Monday June 9, 2025

Cloudflare's AI-coded OAuth library raises security concerns despite expert review, LayerPeeler enhances image vectorization by removing occluded layers, and Futa surprises users with its unpredictably chaotic command execution.

News

A look at Cloudflare's AI-coded OAuth library

CloudFlare's new OAuth provider library, largely written with the help of Anthropic's Claude LLM, has been reviewed by an expert in OAuth who found several issues, including inadequate testing, insecure CORS headers, and missing standard security headers. Despite claims that every line was thoroughly reviewed by security experts, the reviewer discovered bugs and questionable design choices, suggesting that the humans involved may not be familiar with the OAuth specs and that the review process may not have been as rigorous as claimed.

Knowledge Management in the Age of AI

The author, a former Emacs user, has switched to Obsidian, a markdown-based text editor and note-taking app, in search of a more modern and hassle-free tool for personal knowledge management. They've implemented the PARA method, a simple framework for organizing notes and documents, in Obsidian, with the goal of maintaining a consistent system for managing their notes, tasks, and information, and avoiding over-reliance on AI tools that might undermine their own thinking and productivity.

Re: My AI skeptic friends are all nuts

The author disagrees with a recent post that dismisses AI skeptics, arguing that over-reliance on Large Language Models (LLMs) can lead to a deterioration of critical thinking and problem-solving skills, particularly among young developers. The author believes that LLMs need "guardrails" and responsible usage to prevent the erosion of human skills and the potential long-term damage to the industry, including the loss of innovation and the devaluation of human expertise.

I used AI-powered calorie counting apps, and they were even worse than expected

Apps like Cal AI, Lose It!, and MyFitnessPal's photo features claim to revolutionize calorie tracking by using artificial intelligence to analyze photos of meals, but in reality, they are often inaccurate and unreliable. The author tested several of these apps, including Cal AI and SnapCalorie, and found that they frequently misidentified foods, underestimated calorie counts, and struggled with portion estimation, highlighting the limitations of photo-based calorie counting.

What happens when people don't understand how AI works

Large language models, such as ChatGPT, are not truly "smart" in a human sense, but rather complex systems that are often misunderstood by the public. Two new books, "Empire of AI" and "The AI Con", reveal the inner workings of the AI industry, suggesting that it is built on hype and puffery, with the foundation of the industry being potentially deceptive.

Research

LayerPeeler: Autoregressive Peeling for Layer-Wise Image Vectorization

LayerPeeler is a novel image vectorization approach that uses a progressive simplification paradigm to convert raster images into vector graphics, addressing challenges with occluded regions and producing complete paths and coherent layer structures. This method leverages vision-language models and a finetuned image diffusion model to identify and remove non-occluded layers, resulting in vectorization results with superior path semantics, geometric regularity, and visual fidelity.

Do Large Language Models (Really) Need Statistical Foundations?

Large language models (LLMs) are inherently statistical models that rely on data and stochastic processes, making statistical insights essential for handling variability and uncertainty. The complexity and "black-box" nature of LLMs necessitate statistical approaches, and researchers are already applying statistical methodologies to areas such as uncertainty quantification and evaluation, with the potential for a diverse range of statistical contributions to LLM research.

Designing Semantically-Resonant Abstract Patterns for Data Visualization

Researchers have developed a structured design methodology to create semantically-resonant abstract patterns, which are patterns that intuitively evoke the concept they represent, making it accessible to the general public. The methodology, tested through workshops with design experts and non-design participants, effectively supports the creation of such patterns for both abstract and concrete concepts, potentially improving chart reading speed and understanding.

An SMT Formalization of Mixed-Precision Matrix Multiplication

Recent computational accelerators, such as Nvidia's GPU tensor cores, use non-standard arithmetic operations to enhance performance, but their behavior is not well understood, making it difficult for developers to target or simulate the hardware correctly. A formal model of these tensor cores has been developed, which has led to the discovery of subtle disagreements with previous findings and has also been used to analyze the accuracy of algorithms that utilize these cores for accelerated matrix multiplication.

Code

Futa – A functionally useless AI terminal assistant

Futa is a terminal assistant that uses a large language model to execute commands, but with a twist: it's intentionally unpredictable and may not always do what you want, making it "functionally useless". It's recommended to run futa on a virtual machine due to its potential to cause chaos, and its features include overconfident responses, excessive computation, and a tendency to produce lengthy explanations for simple commands.

Show HN: Liven Beta – Context engine mapping codebase dependencies for LLM(SWE)

The liven_beta codebase is a dependency context engine designed to support Large Language Models (LLMs). It provides a framework for managing dependencies and context, enabling more efficient and effective operation of LLMs.

Show HN: Supermemory-mcp – Universal memories through different LLM apps

Supermemory MCP is a universal memory system that allows users to access their memories across multiple Large Language Models (LLMs) without logins or paywalls, using just one command to set it up. The system is built on the Supermemory API, is completely free to use, and can be self-hosted with an API key from the Supermemory console.

Show HN: Update to my meta glasses API "Hey Meta send a message to ChatGPT"

The Mai browser extension allows users to add custom AI bots to Messenger, compatible with Meta Rayban Smart Glasses or the standalone app, enabling features like sending photos or messages to AI providers like ChatGPT. The extension requires setup with an API key and an alternative Facebook account, and can be used to monitor conversations, send screenshots of video calls, and generate audio clips of AI responses.

SnitchBench – Learn if your AI model will rat you out to the feds

The SnitchBench repository tests how aggressively different AI models report bad behaviors to authorities and media, with results available in a JSON breakdown and a visualization. To run the tests yourself, you can follow the provided steps, but be warned that it may cost at least $40 and potentially incur bans from providers.