zbentley

21 ms·

391.
by zbentley 6mo ago
Very true. So many regulated/government security contexts use “critical” or “high” sev ratings as synonymous for “you can’t declare this unexploitable in context or write up a preexisting-mitigations blurb, you must take action and mak
392.
by zbentley 6mo ago
Yep. And cloud providers could eat any slippage cost (enforcing, say, every 5 minutes by stopping service) without even a rounding error on their balance sheets. The fact that they don’t indicates that there’s no market reason to support sm
393.
by zbentley 6mo ago
> Initially, we anticipated that the edge case would have minimal impact, given Prometheus’s widespread adoption and proven reliability in diverse environments. However, as we migrated more users, we started seeing this issue more freque
394.
by zbentley 6mo ago
I'm doubtful. Which small communities that did this are you referring to? And is the thing that made them successful something that's just hard , or is it something innate to their being very small ? If it's the latter, I d
395.
by zbentley 6mo ago
> we know how to structure societies with very few corrupted people We do?
396.
by zbentley 6mo ago
I'm a novice in this area, but my understanding is that LLM parameters ("neurons", roughly?), when processed, encode a probability for token selection/generation that is much more complex and many:one than "parame
397.
by zbentley 6mo ago
The key part of the article is that token structure interpretation is a training time concern, not just an input/output processing concern (which still leads to plenty of inconsistency and fragmentation on its own!). That means both
398.
by zbentley 6mo ago
I'm curious why this was downvoted--I'm not complaining or trying to go against HN guidelines; I'm genuinely unclear as to why the first-party source for the article clarifying the question in GP was marked dead. Bad actors?
399.
by zbentley 6mo ago
Good-token/bad-token overlap is near 100%. For example, try interacting with quantitative data, or program code, without using these tokens: > :(){ :|: & };: Now try running that in your shell.
400.
by zbentley 6mo ago
We've also made progress as a species towards banning and reducing other things that in-group upsides and really bad externalities: off-the-shelf sale of broad system antibiotics; chattel slavery; human organ trafficking; some damaging
401.
by zbentley 6mo ago
This is an entertaining (and often exasperating) decades-old trend in competitive U.S. college debate, as well. A common advantageous strategy is to take the randomly-selected topic, however unrelated, and invent a chain of logic that claim
402.
by zbentley 6mo ago
If a linter insists on a weird line of code, I’m probably commenting that line as “recommended by whatever-linter”, yes.
403.
by zbentley 6mo ago
> groups that actively pursue the government for violating our constitutional rights Could you share some examples?
404.
by zbentley 6mo ago
Citation needed, bad faith suspected. Even adjusted for maternity and career entry/exit differences, the gender pay gap is still big and real. And while there is overlap and outliers, many more women-dominated industries are at lower p
405.
by zbentley 6mo ago
Practically, the performance loss of making it truly repeatable (which takes parallelism reduction or coordination overhead, not just temperature and randomizer control) is unacceptable to most people.
406.
by zbentley 6mo ago
I was always surprised that Python, of all languages, didn’t support a robust Thread.stop. Before the removal of the GIL in recent years, Python seemed well-positioned to leverage the GIL to offer safe thread-cancellation points that didn’t
407.
by zbentley 7mo ago
Sumo?
408.
by zbentley 7mo ago
I'd say about 2/3 of the places I've worked started on Linux without a Windows precedent other than workstations. I can't speak for the experience of the founding staff, though; they might have preferred Ubuntu due to Wi
409.
by zbentley 7mo ago
I’ve seen more 5k+-core fleets running Ubuntu in prod than not, in my career. Industries include healthcare, US government, US government contractor, marketing, finance.
410.
by zbentley 7mo ago
I interpreted the post as saying the support emails were legitimate, opened fraudulently (or at least some were) as pretext for the phishing phone call.
411.
Built-in workaround for applications hiding under the MacBook Pro notch (2024)(flaky.build)
1 points by zbentley 7mo ago|0 comments
412.
by zbentley 7mo ago
> pariah Which recent foreign policy actions by Russia indicate that they care overmuch about soft power, or consider its loss to be a significant risk?
413.
by zbentley 7mo ago
All sorts of reasons, but this isn't a left-pad situation. Axios's functionality is something provided by a library in a lot of languages (C/C++ with libcurl and friends, Python with requests, Rust with reqwest, and so on). T
414.
by zbentley 7mo ago
Pinning, escrowing, and trailing all help, but I'm not sure "this step will be eliminated" is inevitable. Package manager ecosystems are highly centralized. npm.org could require MFA (or rate limit, or email verification, o
415.
by zbentley 7mo ago
Requiring a human-in-the-loop for final, non-prerelease publication doesn't seem like that onerous of a burden. Even if you're publishing multiple releases a day on the regular (in which case ... I have questions, but anyway) ther
416.
by zbentley 7mo ago
This is right. It’s not about scoping auth, it’s about preventing secret misuse/exfil. (Moved from wrong sub)
417.
by zbentley 7mo ago
That's a good thing (disruptive "firebreak" to shut down any potential sources of breach while info's still being gathered). The solve for this is artifacts/container images/whatnot, as other commenters pointed
418.
by zbentley 7mo ago
This is the right answer. Unfortunately, this is very rarely practiced. More strangely (to me), this is often addressed by adding loads of fallible/partial caching (in e.g. CICD or deployment infrastructure) for package managers rather
419.
by zbentley 7mo ago
I like your dream. I think financial incentives make it unlikely, though. The writing's been on the wall for user-friendly general computing OSes for awhile, I think. So Microsoft's incentive is to treat Windows like a loss leader
420.
by zbentley 7mo ago
> I suspect it's going to hurt iPad sales though, as a real Mac running MacOS is vastly more capable than any iPad. Maybe, but I somewhat doubt it, for a few reasons: - Kids like iPads for gaming/video watching, and the overhea

More ›