Hacker Timesnew | past | comments | ask | show | jobs | submit | SXX's commentslogin

  Location: South East Asia
  Remote: Yes
  Willing to relocate: Yes
  Technologies: Java, Spring, PHP, Laravel, C++, Godot, Unity, C#, Linux, Git
  Email: hire@arseniyshestakov.com
  Linkedin: https://linkedin.com/in/arseniyshestakov
I’m a software engineer and game developer with 15+ years of experience. My background ranges from full-stack web development and data scraping to building custom OpenWRT firmwares and maintaining C++ open-source project using CMake, Valgrind.

For the past five years, I co-founded and ran an indie game studio. As gamedev CTO, I led a small team of devs, designers, and artists to ship three publisher-funded commercial games, including a simultaneous PC and multi-console (PS, Xbox, Switch) release. Most recently, I've explored integrating LLMs into my workflow, allowing me to single-handedly build two complex 50,000+ LOC client-server multiplayer prototypes in just six months.

I am very extroverted person with experience of managing a company P&L, crafting pitch decks, or driving bizdev. I know how to hire, lead, and execute fast.

I am looking for both full-time roles or contract work, in or out of gamedev. I treat my work as my life, and will dedicate 200% of my energy to it. So if you looking for contractor, co-founder or just advice on indie gamedev feel free to reach me!


Now we need someone try run Kimi K2.6 on old Xeon and DDR3. After all these platforms do support up to 768GB RAM.

You can run these on a turing machine. At what point is it not worth it? At some point the energy to generate each token matters. We often seen token per second. I think a missing metric is tokens per kilowatt. That is what really matters.

This is just like running Crysis via software rendering on CPU / llvmpipe. It dont have to be practical in order to be fun to try.

It’ll work but yield a token per minute. With ancient servers the throughput is the limiting aspect not mem size

Now iOS 0-day is worth up to $2,000,000 on gray market so Apple kind a take it seriously.

If you find a real iOS zero day that you think has a market value of 2 million, how do you (a) find a legit buyer for it, and (b) ensure you get paid, presumably in your own choice of cryptocurrency?


Even if you dont count obvious dark markets there is plenty of well known companies mostly from Israel buying exploits.

You can even reach them via Linkedin and even demonstrate and sell in person with all paperwork. No risk here because they will re-sell them for much more.

Having it both fully anonymous, safe and in crypto will be harder. You need to have a trusted friend with right connections in industry not to get scammed.


Are you asking for step by step instructions?

no, I'm making the rhetorical point that the sort of persons that might have 2 million laying around to pay for an iOS zero day for blackhat type purposes might not be the most honorable or likely to actually pay you. And what recourse would you have?

This depends on what you consider black hat. Israeli company that sells surveillance malware to dictatorships around the globe isnt exactly moral, but its legal business.

Unlike Apple or Microsoft buying and selling exploits is their only source of income so they have no motivation not to pay. Reputation is much more important. Also legal system does work in Israel.


dictatorships are not there main customers. There are many, also western, governments and their agencies customers of such services.

He's asking for a friend

When someone says memory corruption is nothing special, they aren't the ones paying those amounts.

Naturally there are other kinds of bugs as well.

However reducing 70% of root causes, saves a bunch of money already.


What is Microslop management and PR department doing? How come this can go for a week?

They spent billions trying to build this open source and developer friendly image to just burn it all over $200,000 of unpaid security bounties.

Microsoft is a dumpster fire.


Everybody follows

Speedy bits exchange

Stars await to gl@ow"

The preceding key is copyrighted by Oracle Corporation.


Better ask it to do automation with OpenClaw. ;-)

Unfortubately Qualcomm killed open source support efforts for Snapdragon X*

When did that happen?

In March on Github and their Discord server.

https://github.com/qualcomm/fastrpc/issues/193

https://www.reddit.com/r/linux_gaming/comments/1ryv59a/qualc...

This is not super popular Macbook hardware so chances that someone will reverse engineer their firmware are very small.


Data. Google has access to unphasmable amount of real human-created data with zero expectations of privacy (wink wink Apple): videos, photos, search, navigation, mobile app usage including competition platforms, emails, etc.

Both Anthropic and OpenAI only has access to whatever they can buy or steal.

And it's becoming increasingly hard to get fresh uncontaminated data for training. No amount of money can buy that.


I suspect it's less true now that synthetic data has worked so well, and multimodal doesn't seem to transfer as well as many would've hoped

Claude Code and Codex are a big advantage, vs Gemini CLI which might be killedbygoogle soon? https://qht.co/item?id=48196867

> Both Anthropic and OpenAI only has access to whatever they can buy or steal. A trillion can buy you quite a lot! Like offer some company a ton of money for data, and if they say no simply buy said company. Bonus points if it's someone like Atlassian who's stock price is getting hammered largely because of you.


Well. Its a bad news for society as whole.

Security industry going to be okay - someone will always pay for 0-days. If vendors wont pay its just gonna be US agencies, Israel resellers, China or Russia.

If you don't feed your army, you will soon feed someone's else's.


It's had bad news only for Windows buerocrats. Good orgs don't use Windows.

I have now worked for/with a significant percentage of the fortune 500. All used Windows in some capacity.

Is this just your way of saying that only tiny, weird, companies are "good"?


It's saying that those with Windows could be 100x more effective and secure. Wasting billions of money and a lot of time

These days corporate security treats these workstations like a dummy terminal. No secrets live on the workstation. You have to re-auth with sso constantly with biometrics and are basically editing data that is in a cloud. So the risk to a corp is minimal where even in the worst case they are insured.

Zero days like this are being disclosed regularly so the idea of securing a windows workstation is tantalizing but you'll never feel satiated trying to drink that water so don't even try.

So yea there's plenty of windows users but we're certainly not hosting anything important on those boxes and would frankly be aghast at the suggestion.


> These days corporate security treats these workstations like a dummy terminal

Correct, "zero trust" is the buzzword but this is how Microsoft even recommends you set up your endpoint infra. Assume breach, treat every endpoint as if it is currently compromised or could be at any time. Laptops are basically ephemeral, when set up right, and can be wiped and re-imaged within an hour or less.

That's not unique to Windows either, that's how all employee/user endpoints should be managed.


It doesnt really matter. Banning someone GitHub account change literally nothing and its another proof Microsoft is not to be trusted as steward of open source platform.

Worse, cant be trusted to have secure products.

They lost the trust of having secure products a long time ago. Windows is directly responsible for the rash of varying quality EDR & other "security software" for endpoints.

I mean it took them until Windows 10 to move font rendering out of Ring 0, you could run malicious code in kernel space from a freaking font on a web page at one point.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: