patrakov

28 ms·

361.
by patrakov 3y ago
I never said that this makes sense or that it was enforceable - yet this is what you get when your company is infected by checklist-based compliance people and if an important customer regularly sends these checklists as a condition of cont
362.
by patrakov 3y ago
Please note that hosting a publicly accessible server in your room at home is specifically prohibited by some employers in heavily regulated industries, and if found, this may result in a large fine (enough to cover the company security re-
363.
by patrakov 3y ago
No. The catch is that what's quantized here is not individual weights but groups of them.
364.
by patrakov 3y ago
I predict that even less-than-1-bit viable quantization methods will be found eventually. Of course, the bits-per-weight figure should be interpreted as something average: e.g., group-quantizing 32 weights into 24 bits would be 0.75 bits pe
365.
by patrakov 3y ago
(2022), and discussed multiple times already: https://news.ycombinator.com/item?id=37421132 https://news.ycombinator.com/item?id=31752760
366.
by patrakov 3y ago
This is if we follow the recommendation to use a GPU. But if you don't need 200+ tokens per second and are happy with something like 10-15, a CPU-only solution is acceptable and would cost significantly less.
367.
by patrakov 3y ago
It "just works" in the default configuration on traditional hardware, where plugging the headphones in does not result in the need to move streams to a "different" sound card. I have slightly unusual hardware in the form
368.
by patrakov 3y ago
On Windows, yes. On Linux, the proprietary driver was OK (consistently connecting at 48kbps and keeping it for hours), except for the micro-freeze when going off-hook. LT Win Modem.
369.
by patrakov 3y ago
> Eventually, AES-256 can probably be brute-forced in a reasonable amount of time. No. See https://security.stackexchange.com/questions/6141/amount-of-... Time is not the bottleneck, energy is. They invoke Land
370.
by patrakov 3y ago
Yeah, sure. The bad guys will attempt to circumvent the WAF, and, if it is just regexes, will do it after the Nth attempt. However, bad developers will not normally obfuscate their code multiple times to the degree required to evade the sta
371.
by patrakov 3y ago
Here is a big lesson that I "learned": actual security does not matter for the purpose of avoiding risks and fines. What matters is the ability to say "we got hacked despite following the accepted best practice" or &quot
372.
by patrakov 3y ago
There is a project to fix this. https://blog.davidedmundson.co.uk/blog/xwaylandvideobridge/ https://invent.kde.org/system/xwaylandvideobridge
373.
by patrakov 3y ago
Not crazy at all! I have been that bus-factor-1 employee. I raised my concerns to the CEO several times, and it always looked like this: "I am a bus-factor-1 employee, this is bad - please teach somebody else in the company - I tried a
374.
by patrakov 3y ago
Do not firewall them off. Serve different content and break functionality in a self-explanatory way (i.e. an email that tells what's wrong).
375.
by patrakov 3y ago
Metrobank (for business customers) in the Philippines. Regular customers of the same bank have a different app with less strictness. And yes, root hiding works on a test phone (which has a copy of the app not linked to my bank account), and
376.
by patrakov 3y ago
Yes, see https://github.com/morrownr/USB-WiFi/ for an overview. Despite being hosted on GitHub and having an issue tracker, it is a documentation-only project, not software.
377.
by patrakov 3y ago
In my case, it's different. Open the app the first time, accept the license, it contacts the server (anonymously, as it doesn't have any user data at this point) and establishes a random TOTP seed and a hex ID (which is an unchang
378.
by patrakov 3y ago
Let me reply item-by-item. > No, DRM is safeguarding other people's keys on your device. Correct - in this case, safeguarding mainly means making sure that the nominal owner of the device does not extract the keys. > There's
379.
by patrakov 3y ago
Not generally possible. Any application that stores any data in the Secure Element of the phone is, by design, not capable of being backed up, even with root. Examples include various bank apps that serve as 2-factor authenticators. Without
380.
by patrakov 3y ago
The Soviet Union built schools in every village instead (even if it meant a school for just two students), and built villages around "advanced" schools where the interested students could relocate, thus making such buses mostly un
381.
by patrakov 3y ago
That's how I effectively lost my Azure account. "According to our records, you originally registered this account while in Russia, and there is no way to change the country of the account. So we will continue to apply sanctions to
382.
by patrakov 3y ago
Even if you are 146% careful, there is still a chance that your own country officially renames you by introducing new rules for transliteration between its alphabet and the Latin one. Happened to me in 2020 - the name I use online matches m
383.
by patrakov 3y ago
Do they take into account whether I provide an email or not in their final score?
384.
by patrakov 3y ago
Even if the signed integer operation overflow were not UB but implied wrapping, the purported post-factum check in the article is not semantically equivalent to properly checking the range beforehand. "if ((INT32_MAX / 0x1ff) <
385.
"<ESC>[31M"? ANSI Terminal security in 2023 and finding 10 CVEs(dgl.cx)
278 points by patrakov 3y ago|162 comments
386.
by patrakov 3y ago
Better links to the same news, without paywall: https://meduza.io/en/news/2023/10/18/defense-lawyers-arreste... https://apnews.com/article/russia-navalny-dissidents-prison-...
387.
by patrakov 3y ago
The official version spread by the propaganda is that his lawyers did not only what lawyers should do, but also helped him pass letters from the jail to the outside world and thus control his "terrorist" organization (Anti-Corrupt
388.
by patrakov 3y ago
Intel WiFi chips work as acess points only in the 2.4 GHz band. You can add an "Alfa Network AWUS036ACM" USB WiFi adapter as something that works in the 5 GHz band, but please don't expect more than 400 Mbps from it.
389.
by patrakov 3y ago
This may be applicable for desktops, but not for servers. In a low-memory situation, the admin wants to ssh into the server and fix the problem that led into memory exhaustion in the first place. Whoops, MGLRU freezes the active file cache
390.
by patrakov 3y ago
The answer from the article is that the IR optimizer, acting on the LLVM bitcode, is able to combine the separate lines for getting the quotient and the remainder into one assembly instruction. The problem with the article is that the same

More ›