varenc

6 ms·

31.
by varenc 3mo ago
You're ignoring the asymmetry with security. The attacker just needs one exploit chain, whereas the defender needs to block every avenue. Open access to models with no guardrails greatly benefits the attackers more than the defenders.
32.
by varenc 3mo ago
the ' that happened ' makes it too long for the HN submission title length limit. Maybe simonw can suggest an alternative title that fits within the limit, that doesn't misrepresent the post.
33.
by varenc 3mo ago
Agreed. Big love for exe.dev. For quick low stakes projects, using their Shelly assistant is the simplest way to give an LLM a fully persistent VM with web services I've found.
34.
by varenc 3mo ago
Digression: You can link directly to a page in a pdf with a url like this: https://arxiv.org/pdf/2607.13335#page=27
35.
by varenc 3mo ago
The way source maps are used by dark net sites, and the reason it exists, are probably unrelated! I think it was just an early form of using image tiling for big efficiency gains. Now with HTTP2/QUIC you can request many small individu
36.
by varenc 3mo ago
great point! Though what about the default windows APIs for 'calling out to shell'. Like using `subprocess.run(...)` in Python. My suspicion is that works like cmd.exe? edit: answered myself. Seems like subprocess.run works like
37.
by varenc 3mo ago
fun fact: source maps are used by some Tor onion sites ("dark net") as part of a captcha process without using JavaScript. If you present the user with an image, and ask them to click on a particular part of it, the server can re
38.
by varenc 3mo ago
Same. Recently Ubiquiti has been putting more and more into the local API, so this should be getting easier to do. The Home Assistant UniFi integration just recently has started moving from private undocumented API endpoints to the newer p
39.
by varenc 3mo ago
Free Free is celebrating this DEA rule because they say they're exempt due to their use of natural kratom leaf, not synthetic: https://botanictonics.com/pages/consumer-education I am skeptical though since I presu
40.
by varenc 3mo ago
I doubt it. This is just normal Windows behavior. If you call out to a shell and have it run a `git` command the system has to decide where the git binary is. A quirk of Windows is that first it searches the current directory for a `git` e
41.
by varenc 3mo ago
On Windows, if your shell was in a malicious repo's directory and you ran any "git" command, wouldn't the behavior be the same? Binaries in the current directory are considered before PATH. This seems like a broader issu
42.
by varenc 3mo ago
This is false. Sea water is >3% salt and human kidneys can't produce urine with that much salinity or greater. Since they need more water to extract that much salt, the net effect is dehydration. This rower probably had a desalinati
43.
by varenc 3mo ago
persistent.oaistatic.com for OAI software. Not just a subdomain, but a whole separate domain, making it easy !
44.
by varenc 3mo ago
Wow, stories like this make me happy that I block all ChatGPT/Claude/Codex/etc updates by default, and only selectively update on demand. I do this just by setting a network rule that blocks their update check. (fortunately
45.
by varenc 3mo ago
I would love it if a grocery store, or Uber, or Amazon, made it easy to see my yearly spend. Instead them to intentionally obscure this and try to prevent you from seeing a big number.
46.
by varenc 3mo ago
Kept trying to use the demo, but despite giving it microphone permissions and seeing that the microphone was in use, couldn't get the demo to 'hear' me at all.
47.
by varenc 3mo ago
You could also say life is too short to waste time retying inferior drawstrings. If learning the knot takes 5 minutes, it seems like it could easily save you time overall.
48.
by varenc 3mo ago
I don't think that quote from the article is disagreeing with you at all. Like you said, we don't have a cohesive definition or test of consciousness, so research like this doesn't say anything about if this is or isn't
49.
by varenc 3mo ago
This project is a fork and all it does is add iOS support. Commits by the repo fork owner begin 19 hours ago, so very plausible those are done with Fable. But I agree it's very unclear to me if adding iOS support was some task only Fab
50.
by varenc 3mo ago
Carplay isn't about entertainment for me. It's just a vastly superior and convenient way to view the same map you can see on your iPhone.
51.
by varenc 4mo ago
how so? Is it a class system that only Raytheon employees can work on cruise missiles, not the average citizen? (edit: not that these models are equivalent to missiles oc)
52.
by varenc 4mo ago
That's a different and much more boring type of cheating. The interesting part of the METR report is that the model is hacking the evaluation environment, not that some AI model provider is hardcoding answers to known evaluation questi
53.
by varenc 4mo ago
From my cursory reading of the pre-print, it didn't seem like the entire scroll has been read? Or rather, you read everything that can be read, but part of the original have been lost? (Like columns 1-4). VERY COOL WORK!
54.
by varenc 4mo ago
https://news.ycombinator.com/item?id=48681663
55.
by varenc 4mo ago
https://news.ycombinator.com/item?id=48681663
56.
by varenc 4mo ago
It's false that the 'entire Herculaneum scroll has been read'. Much of the scroll has been lost. From the preprint, columns 1-4 lost, and then margins on other columns are also lost. Col. 5: "… the similar …"
57.
by varenc 4mo ago
I think OP meant converting handwriting to text, not identifying a person based on their handwriting style! (but that sounds quite interesting)
58.
by varenc 4mo ago
As long as thinking blocks can't make tool calls, I don't really see the exfiltration risk.
59.
by varenc 4mo ago
Those are important skills schools teach, but I'm skeptical that most learning happens at home. I strongly suspect most adults learned to read and write because of the education they received in school, not home. Especially when it com
60.
by varenc 4mo ago
I'm surprised this is required. Agreed that's shady. I wonder what their reasoning is. But if you don't trust it, the fix is easy: just deny the Ubiquiti cameras and controller all internet access. That way no trust is requir

More ›