jabbany

10 ms·

61.
by jabbany 3y ago
It's signed? Sure you can fake the results of an attestation in your fork, but your fork would be using your own key to sign the response, a key that the site can reject.
62.
by jabbany 3y ago
Ah, I remember seeing some chinese summer math workbook shared online where the answers to each problem could be translated into a bit that could be plotted in a giant grid on the last page. When completed, it would show a QR code, that upo
63.
by jabbany 3y ago
It's really interesting seeing the (what I assume are) error pixels.
64.
by jabbany 3y ago
A lot of full text for research (outside CS) is still locked up behind subscription paywalls. Plus, often times PDFs are not the best format to extract text out of. Interesting suggestion but probably a lot of practical limitations.
65.
by jabbany 3y ago
> The miracle of BERT / embeddings is _not_ having to share words To be fair, the original task is specifically chosen where something like knn+compression has a chance of being good: i.e. out of domain + low resource. Under these c
66.
by jabbany 3y ago
> very small LLM Heh. So does that make it a MLM (medium)? I've always found it funny that we've settled on a term for a class of models that has a size claim... Especially given how fast things are evolving...
67.
by jabbany 3y ago
In that case, why bother with 2FA though...? I use some services that support 2FA that I don't have 2FA enabled on because I don't care if those accounts get hacked/leaked...
68.
by jabbany 3y ago
> If I break my house key I can know exactly where the broken parts are but I still can't unlock my front door. This actually isn't true (it's exactly why digital 2FA is different!) If you break a physical key (already muc
69.
by jabbany 3y ago
Yep. That's exactly what I did. Imported the 2FA seeds into a special new db that's in then put in cold storage (unlike the regular db that gets synced around).
70.
by jabbany 3y ago
>I no longer have to worry about not having my phone on me, or even having to take it out of my pocket. I mean, I appreciate the convenience but can't help feel like this is cheating... The whole point of 2fa was to verify you had t
71.
by jabbany 3y ago
See, this where the metaphor breaks down. At no point was the phone "lost". The 2fa tokens are perfectly safe yet there's no way to get to them... even though you still "have" the things, you can't prove you ha
72.
by jabbany 3y ago
> I DO have to remember some passcodes which I otherwise never use but that's not too hard. Right, but you're giving up a lot of security to do this, since it implies with these rare passcodes someone else could also bootstrap
73.
by jabbany 3y ago
This is definitely good advice. My point here is to note that "phones" are not a good 2nd factor, unfortunately, because they're not that durable and are kind of targets of theft. So moving to solely rely on phone sounds like
74.
by jabbany 3y ago
This is not silly at all :-) Seems pretty in line with the RFC about this https://www.ietf.org/rfc/rfc1178.txt I do something similar but with other mobile/gacha game characters since those names are always in abu
75.
by jabbany 3y ago
The problem with cloud-sync-based managers like the iCloud Keychain is bootstrapping. Since you need to be able to log in to the services themselves to provision access to the passwords. This makes travelling a bit risky, since it's no
76.
by jabbany 3y ago
This is a terrible idea though. I had the misfortune of getting into a cycling accident which broke my phone display (completely lost display output and touch input), and it meant I lost access to all my OTP 2FAs for a couple of days (which
77.
by jabbany 3y ago
I think this is not as bad as attestation abuses. My guess of what will happen is if a service sets `rk=required` and you are on a platform that doesn't want to (or can't) enable/support it, the process would always fail and
78.
by jabbany 3y ago
I wonder if there could be a middle-ground software solution here? E.g. A piece of software (like a passkey manager or keychain service) that transparently simulates a resident key store by using an encrypted database that resolves services
79.
by jabbany 3y ago
Huh I always thought the invitation mechanism wasn't to do with scaling but more of an exclusivity thing to get those who do join more invested...
80.
by jabbany 3y ago
Seems pretty common though, for defining custom architecture configs whatnot? AFAIK the "remote code" is still openly hosted on huggingface so you can audit it if you like. Seems no more dangerous than things like `pip install som
81.
by jabbany 3y ago
Based on what I've heard, I don't think the bar is as high as "formally proven to lack a classical solution" for the whole field. Then again, the caveat is of the two people I know, one is doing cryptography/securit
82.
by jabbany 3y ago
> makes it hard to figure out how users use a website Isn't that the whole point? A user with the no tracking filters turned on in uBO is intentionally trying to opt out. I don't have much sympathy for site owners unless they a
83.
by jabbany 3y ago
Surprisingly, no... I thought I would, but somehow I've avoided this particular transpositional mistake (probably also due to my habit of setting up a ll or la macro for ls -l and ls -a). That said, I also don't actually put &quot
84.
by jabbany 3y ago
I'm not a quantum computing researcher but I have friends who work on it. The way they've described this to me (answering a question around "how does one know what quantum stuff is bs") was that it's largely a set o
85.
by jabbany 3y ago
A hypothetical perfect simulation should be able to do it both ways indeed! However, the current consensus take of quantum uncertainty means _if_ such a simulator exists, it cannot be of our universe. Or, more likely, such a perfect simulat
86.
by jabbany 3y ago
One would be the direction of entropy. Breaking the stick is not "particularly fascinating" because you're going in the direction of increasing entropy. However, _putting it back together_ is. In the simulation it takes no m
87.
by jabbany 3y ago
That doesn't work if . is at the end of $PATH though? Since the real ones would take precedence due to how executable searching works...?
88.
by jabbany 3y ago
This is also interesting since in French (and I think Spanish?) W is (correctly) called "double V"
89.
by jabbany 3y ago
Time zones still matter though. I have been in same-time-zone remote teams and different-time-zone ones. The dynamic is very different. Things that take minutes or hours when everyone is on roughly the same schedule, could easily drag on to
90.
by jabbany 3y ago
You'd have to subtract about 1atm from that, but yes the sudden pressure change would be quite gross. That said, if divers are slowly "eased in" to the high pressure environment, it is actually possible to equalize pressure s

More ›