kiitos

25 ms·

331.
by kiitos 1y ago
First of all, TSAN can identify the presence of a data race, but it can't prove the absence of any data races. If -fsanitize=thread doesn't flag anything, that's insufficient evidence to say that there aren't any data ra
332.
by kiitos 1y ago
...so long as your code doesn't use unsafe, neither directly nor transitively.
333.
by kiitos 1y ago
> This implies that TSAN does not detect "data races" as it is usually understood in the CS field -- it does not detect anything in the C++ program. What TSAN detects is only a particular, distinct situation that the C++ standa
334.
by kiitos 1y ago
Yeah in fact there is no such thing as a benign data race -- https://web.archive.org/web/20181022150257/https://software....
335.
by kiitos 1y ago
Java defines what is or isn't a "data race" in one way, as part of its spec. C++ defines that same term "data race" in another way, as part of its spec. Your linked papers use a definition of "data race" w
336.
by kiitos 1y ago
Backoff is a client-side behavior, so if you want to give different backoff behaviors to different classes of upstream services, you just define those backoff tables somewhere where the client can pick from them based on the target service
337.
by kiitos 1y ago
> data races are generals properties of programs that people can and do discuss in language-agnostic contexts "Data race" is a specific property defined by a memory model, which is normally part of a language spec; it's no
338.
by kiitos 1y ago
> Two threads writing a value to the same memory location (even atomically) is usually a data race in the CS/algorithm sense (due to the lack of synchronization), but not the C++ sense You seem to conflate the concepts of "data
339.
by kiitos 1y ago
It's the "that's" that's the issue. Prescriptive grammar brings the drama; no matter what I do, I can't stop loving it. > There is one reason I love prescriptive grammar: it brings the drama. Masterclass.
340.
by kiitos 1y ago
The title is pretty awkward and probably wrong, but your alternative here is at least as awkward and probably even more wrong. Both of these bad sentences begin their second clause(s) with "that's...", which obviously doesn&#
341.
by kiitos 1y ago
It's been quite awhile since I've seen a real honest actual "too long, didn't read" comment in the wild, hats off to you, my good and intellectually disinclined friend.
342.
by kiitos 1y ago
em dashes aren't cool—you know what's cool? en dashes, like maybe 10–15 of them?
343.
by kiitos 1y ago
Nah, this is pretty awkward. "I love semicolons; they bring the drama!" "I love semicolons, because they bring the drama" "Semicolons: I love them for their drama" "Semicolons, drama, love: an incoherent j
344.
by kiitos 1y ago
IF you just said "take a look" then it would be a real stretch to allow the stuff that the LLM looked at to be used as direct input for subsequent LLM actions. If I ask ChatGPT to "take a look" at a webpage that says &qu
345.
by kiitos 1y ago
If you've configured an configured that LLM with an MCP server that's able to both read data from public and private sources, and to emit provided data publicly, then when you submit a prompt to that LLM that says "review ope
346.
by kiitos 1y ago
I really have no idea what your problem is with me, nor do I understand what you're trying to convey. I certainly don't see how any of this stuff relates to what I said. But, in any case, good sealioning effort, 10 on 10.
347.
by kiitos 1y ago
I mean, in the absolute sense, sure, but the "risk" carried by USD is a categorically different, exponentially smaller thing than the "risk" associated with any stable coin. They're not really comparable.
348.
by kiitos 1y ago
Literally Chrysler uses rubber mallets to install windshields.
349.
by kiitos 1y ago
Sorry, I probably was being imprecise. You're correct that the [GitHub] MCP server really does serve requests with responses. But my point was that certain kinds of requests (like create_new_pr or whatever) have side effects that make
350.
by kiitos 1y ago
The repo owner needs to set up and run the GitHub MCP server with a token that has access to their public and private repos, set up and configure an LLM with access to that MCP server, and then ask that LLM to "take a look at my public
351.
by kiitos 1y ago
The situation you're describing is not "this situation" that I was describing.
352.
by kiitos 1y ago
There is no attacker in this situation. In order for the LLM to emit sensitive data publicly, you yourself need to explicitly tell the LLM to evaluate arbitrary third-party input directly, with access to an MCP server you've explicitly
353.
by kiitos 1y ago
The token you provide to the GitHub official MCP server determines what that server is allowed to access. But the MCP server doesn't just serve requests with responses, which is the normal case. It can read private data, and then publi
354.
by kiitos 1y ago
Full attestation doesn't guarantee stable 1-to-1 valuation, even with all of those things USDC isn't equivalent to 1USD and treating it as if it were carries risk.
355.
by kiitos 1y ago
GitHub provides the GitHub MCP server we're discussing right now. That tool allows interactions that violate the access control constraints defined by GitHub itself. If you wired up "some other automated tool" to the GitHub A
356.
by kiitos 1y ago
ebay has somehow managed to support this use case for something like 20 years on the normal existing banking infrastructure
357.
by kiitos 1y ago
stablecoins don't protect you against price fluctuations. they don't even guarantee reliable mapping to their underlying currency.
358.
by kiitos 1y ago
I dunno! But if it can't, then it can't allow itself to be instantiated in a way that allows these kinds of mixed interactions in the first place.
359.
by kiitos 1y ago
The MCP protocol explicitly says that servers are expected to be run in a trusted environment. There have been some recent updates to the spec that loosen this requirement and add support for various auth schemes, but
360.
by kiitos 1y ago
Random commenters on your GitHub repo aren't able to run arbitrary prompts on your LLM. But if you yourself run a prompt on your LLM, which explicitly says to fetch random commenters' comments from your GitHub repo, and then run t

More ›