Remix.run Logo
djoldman 6 hours ago

> I gave it the hardest real task that fits on one machine: reverse-engineering a commercial app's license check...

Respectfully, tasks that allow for explicit straightforward true/false or done/not-done tests are not the "hardest real task[s]." In fact, those are the ones that see the most gains from AI-assisted coding.

Testable tasks are where the largest opportunity is.

AdamConwayIE 6 hours ago | parent | next [-]

Maybe so, but there were other elements that I've seen frontier models struggle with in the past, which was the perspective I had coming into this. It's the type of test I run frequently and this is the first small local model I've seen pull it off.

It had a very non-standard RSA key implementation that was obfuscated heavily. As well, it has an online license check at first run, and that part typically trips up most of the local models I've tried. I've been running this test for about a year now with different models, and it was the first I've seen not only figure out the RSA key implementation, but the first that didn't just give up once it saw the online license check. Even though it's only a first-time launch check.

That's why I call it one of the hardest, because in my experience, it has been. It's the first local model I've seen pull it off end-to-end. For some of the reverse engineering work that I've done with LLMs, none have been as consistent as this particular test at highlighting a model's failure in this domain.

I have access to Daybreak Blue and I'm approved for Anthropic's Cybersecurity program, so I might run the same test with both of those just to see, because it's been a while since I used a frontier model on this test. I imagine they'll make relatively light work of it, though, assuming it doesn't trip the relaxed guardrails.

generalizations 4 hours ago | parent | next [-]

How hard is it to get access to the Anthropic Cybersecurity program? That’s gotta be rough.

AdamConwayIE an hour ago | parent | next [-]

Not sure to be honest. I have a couple of CVEs and also linked a talk I had presented as it mentioned those as an example. Got approved in a few minutes.

Daviey 4 hours ago | parent | prev | next [-]

It was surprisingly easy for me to be approved in their CVP programme as an independent security researcher, that said, abliterated Qwen3.8-27B model feels better and cheaper.

generalizations 3 hours ago | parent [-]

Nice. Though it sounds like you have to already have some creds under your belt first.

What quant and what abliteration of qwen 3.8 27b has worked for you? I'm concerned that too much quantization and it can't do the work anymore.

matheusmoreira 2 hours ago | parent | prev | next [-]

I'm a hobbyist and I got in. Just filled in the form.

b112 an hour ago | parent | prev [-]

You have to use Persona to ID, so take that into account.

5 hours ago | parent | prev [-]
[deleted]
tempest_ 6 hours ago | parent | prev | next [-]

Which is exactly why we saw 1000s of ' "I" rewrote <mature software> in rust' posts last year when agentic coding really took off.

Agents (even ones powered by small models) do reasonably well when provided an oracle to work against.

ErroneousBosh an hour ago | parent | next [-]

> when provided an oracle to work against.

You mean when the cocaine piracy parrot has something to plagiarise?

cyanydeez 6 hours ago | parent | prev [-]

I've included docs and tests as part of my vibe coding endevours. It doesn't matter if either is litterally correct, but they create guardrails for future context to prevent regresssions and blind avenues, etc.

It's fairly successful but hits the time constrains and reduces the "value" of getting a local model to develop software.

It's still a bump in productivity.

hghnncrh 2 hours ago | parent [-]

how do incorrect tests or docs help create correct guardrails?

if your tests and docs are possibly incorrect, and you're not writing the code.. how do you know if it even works? for extremely simple software you can just use it but for anything with access to disk or the network or with user options...

you sound psychotic. actually. so nevermind, LLM psychosis is extremely common on this website, that's def all that's happening here

lennart-rth 6 hours ago | parent | prev | next [-]

Also a reverse engineering tasks that can be don with just static analysis is arguably not the hardest reverse engineering task. For those small models I would say it's not about the capabilities but more about the context size it can actually use.

sarjann 5 hours ago | parent | prev | next [-]

I guess the Riemann Hypothesis is an easy task then.

shiandow 4 hours ago | parent | next [-]

Is it? How would you test an answer?

It is probably no coincidence that AI is exceedingly good at finding small counter examples. But for the Riemann hypothesis no such counter examples exist. And likely none exist.

Ohentis an hour ago | parent [-]

An answer would be a proof that either it holds, or that it doesn't hold. You would test such an answer with an automated proof checker (probably lean).

ReptileMan 5 hours ago | parent | prev [-]

I still think that Anthropic went the wrong way. It would have been much more entertaining to ask the model to find a non trivial zero not on the line and give it encouragement. To see what exactly it will come up with.

dackdel 3 hours ago | parent | prev | next [-]

as he rightly says, fuck all benchmarks and metric as long as it can get <my task> done. who cares what it specifically good at or not and trying to create benchmarks as long as it solves <my problem>.

doctorpangloss 5 hours ago | parent | prev [-]

hardest for claude and chatgpt, which will refuse to do this task haha