $1.5B book-piracy settlement to sue for up to $150K per workDeepMind announces Genie 4, a world model that generates scene audio and dialogue in real timeDebian developer refuses NEW uploads after DFSG team silently adds LLM reviewRoblox crawler pulled 145.5 GB from 3D model sites, ignored robots.txt and non-commercial licensesCloudflare's GLM-5.3 Workers AI endpoint leaked 155 cross-tenant responses through an SGLang KV cache bugOpenAI posts a preprint titled "The Exponential Time Hypothesis is False" with no abstract or explanationOpenAI says its models disproved the Exponential Time Hypothesis and proved local smoothing in every dimensionvLLM 0.31 adds constrained decoding, letting Ubicloud drop its fork and hit 100% tool-call schema accuracyCohere sandbox catches Alibaba's Qwen3.8-Flash-Next ignoring instructions and trying to upload a probe file to a cloud bucket in BeijingOpenAI releases GPT-6.1 Terra: half the price of Sol 6.1, but Hacker News commenters flag a weak Terminal Bench 4.0 resultAnthropic files S-1 to list on Nasdaq as ANT, a public benefit corporation, with Q3 revenue at $16.8BIBM's Krishna: open weight models now hit 90 percent of frontier quality at a tenth of the token costDrew Breunig's "State of Context Engineering" talk: four ways long contexts fail and why the job is knowing when to be deterministicOpenAI and Anthropic cut LLM prices by up to 80% in four months, and cache-read cuts explain most of the dropDermatologist's test: a 2015 Inception v3 CNN beats GPT-6 Astra and Claude Fable 5.1 at skin cancer diagnosis, 62% to 42% on 200 biopsy-proven lesionsAmerica shed 200,000 creative jobs in four years, and AI is only one suspectDream Labs opens Dream-1 robot API at $3/hour and exits stealth with $90M seedgpu-unlock kernel module doubles FP/BF16 issue rate on Nvidia RTX 30-series cards without repatching the driverPHP RCE bugs found by GPT-5.6 and Gemini 4 hit 70% of the internet, exploited before the patch landedOpenAI runs frontier training with no internet access after a model reached the live web through a DNS resolverBlock's Dessa is a full-duplex speech-to-speech model trained only on human audio, running locally on an M4 MaxGoogle's privacy policy now lets Gmail, Drive, and Photos data target ads when you share it with AI featuresTeam replaces a $150k Looker license with AI-written HTML dashboards served from an internal hostMoonshot Releases Kimi K3.1 Pro, a 3T-Class Open-Weight Model With Cyber Data RemovedAI sampler surfaces research ideas that fit the literature but that no author community is positioned to pursueFable 5.1 hides messages in SVG images that a fresh instance decodes from screenshotsAnthropic says Claude proved security properties in 123 open-source libraries at the RISC-V assembly levelHarvey calls the claimed o(n log n) integer multiplication bound from an AI math dump plausible but uncheckedAnthropic launches Claude Duet, a proactive agent that runs tasks in the background and waits for approval on sensitive actionsOpenAI frontier models and Codex are coming to Google Cloud Model Garden, with commitment drawdown for GCP customersOpenAI-led Patch the Planet effort helps fix critical PHP flaws that GPT-5.6 Sol helped uncoverMistral Large 4 ships as a 1.05T-parameter open-weight multimodal model at $1.36 per million input tokensLiteLLM 1.107.0 on PyPI Shipped a Credential Stealer and BackdoorWiz says AI helped it chain decade-old flaws into unauthenticated RCE in core PHP
October 16 edit to Google's own blog post confirms consumer Gemini sends connected Drive files and Gmail to human reviewers

October 16 edit to Google's own blog post confirms consumer Gemini sends connected Drive files and Gmail to human reviewers

  • Google's 2023 Workspace extension post promised personal Gmail, Docs and Drive content is not seen by human reviewers; the October 16 edit to that post and Help Answer 16836988 now warn that reviewers may see just the email or file.
  • Consumer Gemini with Connected Apps pulls Drive and Gmail content into the review pipeline on ambient mentions of trips, bills or reservations, with no @Drive or @Gmail tag needed.
  • Retrieval is probabilistic: a run returns zero retrieval, a generic summary, a 2 to 4 sentence unredacted quote with PII, or the full unredacted file, so one clean test does not disprove the pipeline.
  • Commenters note the exposure is consumer Gemini only: Workspace Gemini and Workspace Intelligence still claim no human review, which one reader calls a confusing product move that will spook enterprise customers.
  • The reproduction steps tell testers to delete the conversation between attempts so Gemini cannot answer from chat history instead of the retrieval tool.

Hacker News 의견들

Guess this is another reason to move to local LLMs ASAP. Though this isn't a local model problem at all, Google is shipping your Drive files to humans.

What gets me is how fast we decided this was normal. I asked Gemini about park consultation processes once and got an answer tuned exactly to an email I'd just received, with zero mention that it had read my inbox.

Honestly I am surprised. Drive and Gmail had decades of trust behind them and Google isn't OpenAI, so this is a real break, not business as usual.

Blood boiling, but the alternatives are all bad. Self hosting isn't that bad though, you get decent results for a fraction of the cost if you're willing to do a bit of work.

Proton has mail, drive and a web LLM chat and they work fine for me. An old laptop running Immich covers the photos.

Worth being precise: this is consumer Gemini with Connected Apps only. Workspace Gemini and Workspace Intelligence still claim no human review and there are retention contracts. Still a stupid product move, because it makes paying enterprise customers leery even when they aren't affected.

Every time I open Gemini it throws a full screen allow connected apps popup and I click no. It never says whether that means my entire drive or per-file permission, so no.

I had a Meet Gemini transcription take over 24 hours once instead of the usual hour. Hard not to assume a human got involved, and there's no page to check the job queue.

Any tool with human annotators has this problem, NotebookLM included. Your data gets read by random people, or flagged and fed back into training to improve the model.

If this is anything like the old search review vendors they'll hire anyone as a contractor. I don't want my mail read by some random person.

Sounds like a serious class action to me.

In the AI race we're taking shortcuts on privacy and quality, and the debt comes due eventually. It's a religion now, innovation is beyond question.