Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GLM-5.3: Frontier coding with emergent cyber capabilities

z.ai

Post reply on HN
Print view View original

481–490 of 626 posts

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#481

Post by KronisLV »

KronisLV wrote: post #87

Their coding plan switched to credits, didn’t it? What are the rate limits like, compared to Anthropic or Kimi K3? I remember trying their Coding Plan out before the change and the 5 hour limits felt too restrictive then even for light/medium work, especially cause of the whole peak and off-peak thing: https://blog.kronis.dev/blog/z-ai-s-glm-5-2-is-a-great-model... Nowadays, I’d probably go with their Max plan if the…

Update: tested it out myself on their Max plan, on some parallel agentic sessions.

Currently 20% of my 5 hour limit and 4% of my weekly limit.

  Total: 58.46M
  GLM-5.3 Cached: 56.91M
  GLM-5.3 Uncached: 1.23M
  GLM-5.3 Output: 315.18K
  Cache hit rate: 97.9%
Extrapolating from that (inaccurate for now but oh well):

            Full 5-hour  Full weekly
  Total     292.3M       1.461B
  Cached    284.6M       1.423B
  Uncached  6.15M        30.75M
  Output    1.576M       7.88M
All of the work was off-peak I think, using OpenCode not ZCode in these examples.

Their own estimates are quite different, probably due to their conservative caching estimates vs what I normally get on longer form work: https://docs.z.ai/devpack/overview#estimated-token-allowance

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#482

Post by jayd16 »

z4y5f3 wrote: post #128

Apparently they are scanning OSS and popular software at scale and disclosing the vulnerabilities they found: https://cvd.z.ai/ Most of these are under embargo, but it seems there are a lot of CVE here from a wide range of popular software, many considered critical or high. I understand the argument of "people are not actively looking", but isn't the cost for such a scan getting lower by the week, and Anthropic's Pro…

In a similar vein, does anyone know how to classify the kinds of problems that are being found?

Is it possible to build heavier traditional linting to catch whatever is being caught in a more deterministic way? It seems to me that would be far more efficient in the long run (even if the efficiency is only for the AI to know that aspect was already checked).

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#483

Post by takerofnaps »

leobuskin wrote: post #305

I bought $18 GLM official subscription yesterday (5.2, but new model version was already leaking on some docs), set it up with Claude Code harness... and I’ve bumped to $80 plan almost immediately. It’s the first model that agreed on a proper security research (red team scenario), executed it seamlessly, including 0-days in WP plugins, RCE, 6.8 kernel exploit adaptation, etc - while playing against another GLM agent…

At my work I have a $500 monthly AI budget. I have been using the $200 Claude subscription and most of my use is with Claude code. I think I'm going to switch to either kimi or glm and use the opencode harness. Both fable 5 and opus 5 have outright refused things like security related bug fixes and making monitoring tools. I am so happy that open models are good now

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#485

Post by dominotw »

infecto wrote: post #357
dominotw wrote: post #339

Earlier quoted context omitted.

what is this comment based on ? vibes?

Vibes like your low quality comment? What’s the counter argument? pi and ohmypi are pretty fantastic. Of course like all developer tools it depends how you do your work but I am not sure what you are trying to achieve in your comment.

how would i comeup with counter argument if i dont know what original argument is. No one is disagreeing with your subjective experience, gp comment said 'better' without qualification.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#486

Post by dominotw »

rpdillon wrote: post #372
dominotw wrote: post #339

Earlier quoted context omitted.

what is this comment based on ? vibes?

Based on the fact that Claude Code is only optimized for Anthropic models, whereas Pi and Omp are optimized for a wide variety of models, including open weights.

they are not really optimized for 'wide variety of models' . what optimization did pi do for glm 5.3?

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#487

Post by jauntywundrkind »

flanked-evergl wrote: post #465
jauntywundrkind wrote: post #448

Earlier quoted context omitted.

In the new v2 beta, yes. Major QoL upgrade, so much less sitting around waiting.

The v2 branch of OpenCode has not been touched for months, if it's beeing developed then I don't know where.

this is very easy to check. i promise i'm not tricking you and just uploaded this. https://github.com/anomalyco/opencode/tree/v2

this is the integration branch for https://opencode.ai/v2 . it has been for months. it's where the Effect-based refactor has been landing.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#489

Post by weego »

rattlesnakedave wrote: post #324
leobuskin wrote: post #305

I bought $18 GLM official subscription yesterday (5.2, but new model version was already leaking on some docs), set it up with Claude Code harness... and I’ve bumped to $80 plan almost immediately. It’s the first model that agreed on a proper security research (red team scenario), executed it seamlessly, including 0-days in WP plugins, RCE, 6.8 kernel exploit adaptation, etc - while playing against another GLM agent…

You should try a better harness. Try pi, or ohmypi if you want a good OOB experience

what is a harness? The comments below are mixing IDE/ADE but other suggestions are purely terminal things and I don't get what their value is over just a terminal. Is a harness like a loop where it's just a vague thing that everyone nods about but everyone is nodding at something different?

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#490

Post by [deleted] »

SyneRyder wrote: post #149
z4y5f3 wrote: post #128

Apparently they are scanning OSS and popular software at scale and disclosing the vulnerabilities they found: https://cvd.z.ai/ Most of these are under embargo, but it seems there are a lot of CVE here from a wide range of popular software, many considered critical or high. I understand the argument of "people are not actively looking", but isn't the cost for such a scan getting lower by the week, and Anthropic's Pro…

> ... Anthropic's Project Glasswing is supposed to find them quite a while ago? That was my thought too. For all of Anthropic's talk about their "adversaries", it seems Z.AI have been quietly offering fixes for single shot Remote Code Execution flaws in US software (Safari / WebKit) that Apple and Glasswing / Mythos missed, and that Apple would not attribute to GLM.

[deleted]
Post reply on HN