HackerTrans
TopNewTrendsCommentsPastAskShowJobs

dot_treo

no profile record

Submissions

Do LLMs Break the Sapir-Whorf Hypothesis?

dnhkng.github.io
15 points·by dot_treo·vor 3 Monaten·7 comments

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised

github.com
938 points·by dot_treo·vor 4 Monaten·500 comments

comments

dot_treo
·vor 2 Monaten·discuss
Reminds me very much of https://music.ishkur.com/ which is the same kind of thing but for electronic music.
dot_treo
·vor 2 Monaten·discuss
By the looks of it, it will take a couple more follow up PRs to clean things up a bit and get the most performance from MTP. I hope that by that point it will be easier to add more spec decoding types.

In the meantime I've benchmarked Orthrus some more and got some quite promising results. So I'd be glad if my prediction that it may take some time until it lands in llama.cpp turns out to be wrong.
dot_treo
·vor 2 Monaten·discuss
And it also looks like the original authors are working on qwen 3.5 too: https://github.com/chiennv2000/orthrus/issues/1#issuecomment...
dot_treo
·vor 2 Monaten·discuss
I would probably treat the (3 GatedDeltaNet + 1 GatedAttention) Blocks as one transformer block, when generating next steps one would therefore use the kv cache for the gated attention and skip the entire delta nets.
dot_treo
·vor 2 Monaten·discuss
I've tried MTP, and that got me about 1.5x on average with a very spec friendly benchmark.

I didn't run the full benchmark with the demo code, just picked up a single prompt from it. The prompt is about 1300 token, the response is about 3200 token.

Baseline: 44.8 t/s With Orthrus: 164.6 t/s

Note: Don't use the `use_diffusion_mode=` config flag in their example to collect a baseline. Something about how the fallback to "normal" makes it grind to a crawl.
dot_treo
·vor 2 Monaten·discuss
Just to get it into a GGUF file would be fairly trivial. But using that GGUF file would need a bunch of additional things. One would need to create a new architecture derived from Qwen3, and then probably adapt the speculative decoding functionality.

At the moment not even MTP is merged into llama.cpp, so I wouldn't quite hold my breath for it.
dot_treo
·vor 2 Monaten·discuss
It is all about moving the bottleneck. During prompt processing everything can be calculated in parallel, while during token generation you create a single token at a time. For example, using an RTX 4000 Ada, I'm getting 2700 t/s for prompt processing, and 48 t/s for token generation using an 8B class model.

Their approach is essentially a speculative decoding approach where multiple tokens are predicted at once and then verified. Therefore getting more tokens to be created at a speed that is closer to the prompt processing speed.

It seems to be special because their approach yields the exact same output distribution as the base model and it only takes a negligable amount of additional memory.

The main catch is that if your prompt processing speed is already bad, it will not help you all that much.

For example, the M-series Macs (up to M4) have a relative high generation speed compared to their prompt processing speed. That means they will not benefit as much (if at all). With the M5 the prompt processing speed has increased 4x, so those can expect to see a good uplift.
dot_treo
·vor 2 Monaten·discuss
Do you plan on releasing the training code?
dot_treo
·vor 3 Monaten·discuss
True, but how many 18 year olds do you know that will just randomly get their balls checked?
dot_treo
·vor 3 Monaten·discuss
It used to be that way, and probably will be that way again. I know of a few of people who got an early testicular cancer diagnosis that way. So it seems that there is a medical use for it.
dot_treo
·vor 3 Monaten·discuss
I don't care too much about the article being written with LLM support. There is actual work being done that is being showcased here. I'd rather read an LLM version of it, rather that not learning about those things at all.
dot_treo
·vor 3 Monaten·discuss
The linguistic argument is fascinating.

One particular thing, unrelated to the linguistic argument itself, stood out to me. In the PCA visualisation, we can see that some sequences of layers have particularly tight and stationary clusters. Incidentally, those are also exactly the layers that the previous RYS post identified as most useful to repeat to improve perfomance on the probes.

I wonder, if that correlation could be used to identify good candidates for repeating layers.
dot_treo
·vor 4 Monaten·discuss
Looks like we discovered it at essentially the same time, and in essentially the same way. If the pth file didn't trigger a fork-bomb like behavior, this might have stayed undiscoverd for quite a bit longer.

Good thinking on asking Claude to walk you through on who to contact. I had no idea how to contact anyone related to PyPI, so I started by shooting an email to the maintainers and posting it on Hacker News.

While I'm not part of the security community, I think everyone who finds something like this, should be able to report it. There is no point in gatekeeping the reporting of serious security vulnerabilities.
dot_treo
·vor 4 Monaten·discuss
It actually wasn't. That was one of the reasons why I looked into what was changed. Even 1.82.6 is only at an RC release on github since just before the incident.

So the fact that 1.82.7 and then 1.82.8 were released within an hour of each other was highly suspicious.
dot_treo
·vor 4 Monaten·discuss
Yeah, that release has the base64 blob, but it didn't contain the pth file that auto triggers the malware on import.
dot_treo
·vor 4 Monaten·discuss
Even just having an import statement for it is enough to trigger the malware in 1.82.8.
dot_treo
·vor 4 Monaten·discuss
[dead]
dot_treo
·vor 4 Monaten·discuss
The main reason is just how hard it is to actually create anything that integrates with Teams. You have to jump through so meany hoops, wade through so many deprecated APIs, guess through so many half-way-wrong-by-now documentation pages.

After building a proof of concept, we decided that we will only continue Teams integration if anyone is going to pay serious money for it.
dot_treo
·vor 6 Monaten·discuss
In the past I've been trying to adopt the stoic mindset, but always struggled. But I continued to read and learn about it.

Unrelatedly, I came across a recomendation for David Burns "Feeling Good" here on hackernews a couple of years ago.

Reading it with my interest in stoicism in mind, I honestly found it to be probably the best modern day handbook to actually adopting the stoic mindset - without ever mentioning it.

As far as I understand stoicism, it is all about seeing things as they are, and understanding that the only thing that we really control is our reaction / interpretation of events. And the CBT approach that is explained in Feeling Good/Feeling Great is exactly how you do this.

With this perspective Marcus Aurelius Meditations suddenly make a lot more sense. They are his therapy homework.