DeepSeek v4.1 Flash Is Now Our Best Hacking Model

109 pointsposted 5 hours ago
by talhof8

36 Comments

habosa

26 minutes ago

DeepSeek models have such good benchmark performance, amazing pricing, and the team over there seems to be widely considered impressive.

I just haven't found them to be very good? I've had a ton more success with the GLM models (since 5.2 anyway). Maybe I'm just holding it wrong, DS models seem to get stuck in loops or tell me nonsense. GLM feels like budget Claude.

tired_star_nrg

2 minutes ago

It’s funny, in oh-my-pi I’ve had much better luck with DS 4.1 Flash than GLM 5.3 flash. Glm seems to just constantly reason in circles before attempting a tool call

TuxSH

2 hours ago

I find this - or perhaps the title - a bit surprising.

I've benchmarked GLM 5.3 and DSv4.1-F on my fully-annotated decomp of the Nintendo 3DS's kernel, which I have a good mental understanding of, tasking them to find vulns and other bugs (in Max mode w/ subagents). GLM 5.3 founds almost all the vulns in 30min for $22, while DS only found one vuln for $2 in 40min.

Perhaps DS works better where targets have low-hanging fruits than can be found fast?

mariopt

2 hours ago

Makes sense, GLM 5.1/5.2/5.3 is a lot better than DS v4.1, I found the same results in other domains.

Given how fast and cheap DS is, it's just an ideal model with enough "IQ" to let it loose. Another thing they left out of the article, DS becomes really good if you provide custom tools for the task, on it's own it's mediocre.

seemaze

an hour ago

How does GLM 5.3 Flash rank against it's big brother and the latest Deepseek?

networked

20 minutes ago

Keep in mind that GLM-5.3 is not GLM-5.3-Flash's "big brother" the way one might think. GLM-5.3-Flash isn't GLM-5.3 scaled down. While GLM-5.3 is based on GLM-5.2 and "every gain comes from post-training" (https://z.ai/blog/glm-5.3), GLM-5.3-Flash uses a newly trained multimodal base model (https://z.ai/blog/glm-5.3-flash).

mariopt

27 minutes ago

Both these models are not bad but you can not trust them to make good decisions. I meant GLM 5.1/5.2/5.3 in the previous answer, not the flash version

Aissen

an hour ago

If you are talking about publicly known vulns, it's a bit moot since they should be in the training sets. If not, you just burned the vulns to that inference provider's training data (and any intermediary), and future benchmarks will be meaningless.

networked

27 minutes ago

> If not, you just burned the vulns to that inference provider's training data (and any intermediary), and future benchmarks will be meaningless.

Inference providers can credibly promise to not train on your data if they are in a position to get sued.

simlevesque

2 hours ago

In your example, couldn't you parallelize DS's work more ? You could have 11 times as many agents for the same price.

TuxSH

an hour ago

Both DS and GLM had the same numbers of subagents, 5 or so.

But, well, number of subagents doesn't make a difference if model is dumb (GPT 5.4 High, in May,in Chat mode outperformed what I see with DS4.1-F).

That being said, pricing model makes a huge difference for "find at least one" tasks: with API/PAYG if you have a chance to save 90%, you go for it, whereas with subscriptions it is optimal to burn all your remaining allowance right before reset

d5lt5

2 hours ago

DS has perf issues if you parallelize it heavily (24+), especially when the context window is above the limit, on a single machine (with custom llm gateway): it fails 4x more often, and is 2x slower than gpt-5.6.

severino

an hour ago

A little off-topic: where does one use those models such as GLM or DS for this kind of reverse engineering tasks? I think I read many of them refuse to help with tasks like those on their official platforms.

drdebug

5 minutes ago

You can run deepseek-v4.1-flash on a local server with 4xH200@141GB for around 180K EUR. It can serve more than one user so it can be a good investment for a company, especially if you need your data to stay local (although I would advise do go a step up and populate with 8xH200 to serve many more users, ~300K EUR). You can run whatever test you want and you won't be limited by a front-end that pre-filters your requests.

SSLy

36 minutes ago

GLM-5.3; well, the flash variant at least; you just ask what to do and it complies with no objections :^]

TuxSH

an hour ago

GLM 5.3 doesn't seem to refuse vuln research (which it classifies as "audit") and is good at it.

Therefore you use for offensive cybersecurity tasks because Daybreak Red/Mythos is pure unobtainium for us mere plebians.

DB Blue thankfully exists, but I suspect you risk a ban if you use it with codebases you neither own nor use

Tl;dr because it's the only model at the level of 5.4~5.6 that doesn't refuse tasks nor risk your oai account getting banned

For plain RE tasks Sol or Astra should work just fine (I think)

himata4113

23 minutes ago

you can run 10 ds-f agents at the same time for the same cost exploring a much wider surface area.

allie1

2 hours ago

I think it really depends on what the data DS was fine tuned on. If your use case is very specific, it wouldn’t have distilled that knowledge well.

cmrdporcupine

an hour ago

Thing is that GLM 5.3 is many multiples the cost to run, and slower.

I have good results with DS4.1 flash because I can iterate faster. I either provide it with correction, or it discovers its failures via the harness. And seems to respond well to empirical evidence rather than go in circles.

So it might need some prodding, but it's likely in this case it was able to brute force after several runs and collecting some evidence.

surgical_fire

an hour ago

What I find surprising is that DS Flash can do it at all.

I love DS flash, it is an amazing workhorse to implement plans created by more robust models (such as GLM). But a more fair comparison would be of DS Flash with GLM Flash.

jrflo

2 hours ago

Seems pretty bold to claim deepseek is the "best hacking model" while providing zero comparisons to other models...

sva_

an hour ago

Notice the qualifier "our", that is the one they have access to.

dude250711

an hour ago

What if there would be a separate category for distilled models?

fra

7 minutes ago

Interesting result, but the writing is very poor.

Art9681

27 minutes ago

As opposed to what? Is enclave.ai signed up for GPT Cyber or Glasswing?

wg0

an hour ago

DeepSeek is underrated. Basically all Chinese models are good enough for day to day coding at this point.

The 2 trillion dollar ROI on anthropic alone?

Good luck with that.

Art9681

24 minutes ago

Good luck building something of value with "day to day coding". If you're going to compete in the future economy, you're going to compete at the frontier. The low hanging fruit will be of no value. If I can recreate your SaaS with an open weight model at a fraction of the cost, then your SaaS has no value.

fwip

2 hours ago

Edit: Comment deleted - no longer useful.

tyingq

2 hours ago

Apparently they updated it perhaps based on your comment?

> . The accepted runs cost $4.65. Failed attempts and replacement runs increased the complete cost to $5.14.

fwip

2 hours ago

Oh - I see that now. It's possible I missed it originally - I did read the article but I was skimming quickly. Mea culpa, if so.

Aldipower

2 hours ago

You can have 100 runs for the price of the Claude Max plan?

nickysielicki

2 hours ago

When the history books are written and all is said and done, the hubris of this moment where all the American labs decided to punk their investors and join hand in hand in agreeing to let the Chinese win forever is going to be the main story.

palmotea

an hour ago

> When the history books are written and all is said and done, the hubris of this moment where all the American labs decided to punk their investors and join hand in hand in agreeing to let the Chinese win forever is going to be the main story.

Come on. Lecturing about hubris when your message is damn the consequences, full speed ahead?

If it's a race to build the torment nexus, or a race with a nonzero chance of building the torment nexus by accident, I don't care about winning.

strictnein

20 minutes ago

> Lecturing about hubris when your message is damn the consequences, full speed ahead

They said that... where?

EGreg

2 hours ago

Win what? The race to the bottom always has this competitive language.

“If we ban CFCs now the Chinese will win!”

“If we ban chemical weapons, nuclear weapons, etc etc our enemies will triumph! They won’t stop!”

“If we switch to biodegradeable plastic then our rivals will have an advantage.”

“If we dont externalize the costs to our population, then they will, and then will win!”

I think workflows can do the job agents do, 20x cheaper and more predictably and safely. They can completely displace agents, just as HFCs displaced CFCs and then we were able to ban CFCs and phase them out through international COOPERATION. The language of COOPERATION is what saves us vs COMPETITION is all about cutting corners and externalizing costs. Google the Montreal Protocol, Geneva Conventions, Nuclear Non Proliferation Treaty, Unleaded Gasoline etc etc.

Agents have got to be marginalized. They are just popular because the labs need to make a ton of money for their investors and recoup their massive spending on training models.

airstrike

2 hours ago

Those comparisons are pretty irrelevant

You can't compare banning football to banning genetic experiments and say "they are both bans and therefore directly comparable"