raesene9

17 ms·

181.
by raesene9 3y ago
My experience is that whilst it's not perfect, modern models can create images with text that is correct, relatively often. As a test I just tried ChatGPT with the prompt :- Hi ChatGPT can you give me a picture of a banner that says &q
182.
by raesene9 3y ago
FWIW I recently got a color Laser brother printer (MFC-L3740CDW) that's been working well. My needs aren't for super high resolution or anything but it does the basics well enough, and doesn't appear to have any subscription
183.
by raesene9 3y ago
Accurately determining risk relies on decent starting data, otherwise you run the risk of Garbage-in, Garbage-out. Whilst things like VEX and EPSS can help, they are based on the starting point that is CVE assignment and CVSS score. I don&#
184.
by raesene9 3y ago
For another opinion on this topic https://jericho.blog/2024/02/26/the-linux-cna-red-flags-sinc... Having a large number of new, unscored, CVEs in the Linux kernel is going to make things... interesting. From
185.
by raesene9 3y ago
I agree it can be overused, but I've been running into more examples recently. One that springs to mind is that I asked GPT-4 to retrieve a webpage from the kubernetes docs site (the CVE list) and put some information from it into a ma
186.
by raesene9 3y ago
Slightly off-topic on this, but are there any apps that manage posting across BlueSky/Mastodon/Threads/Linkedin? With the fragmentation of social networks and different audiences being in different places, it's a bit ann
187.
by raesene9 3y ago
If you go by version number and anything < 1.0 being not production ready, I recommend avoiding reading any of the dependency files for large software products which are often used in produciton, they might cause you some concern... h
188.
by raesene9 3y ago
I kind of doubt he'd do that. AFAIK most of Elon's wealth is in Tesla shares, and a lot of them are pledged against loans. If his Tesla shares go done seriously in value that could leave him open to margin calls. Over time, he may
189.
by raesene9 3y ago
A small point on that last bit. The bearssl authors are pretty conservative when it comes to development milestones, I'd guess that their 0.6 would be pretty solid :)
190.
by raesene9 3y ago
Really not that uncommon in rural areas. I'm in the Scottish highlands (only an hour from Glasgow) and when the winter storms come in, we can be out of power for some hours, there's been a couple of instances in the last year, so
191.
by raesene9 3y ago
It is very tricky. In some industries you see things like device certification and regular external testing requirements (e.g. weights and measures) but applying that to the very fast moving world of software would be .... tricky, to put it
192.
by raesene9 3y ago
Yep that's a huge challenge. The other one is that individual defendant's are unlikely to be able to afford the expertise needed to analyze a large complex setup, even if the details of the system (e.g. source code) are made avail
193.
by raesene9 3y ago
I was reading an interesting bit today ( https://read.uolpress.co.uk/read/electronic-evidence-and-ele... ) about the "presumption of reliability" that can occur in cases involving "mechanical instruments&q
194.
by raesene9 3y ago
I think that answer overflow is opt-in, that is individual communities have to actively join it, for their content to show up. That would mean that (unless answer overflow becomes very popular), most discord content isn't visible tha
195.
by raesene9 3y ago
In an ideal world where the incentive of a student is solely to broaden their understanding perhaps that's true (although I'd still be inclined to use an LLM for getting a broad brush overview of a new topic, or ideas of where to
196.
by raesene9 3y ago
In an ideal world, I'm sure what you say is true, but in the real world of publications and incentives for journalists, I doubt that's what happens. Anyone reading news media recently will have noticed the vast amount of badly wri
197.
by raesene9 3y ago
You understand that this article wasn't meant as a serious attempt to broaden understanding, but instead as a "game" to see what LLMs can do? The author explicity mentions that in the article and highlights that they would ha
198.
by raesene9 3y ago
It's worth noting that whilst vulnerability scanners are very useful, they pretty easy to bypass, if someone creates an image and doesn't want them to flag things up. One very basic example is https://raesene.github.io&
199.
by raesene9 3y ago
There's a number of image scanners which (IME) can produce different results from each other, although it's not always as clearly right/wrong as you might expect. Trivy (that this page is based on), Docker Scout, and Grype ar
200.
by raesene9 3y ago
For production, I'd recommend not using any image that isn't in the base image set, which are maintained by Docker, and if you're using Docker Hub, you already trust Docker :) There is also "verified publisher" sche
201.
by raesene9 3y ago
I came across an interesting example of this concept today https://twitter.com/jakezward/status/1728032634037567509 . A company basically created a large quantity of AI generated content in order to get SEO ranking
202.
by raesene9 3y ago
I said Average for a reason :D I didn't say you can get "top-notch" security developers for that. I don't think there's industry numbers for that set of people in the UK, as it's not a big enough set. However I
203.
by raesene9 3y ago
Whilst competitive salaries are important, it's fair to say that, outside of the US, you can get good people for a lot less than $338k/year. To give one example of a (not that cheap) market, outside of London average developer s
204.
by raesene9 3y ago
Not live for me in the UK 8am GMT... Ideally they'd be a bit more transparent about their rollout process/timeline
205.
by raesene9 3y ago
oh I'm sure they're the best, they wouldn't have been so successful for as long if they weren't, but it does leave a slight concern (to me) if the absolute best people at running a company think there's no way to ge
206.
by raesene9 3y ago
Indeed but only at the rate of ~10% of profits ($10.761b for the quarter)
207.
by raesene9 3y ago
I'd be extremely surprised if the parent company (berkshire hathaway) had structured their companies in a way that left them liable to re-insurance risk :) They may own re-insurance companies, but that doesn't make them liable for
208.
by raesene9 3y ago
I'm not GP but, in theory, if a corporation can't find any opportunities for use of capital greater than holding it in safe/cash-like instruments and sees no possibility of those opportunities emerging in the short-medium t
209.
by raesene9 3y ago
Do you have a citation for the idea that wealthy Europeans are getting the bulk of their treatment in the US? I can't say I've ever come across that idea at all. I've heard of people paying for private medical care, to supple
210.
by raesene9 3y ago
Kata containers are a cool concept but can be a bit difficult to get started with. Last time I tried it the standalone Docker/containerd integration wasn't working well, the project seemed to be more targeting deployment as part o

More ›