Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GLM-5.3: Frontier coding with emergent cyber capabilities

z.ai

Post reply on HN
Print view View original

311–320 of 626 posts

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#311

Post by tsss »

SyneRyder wrote: post #149
z4y5f3 wrote: post #128

Apparently they are scanning OSS and popular software at scale and disclosing the vulnerabilities they found: https://cvd.z.ai/ Most of these are under embargo, but it seems there are a lot of CVE here from a wide range of popular software, many considered critical or high. I understand the argument of "people are not actively looking", but isn't the cost for such a scan getting lower by the week, and Anthropic's Pro…

> ... Anthropic's Project Glasswing is supposed to find them quite a while ago? That was my thought too. For all of Anthropic's talk about their "adversaries", it seems Z.AI have been quietly offering fixes for single shot Remote Code Execution flaws in US software (Safari / WebKit) that Apple and Glasswing / Mythos missed, and that Apple would not attribute to GLM.

Probably Anthropic found them too and promptly got a call from Isreal to stop looking.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#312

Post by nylonstrung »

criley2 wrote: post #303
andy_ppp wrote: post #232

Earlier quoted context omitted.

Anyone who knows anything realises banning things is a) impossible and b) your enemies will use them anyway, you are just depriving your own side of the advantages.

It's pretty easy for the US to functionally ban chinese models. They only have to target US firms like inference providers or the biggest users, and pretty much the whole domestic market will fall into line. They don't actually care about the final few %. Regardless of whether or not adversaries are using them, the US has by far the most compute available, and we've now hit the line where major providers are no longe…

[dead]

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#313

Post by toasty228 »

andsoitis wrote: post #215
toasty228 wrote: post #156

Earlier quoted context omitted.

Meanwhile the GB300 used by hosted llms: GPU Memory Bandwidth: 7.1 TB/s Interconnect Bandwidth: 900 GB/s bidirectional https://pi3g.com/nvidia-gb300-specifications-including-memor... If you think M7 will hit even 15% of these speeds you're very optimistic.

A hosted instance serves multiple customers at a time. A local model only one.

How many though? At 1m context you quickly fill a full gb300's 280gb of memory

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#314

Post by xmcqdpt2 »

irthomasthomas wrote: post #195
aliljet wrote: post #5

This is absolutely still shy of Sol and Fable, but only just by a hair. Ridiculous results. There's still not a compelling economic reason to drop OpenAI courtesy of the ludicrous reset addiction that's taken place, but it feels like we're on the precipice. How are you all toying with running this kind of thing in a mega quantized way locally? Two weeks out from released weights, but this is still just GLM 5.2 with p…

Have you seen the news about decrypting the hidden COT in U.S. models? [0] The decoded logs revealed instances where Claude memorized answers to test questions beforehand while making its final output look like it had derived the answer step-by-step—hiding the memorization from the user. 0: https://www.alphaxiv.org/abs/2608.09867?hl=en-GB

pdf https://arxiv.org/pdf/2608.09867

for some reason I couldn't find any way to download it from that website.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#315

Post by applicative »

zarzavat wrote: post #182
dhx wrote: post #161

Earlier quoted context omitted.

I take it from [1] (transcript of recent DeepSeek CEO discussion with investors) that DeepSeek would disagree on the immediate catastrophic impact to the likes of OpenAI or Anthropic. The reason is even though technology parity mostly exists, only OpenAI, Anthropic et al have the inference capacity to gain market share and generate revenue. Chinese vendors don't have the chips needed to scale up inference and gain ma…

That makes them at best temporary middlemen. It only justifies their long term valuations if they can leverage that temporary monopoly for technological superiority (they can't) or lasting market share (they can't). Chinese models prove there's no technical advantage, and the software side is heavily commoditized so there's not much advantages to market share either.

The Chinese models are adopting licensing quite rapidly and Xi will soon enough close them for security reasons. The most widely used model, integrated across Bytedance apps and operations, has never been open and is most closely associated with the state.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#316

Post by grey-area »

andsoitis wrote: post #240
grey-area wrote: post #233

Earlier quoted context omitted.

Circular investment deals and investment deals at valuations which have no possible justification.

Let me ask it differently. You state the companies and their investors are colluding. Who are they colluding against ?

The public that buys the stock at ipo at this inflated valuation and unwittingly buys indexes which include it (as with spacex).

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#317

Post by leobuskin »

api wrote: post #310
leobuskin wrote: post #305

I bought $18 GLM official subscription yesterday (5.2, but new model version was already leaking on some docs), set it up with Claude Code harness... and I’ve bumped to $80 plan almost immediately. It’s the first model that agreed on a proper security research (red team scenario), executed it seamlessly, including 0-days in WP plugins, RCE, 6.8 kernel exploit adaptation, etc - while playing against another GLM agent…

They're invaluable for developers to fix their code. This is definitely an area where AI decisively beats human devs in a very valuable way. It can try so much surface area so fast. If it won't attack my stuff, it won't help me build my stuff to be secure.

Exactly my CoT! I hope z.ai won’t change this behavior after training it on our input the same way as Anthropic did (shame on you, folks, seriously)

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#318

Post by grey-area »

andsoitis wrote: post #276
cyanydeez wrote: post #271

Earlier quoted context omitted.

its interesting, as it's typically the banks and against the public at large because the goal is to jimmy up valuations to justify IPOs then sell on opening; just like spacex. It's what enron was doing; it's what most of crypto's offshoots were doing. Sure you can blame the marks of the grift and say "well the public should know they're faking all this cash flow expectation". It seems like you're either driving the g…

> It's what enron was doing; Enron hid billions of dollars in debt and fake profits. Is this what you think is happening here?

Nvidia has made a lot of very suspicious circular funding deals. I suspect we’ll find fraud when the bubble bursts yes.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#319

Post by frabcus »

rob74 wrote: post #116

I'm not that up to date with the latest AI developments, but I noticed that this article seems to use "Cyber Capabilities" as a shorthand for the model's ability at cybersecurity tasks? Is that now an established expression, same as "crypto" now refers to cryptocurrencies rather that cryptography? Because "cybernetics" actually means something different (yeah, old man yelling at clouds, I know)...

It seems to be short for "cybersecurity", and got first adopted by the military a while ago as the name of a new theatre of operations (along with land, sea, air...). More recently it has spread to industry as well.

Re: GLM-5.3: Frontier coding with emergent cyber capabilities

#320

Post by jermaustin1 »

leobuskin wrote: post #305

I bought $18 GLM official subscription yesterday (5.2, but new model version was already leaking on some docs), set it up with Claude Code harness... and I’ve bumped to $80 plan almost immediately. It’s the first model that agreed on a proper security research (red team scenario), executed it seamlessly, including 0-days in WP plugins, RCE, 6.8 kernel exploit adaptation, etc - while playing against another GLM agent…

> I understand that such models can be used by malicious actors, but it’s fair to have it publicly available

I feel like there should be some mechanism to prove you own the code/app/site/whatever and it will remove the guardrails from the LLMs allowing them to find and fix these vulnerabilities.

Post reply on HN