MrHorda - homelab, local AI and tech news

Karpathy ditched YouTube for a custom clone built on Hacker News recommendations. He used Opus 5.5 to process comments, filtering spam to find 6,454 videos across 150 topics from 2007 to 2026. The whole build took about two hours. He handled the API keys and VPS setup, but Claude did the heavy lifting. It is a smarter alternative to the current recommendation engine.
log4j posted about owning a 2025 Samsung TV and finding a root shell via a zero day. The firmware was AES encrypted, but they bypassed it. They discovered constant hot mic functionality, automatic content recognition, and geo positioning. It also builds user profiles and shares data with 400 partners. As someone who runs a homelab, I find the amount of telemetry on a $3000 TV horrifying. It is a massive privacy issue.
Kimi K3.1 Pro scores 65.7% on Terminal-Bench 4.0. GPT-6 Astra manages 58.2%. Claude Opus 5.5 is still ahead at 66.4%, by about a point. It carries a 1M context window and the full weights go up on November 4. They also stripped cyber-attack training data out of both the mid-training corpus and the RL mix before release, which means the copy you download is deliberately worse at finding holes in your own servers. Fair trade. Read the number twice anyway.

HackerTube and the end of the algorithm

Details: Written by: MrHorda; Category: Blog; Published: 02 November 2026; Hits: 9

Andrej Karpathy posted on his blog about a new site called HackerTube. It is a YouTube clone. The difference is that it does not use a recommendation algorithm. It uses Hacker News. Specifically, it lists videos that people on HN recommended between 2007 and 2026. The result is a clean list of 6,454 videos across 150 topics. No slop. No exaggerated thumbnails. Just what smart people actually watched.

Samsung TVs Ship Root Exploits and Privacy Nightmares

Details: Written by: MrHorda; Category: Blog; Published: 26 October 2026; Hits: 140

A security researcher named log4j posted a thread revealing that they gained root shell access on a 2025 Samsung TV. The discovery came after noticing weirdly targeted ads. The firmware was AES encrypted with no visible keys. The researcher had to use UART and JTAG magic to proceed. The result was a full root shell. They found a privacy horror inside the device. The post hit 3.7 million views. It is a stark reminder that smart devices are not secure by default.

Brotli 1.2.1 Patches Node2Shell, and Your Scanner Will Not Tell You

Details: Written by: MrHorda; Category: Blog; Published: 24 October 2026; Hits: 90

There is a memory corruption bug in Google's Brotli decoder, it is rated 9.2 critical under CVSS v4.0, and it affects every version from 1.0.3 through 1.2.0. Node.js disclosed it on 22 October as Node2Shell. Python shipped an advisory for the same flaw the next day, because the PyPI packages Brotli and brotlicffi compile the same decoder. If your stack speaks HTTP and decompresses responses, this one is probably in your dependency tree right now.

Europe Stopped Treating the Kill Switch as a Conspiracy Theory

Details: Written by: MrHorda; Category: Blog; Published: 24 October 2026; Hits: 112

Steve Blank has spent the last month in London and says he has been listening to policymakers react to a wake up call delivered by Elon Musk. The short version: the United States shut off intelligence and throttled Starshield, the military variant of Starlink, for Ukraine. In the US that was a blip. In Europe it landed as proof of something people had been called paranoid for saying out loud.

Welcome to MrHorda!

HackerTube and the end of the algorithm

Samsung TVs Ship Root Exploits and Privacy Nightmares

Brotli 1.2.1 Patches Node2Shell, and Your Scanner Will Not Tell You

Europe Stopped Treating the Kill Switch as a Conspiracy Theory

Login Form

Older Posts