axoltl

8 ms·

61.
by axoltl 2y ago
Speaking as someone that has both broken crypto systems and designed ones that got broken (internally, in review, before they made it out), it takes a lot of practice to become proficient at cryptography. Sometimes a little bit of knowledge
62.
by axoltl 2y ago
That's actually a super common way to handle licensing in hard IP. You don't want to spin different revisions of a chip with and without the IP, that's expensive. So you build in fuses to permanently disable the IP. This happ
63.
by axoltl 2y ago
You are correct. I was confusing this technique with Novel View Synthesis through diffusion (recent paper: https://arxiv.org/abs/2408.06157 ) where inference means generating frames rather than points.
64.
by axoltl 2y ago
I'm having a hard time finding a reference to the hardware the inference is run on. The paper mentions training was done on a single A100 GPU so I'm going to assume inference was run on that same platform. The 22fps result is some
65.
by axoltl 2y ago
Curious what the problem what the form factor is? I wear it several hours a day every day and have had no complaints. (I will say I use the double-loop strap instead of the adjustable head-band you see in the ads all the time. The top loop
66.
by axoltl 2y ago
I'm with you. I use my Vision Pro several hours every single day but 95% of the time I have my macbook mirrored into it. At the very least I was hopeful VisionOS 2 would let me pull apps into my space without the desktop, but that was
67.
by axoltl 2y ago
They could be - however foolhardy - closing off potential avenues for people to attack them in court? I could see someone making the argument "but you're letting <insert other app> use alternate payment methods!".
68.
by axoltl 2y ago
Always happy to talk! I've put a temporary email in my profile.
69.
by axoltl 2y ago
Cryptography is tricky to get right. There are a ton of subtle ways things can go wrong! I think the first thing to realize is your problem has probably been solved by someone else, so you can use off-the-shelf solutions. TLS has a pre-shar
70.
by axoltl 2y ago
I took a quick look at the crypto design here, and it is deeply flawed. Please don't use this. The key exchange is simply an XOR of the pre-shared key with the session key instead of a proper key wrapping, there's no chaining mode
71.
by axoltl 2y ago
These are likely for muscimol gummies as opposed to psylocybin gummies. Despite having psychoactive components muscimol containing mushrooms (Amanita Muscaria, etc.) are legal, as is muscimol itself.
72.
by axoltl 2y ago
The current version of the Hippocratic Oath says this: """ I will apply, for the benefit of the sick, all measures that are required, avoiding those twin traps of overtreatment and therapeutic nihilism. """ Whi
73.
by axoltl 2y ago
This doesn't generally apply but Apple has a bunch of hardening in place that means you don't just have an RWX mapping hanging around: https://developer.apple.com/documentation/browserenginekit/p... On t
74.
by axoltl 2y ago
You're either being sarcastic or wildly underestimating how hard it is to write an exploit. I haven't written about exploit dev publicly for a _long_ time, but I invite you to read https://fail0verflow.com/blog&#x2
75.
by axoltl 2y ago
You can do this today by querying the AST output by a compiler. Regardless, the parent comment was talking about exploits, not vulnerabilities/bugs. Vulns are a dime-a-dozen compared to even PoC exploits let alone shippable exploits.
76.
by axoltl 2y ago
Writing exploits is a bit of an art-form. Current incarnations of GPT have trouble writing code at a level more advanced than a junior developer.
77.
by axoltl 2y ago
The syscalls involved are in a lot of sandboxes, so worst (or best, depending on your point of view) case scenario it's a pretty universal privesc. There's a lot of steps to get there though. I'm not super familiar with the m
78.
by axoltl 2y ago
"(This is the same microcontroller, just two bugfix revisions.)" It is exactly the same microcontroller! They're just two different packaging options. One is a 7" reel with 500 units the other is a 13" reel with 340
79.
by axoltl 2y ago
Apple actually does not control the private keys baked into the hardware, see the "Root Cryptographic Keys" section of their security whitepaper: https://help.apple.com/pdf/security/en_US/apple-platf
80.
by axoltl 2y ago
Two small notes on definitions: --- "Secure Elements / Hardware Roots of Trust: Embedded within chips, these elements provide a secure base for trusted operations and are often used in mobile devices and IoT applications." SE
81.
by axoltl 2y ago
The tests they ran were very different from what's usually run, mostly involving perception of usefulness to humans. I don't see what website they would've cited from?
82.
by axoltl 2y ago
How would a warrant work in this case? Using Silicon Data Protection[0] the hash of the currently running firmware (of both the AP _and_ the SEP) is locked into hardware registers in the PKA engine used by the SEP. This hash perturbs the ke
83.
by axoltl 2y ago
The Llama 3 license says: "If, on the Meta Llama 3 version release date, the monthly active users of the products or services made available by or for Licensee, or Licensee’s affiliates, is greater than 700 million monthly active users
84.
by axoltl 2y ago
Is changing the WiFi SSID not executing a command on the device? It isn't _arbitrary_ commands (yet), but it's definitely executing _a_ command.
85.
by axoltl 2y ago
Yep, the binaries are all arm64e.
86.
by axoltl 2y ago
The term "white privilege" is a bit of a misnomer. What it's mean to convey is the fact that a white person is much less likely to get passed over for something than a person of color. It doesn't mean an actual privilege
87.
by axoltl 2y ago
While working it's a combination of web surfing, terminals and documentation in PDF form. When I'm not working, watching movies on the thing is an absolute treat and Moonlight works pretty flawlessly for large-screen gaming.
88.
by axoltl 2y ago
The Vision Pro takes away all the glare you'd normally get on a screen, and (to me) that basically reduces the distractions down to zero. If I need fewer distractions still, I'll pull up one of the environments (I like the moon!)
89.
by axoltl 2y ago
Having worked with stong before I can assure you they're perfectly capable of articulating their thoughts when they want to. This is quite a bit more off-the-cuff.
90.
by axoltl 2y ago
I'm still mostly surrounded by large 2D panels of information (Xcode, Safari, terminal windows, etc.). I do fill the space with these panels. It's not uncommon for me to have 5-6 things around my Mac's virtual display. I&#x27

More ›