the8472

55 ms·

931.
by the8472 4y ago
browser.tabs.unloadOnLowMemory defaults to false for me? and for cookie sandboxes you can use container tabs.
932.
by the8472 4y ago
> I'm not much of a PC gamer, and so I haven't built a machine from scratch or thought much about individual components in decades. There's a grown-up version: build/videoediting/whatever-machine with a Threadrip
933.
by the8472 4y ago
> and no one is actually testing what proportions of results those are The idea that models could possibly overfit the training data is hardly a new idea. It's standard practice to test for that. Check section 7 of the PaLM paper fo
934.
by the8472 4y ago
Part of the evaluation procedures for the models like these is checking whether the output they produce is present in the training set. The fraction of samples being verbatim reurgitations is low unless you prompt-engineer your way to that,
935.
by the8472 4y ago
> I calculated I would need about 70 to 80 kWp (optimized for winter sun angle, e.g. pretty steep modules at 60° or 70° that relatively produce less in summer, but more in winter). I know there are sun-following installations but those n
936.
by the8472 4y ago
Part of the problem is that handles on directories on which one can then use the the *at family of syscalls are not first-class citizens in many programming languages. Which in turn might be due to portability concerns with windows, e.g. Ja
937.
by the8472 4y ago
I don't like the "simpler, more innocent" phrasing, at least if we consider the innocent ~ naive connotations. It obfuscates that not spending resources on attacks and the perpetual defenses that would render the attacks usel
938.
by the8472 4y ago
But that's the issue. In the example I gave we already have a broker (the root process spawning ssh shells). But we want to restrict the broker too to make it more difficult to exploit. To do that we need to pledge without inheritance.
939.
by the8472 4y ago
No. Having inheritance a default is fine. Not having an option to opt out when your program voluntarily tries to secure itself is terrible because it means fewer programs can use it to secure themselves. A classic example would be an ssh
940.
by the8472 4y ago
Landlock suffers from the same limitations as seccomp when it comes to pledge-emulation: you can't opt out of inheritance.
941.
by the8472 4y ago
> Pledging causes most system calls to become unavailable. Your system call policy is enforced by the kernel, which means it can propagate across execve() if permitted. My understanding is that promises aren't inherited across exe
942.
by the8472 4y ago
https://xkcd.com/2584/
943.
by the8472 4y ago
If we cannot trust the masses to inform themselves then democracy is dead, with it relying on on informed voters. If people are only allowed to see the pre-approved narratives then we get into the situation where the WHO claiming that covid
944.
by the8472 4y ago
The question is how competitive is the market? Would he get more money by auctioning it off? For something like smartphones there are plenty of governments that would buy. But for a game console? It's mostly commercial pirates and I gu
945.
by the8472 4y ago
> One could scrape Facebook or some other social media site for faces, deepfake them onto porn, and then blackmail[0] the users into paying money to avoid the release of "porn starring them". How about doing something about * b
946.
by the8472 4y ago
A test may be of limited use anyway. The AI might be deceiving its creators (false negative). Or someone might train an AI with the goal to trigger a false positive. It would only be useful if you had a cooperative AI not designed to game t
947.
by the8472 4y ago
> For example, contrary to NT, syscalls can't callback to userspace. There are some mechanisms that can call back into userspace during syscalls such as seccomp filters, FUSE, ptrace, userfaultfd, fanotify, the syscall_user_dispatc
948.
by the8472 4y ago
They can still do the shadow driver thing for testing.
949.
by the8472 4y ago
The expected value clearly is different. The mob primarily destroys and extracts and at most provides a token amount of real protection. The government provides advance warning for them to handle things on their own without further interven
950.
by the8472 4y ago
The incentive here is for them (or their local governments whom they lobbied on the minimum distance rules, which are quite excessive in some cases) to look for alternatives if they insist on NIMBY. It will only escalate if they don't
951.
by the8472 4y ago
Firefox appears to support[0] name constraints[1] in CA certificates. It even appears to have code that supports adding further constraints to the root certificates after they were imported, but that doesn't seem to be exposed anywhere
952.
by the8472 4y ago
If your concern is kernel attack surface then I have bad news for you. Inside the container's network namespace it's still using standard syscalls. Only on the host side it takes a detour through userspace. So you get all the down
953.
by the8472 4y ago
The problem with rootless is that you don't get a native network stack since setting up bridges and veth devices still requires some elevated capabilities. But instead of running full root this could be outsourced to a helper executabl
954.
by the8472 4y ago
What is acceptable varies. Some things are very low-stakes. Even if your domain-name is important you could manage it with another registrar and still use OVH for their cheap metal.
955.
by the8472 4y ago
Here's a nice illustration of mechanics vs. graphics. https://twitter.com/robotduck/status/759529875992698880
956.
by the8472 4y ago
DALLE1 was able to render text[0]. That DALLE2 isn't probably is a tradeoff introduced by unCLIP in exchange for diverse results. Now the google model is better yet and doesn't have to make that tradeoff. [0] https://op
957.
by the8472 4y ago
Models can produce out-of-distribution results if you push them. The results won't necessarily be good, but describing it as an average, suggesting that it'll always be inside the some tight hull of the training set is misleading.
958.
by the8472 4y ago
A token price (9€/m is cheaper than even subsidized region-specific tickets for students or the elderly) likely has some benefits such as making it easy to count interest based on sales. It might also make the inrush a bit more managea
959.
by the8472 4y ago
Doesn't that enable downgrade attacks?
960.
by the8472 4y ago
> This was all debated and considered extensively while the moves to universal HTTPS were happening. People moved read-only sites as well for a reason. And the entire discussion was primarily motivated by pervasive surveillance. Which is

More ›