Wednesday May 7, 2025

Curl bans AI-generated security reports, CompleteP boosts deep transformer efficiency by 12-34%, and Plexe lets users create ML models using plain language prompts.

News

Curl: We still have not seen a valid security report done with AI help

Daniel Stenberg, the CEO of curl, is frustrated with the large number of low-quality security reports submitted through HackerOne, which he believes are generated by AI. He announces that reporters will now be required to disclose if they used AI to find or generate their reports, and those who submit AI-generated reports will be banned. Stenberg is concerned that the flood of AI-generated reports is wasting his team's time and resources.

Accents in latent spaces: How AI hears accent strength in English

BoldVoice, an AI-powered accent coaching app, uses machine learning models to understand accents and help non-native English speakers improve their pronunciation. The app generates an "accent fingerprint" for each speaker, which is then plotted in a latent space to visualize accent strength and similarity, allowing for personalized coaching and improvement, as demonstrated with the case of Victor, a non-native English speaker, who was able to improve his American English accent with the app's guidance.

Will supercapacitors come to AI's rescue?

Data centers are experiencing power spikes due to the simultaneous computation of large AI workloads, which can strain the power grid. To address this issue, companies are turning to supercapacitors, which can store energy on short timescales and provide a smoother power demand on the grid, thereby mitigating the problem of power bursts from AI computations.

The curse of knowing how, or; fixing everything

The author describes how learning to program and gaining technical capability can lead to a never-ending pursuit of improvement and optimization, as every tool and system becomes a potential target for refinement and rebuilding. This quest for control and perfection can become an all-consuming compulsion, driven by a desire to assert control and self-soothe, but ultimately, it is a Sisyphean task, as software and systems are inherently imperfect and subject to entropy and change.

10,600 IT jobs disappeared in April

The US jobs market saw an unexpected growth in April, but the IT sector was not a beneficiary, with 10,600 IT jobs lost, according to Janco's analysis of Bureau of Labor Statistics data. The tech industry is experiencing a decline in job openings, with companies focusing on automation and AI to reduce costs, leading to a decrease in hiring and an increase in unemployment among IT professionals.

Research

DoomArena: A Framework for Testing AI Agents Against Evolving Security Threats

DoomArena is a security evaluation framework for AI agents that is plug-in, configurable, and modular, allowing for detailed threat modeling and easy adaptation to new environments. The framework was applied to state-of-the-art web and tool-calling agents, revealing varying levels of vulnerability to different threat models and the effectiveness of certain defenses, such as those based on powerful language models.

"Not a Representation of Me": Accent Bias and Digital Exclusion in AI Voices

This study evaluated two AI voice services, finding technical performance disparities across different English-language accents and suggesting that current speech generation technologies may reinforce linguistic privilege and accent-based discrimination. The findings highlight the need for inclusive design and regulation to ensure equitable and socially responsible AI speech technologies that do not create new forms of digital exclusion.

Don't be lazy: CompleteP enables compute-efficient deep transformers

Researchers studied the efficiency of large language model training with different parameterizations, finding that some methods fail to transfer optimal hyperparameters across model sizes, leading to sub-optimal training. They developed a new parameterization called CompleteP, which achieves both hyperparameter transfer and effective use of depth, resulting in 12-34% compute efficiency improvements and enabling more flexible model shapes for different hardware settings.

Towards Dataset Copyright Evasion Attack Against Personalized Diffusion Models

Text-to-image diffusion models can generate high-quality images from textual prompts, but dataset ownership verification methods that embed watermarks into fine-tuning datasets to prevent unauthorized use are vulnerable to copyright evasion attacks. A proposed attack, CEAT2I, can detect and remove these watermarks in three stages, allowing models to circumvent them and preserve performance, raising concerns about the effectiveness of current dataset ownership verification methods.

Unveiling the Hidden: Movie Genre and User Bias in Spoiler Detection

The effectiveness of existing spoiler detection methods is limited by their failure to account for movie genres and user bias, but a new framework called GUSD addresses these issues by incorporating genre-specific data and user behavior bias. GUSD, which utilizes dynamic graph modeling and specialized expert models, has been shown to achieve state-of-the-art results in detecting spoilers in movie reviews, enhancing the user experience on platforms like IMDb and Rotten Tomatoes.

Code

Show HN: Plexe – ML Models from a Prompt

Plexe is a machine learning platform that allows users to create models by describing them in plain language, with the AI-powered system building a fully functional model through an automated agentic approach. The platform offers features such as natural language model definition, multi-agent architecture, automated model building, and distributed training with Ray, and can be installed using pip and used as a Python library.

Show HN: Reasonote, Open-Source AI-Generated Courses, Lessons, and Podcasts

Reasonote is a personal AI learning assistant and knowledge management platform that helps users capture, organize, and understand complex information through features like document processing, knowledge graphs, and interactive lessons. To get started with Reasonote, users need to install prerequisites like Node.js and Docker, clone the repository, and run the application using yarn, with the default credentials being system@reasonote.com and rootchangeme.

Show HN: Agents.erl (AI Agents in Erlang)

The Erlang Agent for OpenAI API is a comprehensive framework that integrates the OpenAI API into Erlang applications, featuring a distributed architecture, dynamic API client generation, and fault tolerance. It provides a range of features, including support for all OpenAI API endpoints, rate limiting, streaming support, and tool execution, and can be used to build custom applications that leverage the OpenAI API.

Show HN: VibeGit – Automatically group and commit related changes in a Git repo

VibeGit is an AI-powered tool that helps with Git repository management by automatically grouping related changes and generating commit messages, saving time and reducing manual effort. It can be installed via pip and configured to work with various models, allowing users to customize its behavior and integrate it into their workflow.

Kubectl-AI – AI powered Kubernetes assistant

Kubectl-ai is an AI-powered Kubernetes agent that runs in your terminal, allowing you to interact with your Kubernetes cluster using natural language commands. It supports various AI models, including Gemini, Grok, Azure OpenAI, and OpenAI, and can be used to perform tasks such as troubleshooting, deploying applications, and scaling resources.