angry_octet

5 ms·

31.
by angry_octet 2mo ago
The Iran war and SoH crisis has been great for EV uptake outside of the US. In combination with the US AI apartheid, it has been a huge boost for Chinese EVs and Chinese AI adoption.
32.
by angry_octet 2mo ago
I think its nothing like the Enterprise version, which is why they hate having to maintain it, same with Atlassian and Azure/Entra AD. Once service to rule them all, and in the cloud bind them. For security reasons, I would love a low
33.
by angry_octet 2mo ago
It is quite possible for github load balancers to route paying customers to different queues/infrastructure. I think much of the bot activity is paying customers, they just don't have per-client QoS because that would be hard. And
34.
by angry_octet 2mo ago
We are. But we are also experienced at dealing with temperature extremes. The problem is that the 45C temperatures we regularly experience, and Europe just had for the first time, are going to be 50C and on top of prolonged drought and floo
35.
by angry_octet 2mo ago
It's the garden variety violence in the States that gets you.
36.
by angry_octet 2mo ago
Unfortunately it is not so simple. Once you provide a source of intelligence that is accessible over the network you are supercharging any software that can access it. Web interfaces (chat) designed for humans can very easily be used by pro
37.
by angry_octet 2mo ago
This is misunderstanding the attack. The potentially malicious output tokens are processed entirely by classical text processing techniques, i.e. parsing, in order to enable tool calling on the client and via MCP servers. Garden variety v
38.
by angry_octet 2mo ago
You get to the engine via http. Also once you've exploited the engine instance / host you can C2 via http. We're not talking about vulnerabilities in http. There is lots of surface inside the engine, see links in https:&#x2F
39.
by angry_octet 2mo ago
Different models test to find different attack paths. Attackers with bigger libraries of attack techniques will be able to train more dangerous models. There will also be models that make better use of tools, like static analysis and fuzzin
40.
by angry_octet 2mo ago
The attacker supplies the context that triggers these bugs via the http interface. There is no other way to supply it with context. Vulnerable code could exist in token generation and in hook recognition and tool call parsing [1]. There is
41.
by angry_octet 2mo ago
@hobofan How would you access that parser?
42.
by angry_octet 2mo ago
How do you think the tokens get to the vLLM instance? Telepathy?
43.
by angry_octet 2mo ago
Anthropic's watermarking technique is possible, and worryingly could effect low frequency choices (eg as I said, with object placement or style). However, this has to be a generation time decision, you can't really do that with a
44.
by angry_octet 2mo ago
There are side channels available, they have licenced IP blocks, not a whole CPU. All that logic for the cache and interconnect.
45.
by angry_octet 2mo ago
It is quite likely that Snipping Tool is also doing this. Every camera also leaves device specific signature because of its inherent silicon sensor defects. If you want to stay anonymous, don't share images you can't verify at the
46.
by angry_octet 2mo ago
Anyone can make a fast CPU, but is it also a safe and secure CPU? Or does it have architectural defects as a consequence of the race to be fast? See eg LoongLeak and the Loongson processor: https://www.usenix.org/conference&
47.
by angry_octet 2mo ago
People seem very confused about this article. It isn't talking about exploits of sandboxes, it is about attacking the inference engine (e.g. vLLM or llama.cpp or SGlang) via its http interface. vLLM has had exploits in the past, and it
48.
by angry_octet 2mo ago
The Secure Enclave on iOS devices runs sepOS, and earlier fork of the UNSW/NICTA L4 nano kernel work. Obviously Apple has huge resources to verify their own kernel on their own hardware, but seL4 is likely much more secure. With Apple&
49.
by angry_octet 2mo ago
It's completely mad and has the hallmark of an AI generated change, always eager to change one more thing.
50.
by angry_octet 2mo ago
It does multiple rounds of feedback which is called 'thinking' but whether that is critical thinking is unknown.
51.
by angry_octet 2mo ago
And we all know some people that rationalise poor choices and misbehavior, hide their mistakes, etc, to an unacceptable degree. Sometimes the individual knows they are rationalising but continues anyway, other times they seem incapable of s
52.
by angry_octet 2mo ago
And if I go into a shop am I compelled to remove the battery, or is it locked? Is there a key or an app to release the battery?
53.
by angry_octet 2mo ago
If I'm carrying around a giant battery I ought to be able to charge my devices from it, but it is silent on that front. The design doesn't work if you have a mud guard or pannier rack. Also unclear how easily it is detached. Do I
54.
NHS bans pagers due to lack of encryption(bbc.com)
3 points by angry_octet 2mo ago|0 comments
55.
by angry_octet 2mo ago
The obvious next step is to prevent entry if the face is covered. I'm curious to know how resistant the system is to face masks with a printed picture on the front (or indeed, the back).
56.
by angry_octet 2mo ago
If criminality is a matter of public record, why is malfeasance in public office held to amlower standard? Will they not just get jobs one town over? If justice is not seen to be done then we have one law for cops and another for citizens.
57.
by angry_octet 2mo ago
True, it would be better to have a mandatory policy in a system location like /etc, would could over-ride environment if specified, and a command line option to show telemetry status. But accidental omission is more likely than acciden
58.
by angry_octet 2mo ago
It is insane that this key is not kept in a HSM. It would be good if there way a way to attest that a key was generated on and bound to a specific HSM.
59.
by angry_octet 2mo ago
Start with some train travel books. I enjoyed reading Paul Theroux Riding the Iron Rooster before and during travel around China.
60.
by angry_octet 2mo ago
No, that's not why.

More ›