lrvick

19 ms·

421.
by lrvick 6mo ago
> The financial aspect: As you say, more and more advanced DRM requires more and more advanced tools Yeah I have broken cutting edge $15,000 HSMs used by fintech companies, with a flash drive. Not worried about this. Most HSM designers a
422.
by lrvick 6mo ago
> Reverse engineering is illegal in many jurisdictions, and especially in the USA thanks to the DMCA. Only if they can prove it. It is amazing how much stuff just shows up on the internet done by anons.
423.
by lrvick 6mo ago
I would trust the python or rust code to be memory safe even if written by a rando that has no idea how to implement memory safety. Meanwhile, I do not trust any human to write memory safe C.
424.
by lrvick 6mo ago
I was about to say I would need a newer gen card to test the new open kernel driver stack, but on some research it appears that the 2080 series was the first to support them, and with that new knowledge I realized I have a 2080Ti on hand al
425.
by lrvick 6mo ago
Out of date. We just merged mimalloc as the default last release.
426.
by lrvick 6mo ago
Alpine and Chimera however both are not reproducible or full source bootstrapped or signed and do not enforce code review. I would honestly steer clear of both for anything but low risk hobby use cases. IMO they should be best thought of as
427.
by lrvick 6mo ago
100%, and it is indeed mimalloc, though you can also use glibc or mallocng if needed.
428.
by lrvick 6mo ago
If anyone sponsors buying me modern Nvidia cards with open kernel support, I would gladly test and support them.
429.
by lrvick 6mo ago
For those that like the LLVM/musl/mimalloc choices of chimera, but also want signed commits, signed reviews, container-native design, full source bootstrapping, 100% deterministic builds, and multi-party-signed artifacts check out
430.
by lrvick 6mo ago
Except you can pay $2500 once for a Strix Halo and have your own Claude Code hosted at home for free with unlimited tokens on 400w.
431.
by lrvick 6mo ago
You can get a sense of what my team and I do from https://distrust.co/threatmodel.html For information on stagex and how we do signed deterministic compiles across independently operated hardware see https://stag
432.
by lrvick 6mo ago
Keep an eye out for a stable rocm PR to stagex in the next week or so if all goes well.
433.
by lrvick 6mo ago
Nvidia has been pledging that for years. If it ever actually happens, I am here for it.
434.
by lrvick 6mo ago
Oh I fully abandoned TheRock in my stagex ROCm build stack. It is not worth salvaging, but it was an incredibly useful reference for me to rewrite it.
435.
by lrvick 6mo ago
I did not claim to represent the market as a whole, but I feel I likely represent a significant enough segment of it that AMD is going to be just fine. I think local power efficient LLMs are going to make those datacenter numbers less relev
436.
by lrvick 6mo ago
Look, I think Sam Altman is a terrible person too, but to anyone reading that hates people like him as much as I do you should want him alive while we work to build a world where he can live out a long life in complete safety, in prison. Vi
437.
by lrvick 6mo ago
I for one do all my LLM assisted linux distro development using hardware racked in my own garage using open weight models. Sure, most people outsource control of the tools to do their job to third parties, and it will end badly for them. No
438.
by lrvick 6mo ago
And the worst privacy, transparency, and FOSS integration due to their insistence on a heavily proprietary stack. Also pretty hard to beat a Strix Halo right now in TPS for the money and power consumption. Even that aside there exist plenty
439.
by lrvick 6mo ago
My team and I have been building stagex, a FOSS multi-party reviewed/built/signed, deterministic, full source bootstrapped, llvm native, container native, musl/mimalloc native linux distribution to build all the things. http
440.
by lrvick 6mo ago
ROCm is open source and TheRock is community maintained, and in a minute the first Linux distro will have native in-tree builds. It will be supported for the foreseeable future due to AMDs open development approach. It is Nvidia that has th
441.
by lrvick 6mo ago
Just spent the last week or so porting TheRock to stagex in an effort to get ROCm built with a native musl/mimalloc toolchain and get it deterministic for high security/privacy workloads that cannot trust binaries only built with
442.
by lrvick 6mo ago
> Yup. Not my problem. And that is why the entire industry is going to roll their eyes and ignore you. No law is putting this genie back in the bottle, so all there is left to do is adapt and push for models with open training data like
443.
by lrvick 6mo ago
If they actually were decided to be infringements somehow, there are millions of different cases needed already, so it is already past the point of enforcement. These sorts of things are almost never tested legally and it seems even less li
444.
by lrvick 6mo ago
You can already generate surprisingly complex software on an LLM on a raspberry pi now, including live voice assistance, all offline. Peoples hardware can self write software pretty readily now. The cost of tokens is a race to zero.
445.
by lrvick 6mo ago
You only need to feed the docs and tests to an LLM to get a "clean room" re-implementation that can then be relicensed.
446.
by lrvick 6mo ago
Music is free, because music piracy is unenforceable so the law is irrelevant. Now, I personally buy most of my music on vinyl because I want to support artists, but absolutely nothing forces me to do that as all the music is available for
447.
by lrvick 6mo ago
Companies have been encrypting code to HSMs for decades. Never stopped humans from reverse engineering so it certainly will not stop AI aided by humans able to connect a Bus Pirate on the right board traces. Anything that executes on the CP
448.
by lrvick 6mo ago
The music industry has an army of lawyers too, and it did not make a damn bit of difference once bittorrent was popularized. IP law means nothing once tens of millions of people are openly violating it. The software industry is about to lea
449.
by lrvick 6mo ago
Because AI is also proving to be very good at reverse engineering proprietary binaries or just straight up cloning software from test suites or user interfaces. Cuts both ways.
450.
by lrvick 6mo ago
There is no such thing as strong end to end encryption on a proprietary operating system no one but the provider can verify.

More ›