Live data from Hacker News

GLM-5.3: Frontier coding with emergent cyber capabilities

z.ai

391–400 of 626 posts

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#391

Earlier quoted context omitted.

I don’t think this works, for a few reasons. First, intelligence gains from scaling the models bigger is sublinear now. So they could eke out a little extra performance, but the increased cost will eventually eclipse the economic value gained from this. Second, humongous models are impractical even for them to deploy widely. They’re best used as teachers for smaller, more efficient models that can crank out the volum…

assuming the technology of model architectures does not gain any further breakthroughs that returns us back to the gains previously seen. I'm of the opinion that we still have some discoveries on the mathematical side of the fence to go that will improve models further.

> I'm of the opinion that we still have some discoveries on the mathematical side of the fence to go that will improve models further.

That's assuming the infrastructure needed to develop models stays available financially and supply wise. A lot of the services used to train and develop models are supplied and funded by people who are looking for multiple returns of investment. If/when OpenAI and Anthropic valuations fall and they inevitably get acquired, will Meta/Alphabet/Microsoft still want to spend lots of money for unclear returns in the short-term? Nvidia and co are on a one way train service to hype town. I don't think they will be happy to get on a coach to hype town Temu version. The shareholders likely won't.

Also, the backlash against LLMs is growing rapidly. AI content, data centres, etc is quickly gaining negative connotations outside of visual and music artists circles. While existing models are going nowhere, developing more advanced models is very quickly getting unpopular. LLMs Data centres increasing people's bills, Anthropic destroying old books, chat bots giving unethical advice to vulnerable people, etc. It won't be long before LLM infrastructure becoming an electoral issue.

Will a small research oriented community be big enough justify maintaining the apparatus needed to produce infra tech at a profitable level post OpenAI?

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#392

Earlier quoted context omitted.

> I understand that such models can be used by malicious actors, but it’s fair to have it publicly available I feel like there should be some mechanism to prove you own the code/app/site/whatever and it will remove the guardrails from the LLMs allowing them to find and fix these vulnerabilities.

Isn’t this essentially what anthropic is doing, albeit in a manual fashion? They work with code owners to run mythos and find issues.

Only if you're some big corporation with deep pockets. They actually accepted me into their cyber program but Fable's still locked down.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#393
post #116

I'm not that up to date with the latest AI developments, but I noticed that this article seems to use "Cyber Capabilities" as a shorthand for the model's ability at cybersecurity tasks? Is that now an established expression, same as "crypto" now refers to cryptocurrencies rather that cryptography? Because "cybernetics" actually means something different (yeah, old man yelling at clouds, I know)...

It is worse than that, if you cyber someone you essentially talk dirty over a chat with them.

And that is definitely not something I'd like to do with a bot.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#394

Earlier quoted context omitted.

> I understand the argument of "people are not actively looking", but isn't the cost for such a scan getting lower by the week, and Anthropic's Project Glasswing is supposed to find them quite a while ago? You have to consider that having an LLM scan for vulnerabilities is hardly infallible. It is a search guided by heuristics and given a large enough codebase, it is unlikely to identify all vulnerabilities. Personal…

> [A]ll of them found some that the others hadn't discovered. Now, correctness issues aren't the same as vulnerabilities, but the same principle about using heuristics to find defects applies. This makes perfect sense, but that conflicts with the impression put forward by Anthropic and OpenAI (in particular) that they alone occupy 'frontier model' spots. Frontier models should large dominate their competitors on a ca…

“Company hypes own product, downplays competitors” is still a thing with AI

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#395

I bought $18 GLM official subscription yesterday (5.2, but new model version was already leaking on some docs), set it up with Claude Code harness... and I’ve bumped to $80 plan almost immediately. It’s the first model that agreed on a proper security research (red team scenario), executed it seamlessly, including 0-days in WP plugins, RCE, 6.8 kernel exploit adaptation, etc - while playing against another GLM agent…

how do you configure claude code to use GLM ?

https://docs.z.ai/devpack/latest-model#switching-models-in-c...

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#396

Earlier quoted context omitted.

thank you all! got something to tinker with this weekend i like to challenge my assumptions and try new tools

Just as a +1 anecdote. I enjoy using pi a lot. I used to h think the harness matters a lot but with the current iteration of models I am starting to sway that while it matters it’s less and less important and that CC is bloated. I did some quick tests when I switched and a task that would take $5 in tokens would be completed in $0.50 in pi. Very anecdotal and I don’t have a test framework setup to make this very offi…

The token cost difference is pretty interesting. I wonder how much of that is the harness itself versus how aggressively each one loops, plans, and calls tools. A proper apples-to-apples test would be really useful here.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#397

I bought $18 GLM official subscription yesterday (5.2, but new model version was already leaking on some docs), set it up with Claude Code harness... and I’ve bumped to $80 plan almost immediately. It’s the first model that agreed on a proper security research (red team scenario), executed it seamlessly, including 0-days in WP plugins, RCE, 6.8 kernel exploit adaptation, etc - while playing against another GLM agent…

how do you configure claude code to use GLM ?

[deleted]

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#398

Earlier quoted context omitted.

I’ve tried a bunch of them, and I seriously do not understand these recommendations. It was a rough road and a steep hill, but right now CC is absolutely the best harness on the market, as for me, whatever top tier model is under the hood (mostly, some of them, like DeepSeek, don’t fit CC at all).

Inversely I don’t understand the praise for CC. These days it feels like bloatware. It absolutely can get the work done but when I measure on token and time use it ends up being a multiple of pi like harnesses. CC works but for me it felt like increasingly they have zero incentive to make it a great experience. You hear folks like Boris talk about spinning up thousands of agents over night and agents chatting back an…

So is the quantitative difference in token use the only difference or do you think there's also a different qualitat? I'm on CC only and immensely happy. Very productive both at work and privately and at work I average around $250 a month which probably means nothing but it's little compared to my salary.

Is that the main concern though, cost?

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#400

Earlier quoted context omitted.

I’m in the Claude code harness for everything boat too. What are the alternatives?

I’ve tried a bunch of them, and I seriously do not understand these recommendations. It was a rough road and a steep hill, but right now CC is absolutely the best harness on the market, as for me, whatever top tier model is under the hood (mostly, some of them, like DeepSeek, don’t fit CC at all).

Funnily enough, I would say almost the opposite. CC’s feature set is basically table stakes for an agent these days (does it have ACP yet? Very close to behind table stakes if not) and it has a lot of bloat powering that.

IMO part of it is that the underlying LLMs have gotten better enough that harnesses feel better even if they haven’t changed. I have a toy harness that barely implements the features you’d expect and it works surprisingly well. Like there’s literally nothing clever, it calls tools and that’s about it, and it still mostly does the right thing.

Post reply on HN