mirashii

6 ms·

31.
by mirashii 2mo ago
What’s the point? To save money paying a human to man a support email. That human would have also been hopelessly uninformed for all the same reasons.
32.
by mirashii 3mo ago
The root cause seems to be known, unlike what this article implies. A bunch of other articles discuss the entropy issue, https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt for one I found quickly.
33.
by mirashii 3mo ago
> give them a json specification, they're not always amazing at following it Used correctly, this hasn't been true for a quite a while. Most inference engines have a form of grammar constrained decoding. See, for example: http
34.
by mirashii 3mo ago
> The Fil-C runtime is tiny compared to TS and C# Sure, this is a simple fact. > So Fil-C is safer than those This is not a simple fact that follows, and a good example of why you seem to be catching so much criticism for overly bold
35.
by mirashii 3mo ago
I generally agree with all of this, but I'll add a few additional remarks. Because it's come up a bunch lately, I decided to do a bunch of code review/audit of the Fil-C codebase, and I'd say while it's got a lot of
36.
by mirashii 3mo ago
I think the consensus is that this would be the wrong end to tackle the problem from. Your project should include ruff at the version it wants to use in its pyproject.toml. Bump the version when you're ready to spend the time on one pr
37.
by mirashii 3mo ago
I've spent some more time over the last day looking at Fil-C more closely, and come to the conclusion that this: > The thing that makes races hard to debug in C or C++ is memory corruption; that doesn’t happen in Fil-C is just blata
38.
by mirashii 3mo ago
The really silly thing is that Fil-C and Zig here have chosen a definition of memory safety that specifically excludes a bunch of overflow vulnerabilities and type confusion. At least it’s been specifically defined, but such a narrow defini
39.
by mirashii 3mo ago
I’m having a hard time understanding how these two things can be true at once. Just because the capability exists that somewhere in my program a valid pointer to a piece of memory might exist (what I understand accessible to mean), doesn’t
40.
by mirashii 3mo ago
I like "honor system" as a term. I've been looking for the right term to replace the irresponsible usage of guardrails with, and best I've had so far is the pinky promise protocol.
41.
by mirashii 3mo ago
Clearly not. Good security is about defense in depth. The service that was exploited was meant to be an offline, frozen package cache, it shouldn't have been anywhere near a network boundary to even allow this through. A single exploit
42.
by mirashii 3mo ago
There is some aspect of baking the rules into the model, that's what I refer to as RLHF above (which I use here as more a catch-all term for a variety of post-training activities), but there are also external to the model classifiers t
43.
by mirashii 3mo ago
> They didn't turn off the network protections Right, but this is my point in saying I can't reach the same conclusion that they've invested a lot into these systems for production models. Either they had better network pr
44.
by mirashii 3mo ago
> I expect OpenAI would agree with you that "the lack of a real sandbox or airgap is nothing short of irresponsible on OpenAI's part". They have clearly invested a lot in those systems for their production models, but in t
45.
by mirashii 3mo ago
> Given the absence of guardrails there was nothing to prevent the model from attempting to break out of that sandbox, break into Hugging Face, and read the answers from there instead. I've said this many times before and I'll
46.
by mirashii 3mo ago
Add to that list respecting the TOS of the user's ISP so that the user does not get banned, and providing some sort of remuneration if illicit activity through the proxy causes problems for the primary user, and then _maybe_ you could
47.
by mirashii 3mo ago
There’s a number of comments and linked threads suggesting it is not, but easier to just link the biggest thread than try to track all the subthreads.
48.
by mirashii 3mo ago
A Github issue with actual data instead of just someone reposting info: https://github.com/openai/codex/issues/28224 Previously discussed: https://news.ycombinator.com/item?id=48626930
49.
by mirashii 3mo ago
A Github issue with actual data instead of just someone reposting info: https://github.com/openai/codex/issues/28224 Previously discussed: https://news.ycombinator.com/item?id=48626930
50.
by mirashii 3mo ago
Yes. Flash cells in SSDs are rated for a particular number of write cycles.
51.
by mirashii 3mo ago
This metaphor, while it seems intended to challenge the OP, kinda reinforces it. Many countries and cultures give some limited access to alcohol at a younger age, and the result is generally that they end up having fewer instances of proble
52.
by mirashii 3mo ago
This is and has been a common term in any systems programming concept for decades. You can, for example, search CVEs and easily find some from over 15 years ago: https://www.cve.org/CVERecord?id=CVE-2010-1119 It was even en
53.
by mirashii 3mo ago
> what is most likely a simple mistake or process breakdown I think this needs justification. My status quo is to believe that most times I have a problem when dealing with these large corporations that they've made any process for
54.
by mirashii 3mo ago
> that constellation is already up there and if its fine right now A lot of astronomers disagree.
55.
by mirashii 4mo ago
The default sandboxing for Codex does not allow the agent to access .git
56.
by mirashii 4mo ago
The math trades still happen regularly at cons, e.g. Origins had one just last week.
57.
by mirashii 4mo ago
I guess I'm glad I snap bought, looks like I may have gotten the last one on Amazon for the 14" at least. I see a couple 16" options around at slightly higher than they were at retail but steal cheaper than Apple's new p
58.
by mirashii 4mo ago
There are some Apple resellers that haven't quite caught up to the price increase yet. I just got a 14" M5 Max 128G, 2TB for $5100 off Amazon through Adorama, https://expercom.com/products/16-inch-macbook-pro-
59.
by mirashii 4mo ago
That would be why it chose a VM that is explicitly designed for sandboxing rather than native executable code or similar, the risk can be minimized by reducing the surface area available to that executable code to almost nothing.
60.
by mirashii 4mo ago
It would take those devices having synchronized atomic clocks, which they do not.

More ›