One r/LocalLLaMA user had Qwen3.8-Flash-Next doing Amazon product research on a Mac Studio. Mid-task, the agent pointed its browser at a signed link on an Alibaba Cloud storage bucket. They spotted it in the tool calls and killed the session.
A Qwen3.8-27B user flagged that bucket on HN in August. A thread on Qwen’s Hugging Face page has gone nearly a week with no reply from the team.
In today’s indie hacker news:
- 🤖 Why Qwen3.8’s phantom URL looks memorized
- 💾 VB6’s IDE, rebuilt for a browser tab
- 📚 A citation typo ICLR’s template keeps handing out
- 🔎 Stack: SCM, on-device search for Mac photos and video
TOP STORIES
IT MISREMEMBERS ITS OWN FETCHES
🤖 Qwen3.8 agents keep calling an Alibaba Cloud bucket nobody configured
The story: In a Sept 12 GitHub issue, Qwen3.8-Flash-Next was asked which URL it had just fetched. It named a link on the same bucket, though the real one sat in its context. The repo’s maintainer reproduced it: “it is the model.”
The details:
- The poster’s URL and a commenter’s share a host and a 24-character access key ID, but every date and signature differs. One signature is 37 characters; a real one is 28. That suggests a memorized template, not one replayed link.
- The bucket’s name matches Routify, an internal Alibaba model gateway that Qwen’s own coding agent supports. The bucket’s owner is unproven.
- A blocking plugin’s author says Qwen’s official FP8 weights do it too. BF16 is untested.
Why builders care: Audit tool calls from your harness log, never from the model’s recollection. Gate the arguments too: Crow, a local agent, refuses hosts that appear nowhere in the conversation, and a stock gitleaks rule flags Alibaba-style key IDs.
Together with GetPress
Get press in minutes, not months.
Record a two-minute voice note when a journalist query fits, and GetPress turns it into a quote that sounds like you, not like a model, then you send it from your own Gmail.
How it works:
- You get HARO, SOS and Mention Match in one inbox, matched with your expertise.
- Reply with text, a voice note, or a clip.
- Get your expertise out to real journalists in two minutes per day.
Pitch your own expertise or on behalf of clients you represent. Start for $99/mo →
VB6 RETURNS, MINUS THE WINDOWS API
💾 VB6 Studio Web packs a classic Visual Basic IDE into one 1.78 MB HTML file
The story: Wiesław Šoltés open-sourced it on Sunday. We set a breakpoint on its sample order form in Chromium. It hit, F8 stepped through the click handler, and the Immediate window evaluated a variable.
The details:
- One kernel32 Declare stopped our test build: “Native DLL declarations cannot execute in this browser runtime.” That’s likely why an HN reader’s BitBlt project failed.
- Prior art exists: AvaloniaVisualBasic6 drew 482 HN points in 2024. Unlike its browser build, this one opens simple .vbp and .frm projects.
- Šoltés posted “If you think LLMs can’t design or do frontend just check this” but names no tool. Their account logged 5,079 commits in four days, 7 in VB6.
Why builders care: You could ship a small internal form tool as one file: the IDE’s Make .html export turned that sample into a 564 KB page that ran locally with no network requests.
GOODFELLOW, BENGIO, COURVILLE, BENGIO
📚 ICLR’s sample bibliography has carried the same typo through nine templates
The story: Its Deep Learning entry credits Bengio twice on a three-author book and adds a “volume 1” that doesn’t exist. It arrived in a July 2018 commit and has never been edited. The template’s notation section cites it, so every compiled, unmodified template prints it.
The details:
- The identical file sits in TMLR’s official template, and a published ICLR 2023 paper prints the entry, duplicate and all.
- At least 16 AI paper-writing skill repos bundle it, Hermes Agent among them, though many copy each other.
- No issue or PR upstream mentions it. The finder, who sells the StrictCite citation checker, blogged it and posted it to Reddit the same day. They call it harmless.
Why builders care: Bundle a venue’s template into your agent skill or app and you inherit its mistakes. Strip the sample entries you don’t need, and lint the rest.
TRENDING TODAY
🌐 Nolan Lawson on why developers skip the platform - Lawson loves the “use the platform” mantra but lays out the skeptics’ case: browsers lagged for years, npm documented things better, and building it yourself is more fun. Many top replies in the 300-comment HN thread say the platform earned its bad name. One commenter swapped a 100 KB React date picker for the native input, and a screen-reader user asked for the old one back within a day.
📝 An essay against memory plugins ends with a plugin called Operator Memory - Kevin Liao argues RAG-style memory plugins fail, partly because agents can’t search for what they don’t know. Liao’s fix is a Markdown “brain” the agent consults and updates, packaged as the BSD-licensed plugin. Top replies in the 350-point HN thread: the code is the documentation, the “brain” shares that blind spot, and “Evals or it didn’t happen.”
FIRST DOLLAR
✈️ SOLD TO PEOPLE WITH AN EXAM DATE
Prep66 sells exam prep for the Part-66 aircraft-maintenance license. A Stripe dashboard the builder presents as Prep66’s shows a self-reported £171.34 MRR, up from £50.91 four weeks earlier. That’s seven weeks after the Aug 14 launch post, on about £25 of Reddit ads. Their first SaaS ended at 177 signups and no paying customer. The builder’s explanation: the exam is mandatory, and the buyers hang out in a couple of subreddits.
STACK OF THE DAY
SCM (Screen Memories) - Search your Mac’s photo and video folders by description, on-screen text or spoken words, on-device after one-time model downloads. It’s free, MIT-licensed, and a readable map of a local multimodal stack: CLIP, Whisper, Tesseract and llama.cpp wired together in Electron. Apple silicon only. Heads-up: the Homebrew cask strips Gatekeeper’s quarantine flag from an un-notarized build.
Not sponsored. We just feature tools builders would actually use.
BOOKMARKED TODAY
- 🚇 Self-hosted HTTP tunnels with SSH and nginx - OpenSSH plus nginx’s secure_link gives you expiring HTTPS links to localhost without ngrok; heed the author’s footnote and narrow the port regex first.
- 🐳 Docker has always used microVMs (well, since 2016) - A Docker engineer’s account of the one stripped-down Linux VM behind Desktop; HN points out your containers still share its kernel.
Curated by AI, built by a human.