If you’re a user—owner?—of this cryptocurrency, this is important: On May 29, the security researcher Taylor Hornby found a critical vulnerability in Zcash Orchard privacy pool using Claude Opus 4.8. The Zcash team hired Hornby specifically to look for this kind of issue. He found one fast enough to be embarrassing. The Orchard pool is the newest and most advanced shielded transaction system in the cryptocurrency Zcash. Introduced in 2022, it allows users to send and receive ZEC while keeping transaction details private. It uses zero-knowledge proofs to validate transactions without revealing amounts or participants. The bug: a specific check that was supposed to validate transaction inputs wasn’t actually enforcing the rules it appeared to enforce. An attacker could have exploited the flaw to feed false inputs into that check and generate ZEC from nothing, with the zero-knowledge proof system blessing the fraudulent transaction as valid...

I submit an extension (an adblocker) to Google Chrome's web store. Google keeps rejecting it for dubious reasons. The first rejection was claim it was "spam". When I appealed, the review came back that it contained "additional functionality" because it uses "modifies network traffic". Well of course it does! When I asked the reviewer how I could achieve the stated functionality of blocking ads without the use of "declarativeNetRequest" I simply received the same canned response. I submit a total

submitted by /u/toronto_star [link] [留言]

Amazon Web Services has recently announced the general availability of the next generation of Amazon OpenSearch Serverless, with a redesigned architecture that enables 20 times faster resource provisioning than the previous serverless architecture, true scale-to-zero capability, and up to 60% lower cost than a provisioned cluster for peak loads. By Gianmarco Nalin

The cars are too big to race well, but the competition for pole position is thrilling.

New to QR Code generation. How can I create a code that doesn't expire and can have the destination URL updated in the future? Does this require a fee-based service? If so any recommendations? submitted by /u/tk2old [link] [留言]

What works now: user signups, org creations, private/public repos, and importing GitHub repositories (both as read-only mirrors and full migrations). So basically, you can create, push and pull to a repo, but we don't have many features quite yet (issues, PRs, CI). What is a bit unique is: 1) we built it in Rust and 2) the website is a little odd. Its design is inspired by CLIs (e.g., fzf, broot, vim) instead of web apps, and as such, lacks some affordances that you might typically expect in fav

This article covers a technique my team and I use to work on versioned datasets across organizations (team A works on features, team B) works on other features. It's been invaluable for us since we don't have a shared infrastructure, so we can always verify the latest version by storing the latest hash on-chain. It could be useful in other ways where integrity or immutability is paramount, like versions of models, model weights, etc. No need to share access to a central key management server and everyone can validate it simply. submitted by /u/Nice-Dragonfly-4823 [link] [留言]

TL;DR: Future archaeologists will discover this post and conclude I traded a referral link for free AI credits. They will be correct. 500 free credits: https://manus.im/invitation/L722LISUH3EMDS?utm\_source=invitation&utm\_medium=social&utm\_campaign=system\_share Anyway... You know how in every sci-fi movie they promise us AI assistants? Yeah. Somehow we ended up with AI that needs constant supervision. Me: "Research this topic." AI: "Certainly. Before I begin, please provide your goals, audience, format, timeline, preferred writing style, risk tolerance, blood type, and your mother's maiden name." Thirty minutes later I'm managing the AI instead of the AI helping me. I've been messing around with Manus and the thing I like is that it behaves more like an actual assistant. I tell it what I need, and it goes off and fills in a lot of the blanks itself. I don't use it as my main model for everything. I use it like a second opinion. Research. Project planning. Finding blind spots. Comparing options. Figuring out what I'm forgetting. Basically all the stuff that happens before the actual work starts. For pure coding, there are better tools. For "here's the thing I'm trying to do, help me think through it from start to finish," it's been surprisingly useful. Full disclosure: if you use the link, I get some credits too. You get free credits. I get free credits. The robots get stronger. Honestly that's the healthiest relationship I've had with technology in years. submitted by /u/Mstep85 [link] [留言]

I've been admitted into both UPS and TUD for Applied Mathematics, and I wanted to hear some advice on which one would be better. For context, I'd like to work in some form of AI research, most likely within industry. At the moment, I'm most interested in privacy preserving machine learning or mechanistic interpretability. Which one do you think would leave me with better career opportunities after completion, alongside the best chances of getting admitted into competitive PhD positions? Thanks! submitted by /u/Far_Investigator6900 [link] [留言]

It started after reading Stephen King's "On Writing" where he likened the art of writing as the unearthing of an archeological site after you stumbled upon a unique bone of a story. His advice was to choose a domain you are deeply intimate with. For me, I've been a struggling startup founder for 15 years—enough material to inspire a novel. A 1,000-word writing exercise turned into a complete 125k-word manuscript over the course of a year. In year 1, I learned the sheer joy of unencumbered creati

maybe i am overthinking this but the more i look at AI agents using the web, the more the current web starts to feel kind of awkward. like websites are still built assuming a human is sitting there, reading the page, ignoring the cookie popup, guessing which button matters, understanding which part is marketing and which part is actually useful. but an agent does not really do that naturally. it has to parse the page, figure out what is clickable, understand the form state, avoid random modals, compare options, maybe call tools, maybe retry when something fails, then somehow verify it actually did the right thing. that sounds less like “browsing” and more like forcing software to cosplay as a human user. which is probably fine for demos but idk how well that scales. this is why all these things that seem separate to me are starting to feel connected. MCP, A2A, WebMCP, AI search, browser agents, bot traffic, agent security, all of it. not saying they are the same thing obviously. but they all point to the same pressure: software is becoming a real user of the web, not just humans. and if that keeps happening then maybe websites need something beyond normal UI. not just better HTML or better accessibility, but some kind of agent-readable/action-readable layer. basically not “AI kills websites” or anything dramatic like that. more like websites keep existing for humans, but also need to expose themselves properly to machines. kind of like SEO but instead of optimizing for search crawlers reading your content, you optimize for agents actually doing stuff. not sure if this is a real architecture shift or just people putting new names on APIs again. wrote a longer version in the attached medium post if anyone wants to read it. submitted by /u/Old_Cap4710 [link] [留言]

My game 'Simulation Simulator' is a campfire conversation game about DMT, simulation theory, and a friend with a computer monitor for a head. The game is bundled with a local LLM and every conversation is unique. 5 endings you can reach totally based on how you interact naturally with the AI. One is a romance ending! Everything in the clip is totally organic and unscripted. Trying to use AI for good. Honestly haven't seen the use of LLM tech inside games to this extent yet. I'm sure people much smarter than me must be trying though. For NPCs & world building, this seems like a logical next step. I even wanted to do text to speech audio and automatic translation. The only thing really preventing it right now is processing time on local machines. Those extra layers would add like 10-20 seconds of calls per exchange so it just breaks the game. If processing gets faster/better, I can imagine whole towns of NPCs with memories, that have no scripted dialogue at all and change over time. In my game here, you argue with an LLM and can attempt to prove that reality itself is a simulation. It's really a philosophical experiment more than a game. It can get trippy trying to prove you do or don't exist. Anyway, demo for Simulation Simulator is out on steam if you want to try for yourself. Let's talk using AI for good in games! submitted by /u/MorphLand [link] [留言]