Retr0id

26 ms·

661.
by Retr0id 5mo ago
What does "frozen model" mean in this context?
662.
by Retr0id 5mo ago
What does it do?
663.
by Retr0id 5mo ago
It's related in the sense that it's an example of something that didn't go through the formal PEP process
664.
by Retr0id 5mo ago
You really do have to worry about that!
665.
by Retr0id 5mo ago
I think this is uncharitable, it's not like they're inventing new requirements that weren't there before. The PEP process has existed the whole time.
666.
by Retr0id 5mo ago
Memory safety is orthogonal to side-channels, and hardware-enforced isolation (e.g. IOMMU) is more powerful than compiler-enforced isolation (but both are good!)
667.
by Retr0id 5mo ago
The emdash didn't give it away. The structure did – The emdash was just an early warning.
668.
by Retr0id 5mo ago
Glad I got the right impression from the title.
669.
by Retr0id 5mo ago
It's a true statement but I'm not sure it gives a good impression of what localhost actually is.
670.
by Retr0id 5mo ago
Believe it or not, people have been making analogies since before AI
671.
by Retr0id 5mo ago
There's a lot of layperson-unfriendly words in there! Iterating on that: "A feature that allows multiple programs on the same device to communicate without the need for an internet connection"
672.
by Retr0id 5mo ago
Not at all to defend Meta but "a feature that allows software developers to test applications" is a dubious definition of localhost. I also can't come up with a better one.
673.
by Retr0id 5mo ago
It's interesting that it's specifically math-within-CS being discussed here. I can imagine a lot of students "just want to learn programming" (or similar), and see the math as a tedious distraction. As a naturally curiou
674.
by Retr0id 5mo ago
There are a few claudisms e.g. "blast radius", "patterns", "This article shares what’s held up, what’s broken, and what we’ve learned about agent security along the way.", but it's certainly not wholesale
675.
by Retr0id 5mo ago
One attack they missed in the egress proxy is exfiltration via domain fronting. Putting together a full PoC would require a fastly account so I couldn't be bothered to report it. Although, testing again, it might be fixed now.
676.
by Retr0id 5mo ago
> Espressif chips are open source No they're not? Anyway I assume GP was asking due to procurement concerns, not security.
677.
by Retr0id 5mo ago
AV/EDRs are kinda lame but "brute force all known vulnerabilities" is definitely something they can detect.
678.
by Retr0id 5mo ago
Most likely they just have other priorities. A lot of code is not at all performance-sensitive, or is bottlenecked by some other factor.
679.
by Retr0id 5mo ago
Very cool idea to use thinking duration (either in tokens or in wall time) as a side-channel!
680.
by Retr0id 5mo ago
Most hacks can be expressed in terms of "literally just" something.
681.
by Retr0id 5mo ago
> assume that in both cases the output values are clamped before the final typecast
682.
by Retr0id 5mo ago
Both of these assume a linear transfer function, which is rarely the case.
683.
by Retr0id 5mo ago
Whatever this is, it's not RARBG.
684.
by Retr0id 5mo ago
It's marginally newer than TPB
685.
by Retr0id 5mo ago
RARBG used to be the way to go, until they shut down. I'm not aware of a good public replacement.
686.
by Retr0id 5mo ago
rutracker, 1337x, nyaa are the first that come to mind.
687.
by Retr0id 5mo ago
The subtext is, I can tell you used an LLM to write it. You understood what I meant perfectly well, and then pretended not to know what an LLM was.
688.
by Retr0id 5mo ago
So what exactly did you mean by "llm?"?
689.
by Retr0id 5mo ago
You know what an LLM is.
690.
by Retr0id 5mo ago
Please don't use an LLM for the comments too

More ›