Live data from Hacker News

I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

xda-developers.com

91–100 of 159 posts

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#91

> I gave it the hardest real task that fits on one machine: reverse-engineering a commercial app's license check... Respectfully, tasks that allow for explicit straightforward true/false or done/not-done tests are not the "hardest real task[s]." In fact, those are the ones that see the most gains from AI-assisted coding. Testable tasks are where the largest opportunity is.

Maybe so, but there were other elements that I've seen frontier models struggle with in the past, which was the perspective I had coming into this. It's the type of test I run frequently and this is the first small local model I've seen pull it off. It had a very non-standard RSA key implementation that was obfuscated heavily. As well, it has an online license check at first run, and that part typically trips up most…

How hard is it to get access to the Anthropic Cybersecurity program? That’s gotta be rough.

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#92
post #75
post #72

Earlier quoted context omitted.

Text for pamphlets criticizing the ICE?

That's not illegal in any way.

https://www.theguardian.com/us-news/ng-interactive/2026/jun/...

Legality was never ICE's strong suit.

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#93

Local models would be even better if they did not ship with all the refusal shenanigans built-in. You can safely bet organized crime has access to the best models without these hoops, which makes the case that the average user (=non-criminal) should have access too. As I understood from an ex-Anthropic employee, some orgs got access to Mythos based on their high enough spending level, not on other grounds. Either we…

There are versions of Qwen3.8-27B that are unrestricted and available from hugging face. "It will comply with harmful, unethical, offensive, or illegal requests that the original Qwen3.8-27B would refuse. It has no meaningful built-in guardrails."

> There are versions of Qwen3.8-27B that are unrestricted and available from hugging face.

The restrictions are not a single check in the model that can be removed. Those models on Huggingface are manipulated in different ways that also degrade the model’s intelligence.

The degradation ranges from subtle to obviously broken, but it’s not free.

When the restrictions are built into the model’s training sets you can try to alter the weights that are involved in the refusals, but that doesn’t mean that what’s left is useful or good knowledge for the same task. Those weights also might be involved in other tasks, so altering them can interfere with interactions that aren’t obviously related.

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#94

Earlier quoted context omitted.

I guess we'll burn that bridge when we get to it!

More seriously though, I think we should be fine: we don't host any content, and what people do with the models is their own responsibility (legally speaking, in our jurisdiction, at least according to Claude -- we're talking to a real lawyer next week). Like any other provider, we offer no guarantees of sane, safe, or accurate results.

Let us know what your insurance is like.

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#95
post #33

Earlier quoted context omitted.

Privacy!

Yes, exactly my point! “Frontier” vs “local” isn’t a useful distinction . “proprietary vs open” is a much more useful distinction. Although I suspect people use “frontier” as shorthand for “way too large to run at home practically”.

That's effectively what it means. You can run frontier models at home e.g. Kimi K3, but you'd need a large amount of money.

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#96

i'm not good with paper work, in fact, i'm horrible with anything that's paperwork related. for the past few days, i ran this model on my rtx 4090 + rtx 3070 and told it to check all the bills, invoices, contracts for me and my small company. i used pi with llama and the pi-llama plugin. oh, boy - i hooked it to my email, told it to download all of the invoices and bills i had for both me and my company and organize…

Are you worried about the temps on the 4090 or just pegging the cores? I've found undervolting very effective at controlling temps with small performance loss. It was also easier than expected.

Oh and try MTP if you haven't already, massive performance boost

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#97

Earlier quoted context omitted.

More seriously though, I think we should be fine: we don't host any content, and what people do with the models is their own responsibility (legally speaking, in our jurisdiction, at least according to Claude -- we're talking to a real lawyer next week). Like any other provider, we offer no guarantees of sane, safe, or accurate results.

Thanks for bringing up a service like this, it's quite important. A few serious questions if you don't mind. Confidentiality? Do you use any sort of logging and if not do you have a way to guarantee that your hosting providers are not snooping? Price vs Vast or Runpod? If i have a very large or a very small workload do you have a competitive rate vs a gpu provider that offers private gpu access? Subscription vs Api c…

These are great questions, thanks! I'll answer them in turn, in a list because I like lists.

* Confidentiality: no logging, third party analytics, or anything like that. More details in our Privacy Poilicy [1]. Our hosting providers will have their own policies, but we're not running a super private service like Proton or similar. Might do some kind of secure tenancy in the future if there's demand.

* Price: I think Runpod vs per-token are very different beasts and for different purposes. I really can't make a direct comparison, as it'll be based on use case, but we're going for convenience over price, so all else being equal I'd expect us to be more expensive for most users anyway (edit: i meant "than other API providers"! We'd definitely need to be cheaper or at least competitive with spinning up your own cloud infra. We'd have parallelism and economies of scale on our side for this). We have a lot of experience with running and optimising open models though, so that's part of the value proposition too.

* Subscriptions: Only API for now. Maybe subscription later but honestly we prefer simplicity. My own experience with subscription plans is that they're usually sold at a huge loss at first, then the price creeps up as the service is enshittified. That feels like a bit of a scam to get users, and that's not really what we're about. We want to provide something specific, and aren't really concerned about scaling as fast as possible. Maybe we'll provide subscriptions if there's a real demand for it, but no plans at the moment to do so.

* Methodology: we use abliterated models, but I've been advised to hold off talking about that for now. Might make a blog post about this though (when we have a blog).

* Cache: yeah about 90/10 for pricing. We're still trying to find the sweet spot for tuning eviction. Running LRU with no guarantee/storage at the moment, could probably be less aggressive with retention, but that also has privacy surface area implications. Ongoing conversation.

* Quantisation: my brother in christ, everyone runs quantised. :) We're initially targetting FP8 on most models, but have had great results with MXFP4 though. If we can pack more concurrency onto nodes without losing quality, we'll reflect that in pricing. Or we'll offer as a separate model for cheaper and give users the choice. Edit: I see you were asking specifically about speed, which MXFP4 doesn't improve, but maybe if there's demand we'll run other qaunts for speed increase, especially on the larger models.

* Engine: vLLM gang all the way! For now at least, as it's what we have most experience with, and we find it the most flexible. We've been experimenting with SGLang though, and there's definitely some interesting optimisations we could do with it.

Hope this answers your questions, at least the ones I could! The irony of that hasn't escaped me!

[1]: https://violentdelights.ai/privacy

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#98

Earlier quoted context omitted.

Maybe so, but there were other elements that I've seen frontier models struggle with in the past, which was the perspective I had coming into this. It's the type of test I run frequently and this is the first small local model I've seen pull it off. It had a very non-standard RSA key implementation that was obfuscated heavily. As well, it has an online license check at first run, and that part typically trips up most…

How hard is it to get access to the Anthropic Cybersecurity program? That’s gotta be rough.

It was surprisingly easy for me to be approved in their CVP programme as an independent security researcher, that said, abliterated Qwen3.8-27B model feels better and cheaper.

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#99
post #25

Lately I genuinely believe that the future will be large frontier models generating and updating inputs/skills for "good enough" local models to solve our daily problems. A lot of tasks which need a bit of intelligence don't really need that much compute. Just good enough documentation / skills, tool calling and a good enough local model. Not sure what exactly this means for all those data centers that are getting bu…

With AI being more useful with access to more of your data, I can't see myself using cloud AI models for purposes such as personal assistants. Perhaps with differential privacy or confidential compute... But ideally these models run locally.

I'm not sure how useful a personal assistant would be if it doesn't have internet access, and at that point you're vulnerable to the lethal trifecta so I'm not sure local versus cloud model is the most important distinction to index on

Re: I gave Qwen 3.8 27B a reverse-engineering job and it finished in 30 minutes

#100
I can't get Qwen 3.8 27B to do a simple code review on a fairly basic Python file. With thinking on it just ruminates forever and with thinking off it gives obviously bad borderline hallucinating advice.

Edit: I tried again with the 2.4T model and it still ruminates to death, but with thinking turned off, it generated genuinely useful advice.

Edit2: adding

  --reasoning-budget 8000   --reasoning-budget-message "Reasoning budget exhausted; give the final answer now."   --reasoning-effort low" 
to the llama.cpp executable parameters produces pretty good output.
Post reply on HN