Do It by Code
54 subscribers
708 photos
99 videos
14 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
According to @glxyresearch, the total losses from the #Coldcard hack may have reached 2,055 $BTC($130M).

More than 7,700 victim addresses have been affected.
🔥1
A 3D mesh stores:

- Vertex data: the points making up the mesh
- Index-buffer data: instructions describing which points form each triangle

When a mesh is mirrored using a negative scale, such as Scale X = -1, its triangles effectively face the opposite direction.

If bBuildReversedIndexBuffer is enabled, Unreal stores a second copy of the triangle instructions in reverse order. This can make mirrored rendering slightly easier, but it roughly doubles the mesh’s index-buffer memory usage.

Unreal can already render mirrored meshes correctly using "reverse culling"it simply changes which triangle direction counts as the front. Therefore, the second index buffer usually isn’t necessarily required. Unreal’s own HLOD and proxy-mesh generators disable it for this reason.
it exists as a memory-for-performance tradeoff.

So:


ProxySourceModel.BuildSettings.bBuildReversedIndexBuffer = false;


means:

“Don’t create the extra reversed copy. Save memory, because Unreal can render negatively scaled/mirrored instances correctly without it.”

This shouldn’t change how the mesh looks; it only avoids unnecessary storage.
1
Do It by Code
A 3D mesh stores: - Vertex data: the points making up the mesh - Index-buffer data: instructions describing which points form each triangle When a mesh is mirrored using a negative scale, such as Scale X = -1, its triangles effectively face the opposite…
For a negatively scaled mesh, Unreal has two choices:

- Change the GPU’s culling/rasterizer state to treat the reversed winding as front-facing.
- Use a prebuilt reversed index buffer and keep the normal culling state.

The second option can reduce expensive GPU state or pipeline-state changes, especially on older hardware/APIs or when many mirrored meshes are rendered. Historically, that could provide a worthwhile performance improvement.

The downside is memory:

- It roughly doubles index-buffer storage.
- It does not double the entire mesh size; vertex data, materials, textures, and other data are unaffected.

On modern hardware, ordinary reverse culling is generally cheap enough that the extra buffer often provides little or no measurable benefit. That is why proxy/HLOD generation commonly disables it.

So the practical rule is:

- Enable it if you render many negatively scaled, non-Nanite meshes and profiling shows a benefit.
- Disable it otherwise to save cooked asset size and GPU memory.

It is an optimization option, not something required for mirrored meshes to render correctly.
🔥1
mediawiki rce

This still works in the wild on a lot of instances btw so go try it out :-)

Posted by cts🌸, 5 hours ago
1
Here is a POC payload (paste into any page with a <timeline> tag):

Posted by V12, 9 hours ago
👍1
https://www.youtube.com/watch?v=w71JusTenBw
But you can patch your way out of it!

Posted by Brad Spengler, 9 hours ago
https://github.com/EpicGames/UnrealEngine/tree/release/Engine/Plugins/Experimental/Animation/AnimGen/Source

AnimGen plugin in UE (experiential) can be used to build and train Machine-Learning-based character animation controllers in the editor and evaluate them at runtime.

example project
🔥2
Re: Why does Opus 5 feel worse to work with?

The single biggest annoyance with Opus 5 is that it writes too elliptically.

Sentences that orbit a point, then jump to it like it's a revealed insight.

Unnecessarily abstract phraseology. Constantly using inanimate nouns as the subjects in sentences in order to unlock variety in verb choice, especially when it helps construct a sentence where the real action can 'land' like a surprise at the end.

It is definitely more capable, and yes, I've found it can make unwarranted decisions, but actually I've found Fable worse for that, particularly if it's off in a subagent somewhere out of sight.

And comments are out of control. I have a subsystem in my hobby app that I wrote over a couple of weekends with Opus + Fable. After ~30 or so commits it apparently started instructing subagents to copy the "existing verbose comment style of the codebase" - a verbose style it initiated. A review of the code showed it was approaching 3:1 comments to code ratio. I spent a day's worth of tokens (5x) rephrasing and eliminating comments.

barrkel, 3 hours ago
🔥1
https://ai.google.dev/responsible/docs/safeguards/synthid

https://deepmind.google/models/synthid/

https://www.anthropic.com/news/claude-text-watermark

Practically speaking, SynthID Text is a logits processor, applied to your model's generation pipeline after Top-K and Top-P, that augments the model's logits using a pseudorandom g-function to encode watermarking information in a way that helps you determine if the text was generated by your model, without significantly affecting text quality. See the paper for a complete technical description of the algorithm and analyses of how different configuration values affect performance.

Watermarks are configured to parameterize the g-function and how it is applied during generation. Each watermarking configuration you use should be stored securely and privately, otherwise your watermark may be trivially replicable by others.
🔥1
Gemini 3.7 Flash wins an AoE II skirmish on Moderate difficulty (first time for any model).

Averaged 11.9 tool calls per tick, 4.4 ticks/min, almost 50 actions per minute

Seems like it is managing tools and following instruction better than 3.6.

Posted by Wyatt Walls, 2 days ago
🔥1
‼️Two popular Rust crates, arrayref and append-only-vec, were compromised in a supply chain attack. arrayref alone has 244M downloads. The malware ran at build time, which means anyone who compiled a project that pulled one in was hit, without ever calling the crate.

Here's the breakdown 🧵

Posted by Aikido, 40 minutes ago
🔥2
CVE-2026-33824: Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (critical; score: 9.8/10)

Affected versions: nearly all supported versions of windows.
actively exploited, needs no auth or user interaction. The only requirement is for the service to be reachable over the network.

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
The bug lies in how Windows handles IKEv2 fragmented network packets. Attackers can target any exposed machine by sending malicious traffic over UDP ports 500 or 4500.


- Microsoft Update Guide
- CISA
🔥1
Do It by Code pinned «CVE-2026-33824: Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (critical; score: 9.8/10) Affected versions: nearly all supported versions of windows. actively exploited, needs no auth or user interaction. The only…»
Do It by Code
CVE-2026-33824: Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (critical; score: 9.8/10) Affected versions: nearly all supported versions of windows. actively exploited, needs no auth or user interaction. The only…
Mitigation:

1. if you are not using any windows vpn (most people don't, really); just disable the service:

Stop-Service -Name "IKEEXT" -Force
Set-Service -Name "IKEEXT" -StartupType Disabled


2. Update and apply the security fix during the April 2026 Patch Tuesday cycle
3. or you can also block inbound traffic on UDP ports 500 and 4500 on your firewall

how to see the network service is actually listening on the target ports
(ports 500 and 4500 are the most common ports used by this service)
you can run this read-only powershell command:

Get-NetUDPEndpoint | Where-Object { $_.LocalPort -eq 500 -or $_.LocalPort -eq 4500 } | Select-Object LocalAddress, LocalPort, @{Name="ProcessName";Expression={(Get-Process -Id $_.OwningProcess).ProcessName}}


If you see an output like this:

LocalAddress LocalPort ProcessName
------------ --------- -----------
:: 4500 svchost
:: 500 svchost
0.0.0.0 4500 svchost
0.0.0.0 500 svchost

it means you are probably affected.

Here are the powershell commands to block inbound traffics to these ports: (not readonly; requires admin perm):

New-NetFirewallRule -DisplayName "Block CVE-2026-33824 (Port 500/4500)" -Direction Inbound -Action Block -Protocol UDP -LocalPort 500,4500
👍2
Media is too big
VIEW IN TELEGRAM
Last post about the Minecraft clone running on a custom CPU

GPT-5.6 Sol upgraded the CPU to support 256 KiB of RAM, along with a few other changes

This is about as far as it could push it within Turing Complete’s limits without everything breaking

Posted by Angel 🌼, 17 minutes ago
This media is not supported in your browser
VIEW IN TELEGRAM
People asked for DOOM so here's DOOM running on GPT-5.6 Sol's custom CPU, it called it Codex-R32

"The CPU is built from primitive logic components and wires inside Turing Complete. DOOM uses the C-based PureDOOM port, compiled into native RV32IM machine code that runs directly on the custom Codex‑R32 CPU"


Posted by Angel 🌼, 1 hour ago
In powershell:
if you accidentally type $LogPath = "C:\logs" but later write Remove-Item $LogPth\*, normal PowerShell treats $LogPth as null and evaluates the path to \* and attempts to delete your root directory.

Strict mode stops the script instantly on the typo (Set-StrictMode -Version 1.0 (or higher))