HackerTrans
TopNewTrendsCommentsPastAskShowJobs

int0x29

784 karmajoined 2 anni fa

Submissions

New Rowhammer attacks give complete control of machines running Nvidia GPUs

arstechnica.com
9 points·by int0x29·3 mesi fa·1 comments

comments

int0x29
·3 giorni fa·discuss
I opened a bug in an unrelated repo yesterday and nearly immediately got hit with one of those. Kinda wish I'd downloaded the zip before it got deleted. I'm curious what the attack was.

I ignored it because it wasn't a pull request or patch file, it came too fast, and the explanation misidentified the source of the problem.
int0x29
·4 giorni fa·discuss
The picture of donkeys helping construct a wind tunnel at Langley is pretty interesting. Never thought anything used in the space race would have been built with animals.
int0x29
·7 giorni fa·discuss
They tried to limit scalping by randomizing the delivery order.
int0x29
·17 giorni fa·discuss
Honestly the most interesting thing to me would be how they got GPU drivers working for a hobby OS. I suspect this was difficult. Unfortunately the blog makes no mention of it.
int0x29
·26 giorni fa·discuss
Steam sockets and CloudFlare's UDP forwarding really are different though. They provide ddos protection as well as route optimization due to lots of points of presence.

Here there seems to be no mention of ddos mitigation or shorter routes due to infrastructure. Yes you need a key to connect but your iroh relay server can still be attacked. I suppose you could roll your own distributed anycast system for this.
int0x29
·mese scorso·discuss
Misread that as open office xml not office open xml. I wish the standards were named more differently. They are too easy to confuse
int0x29
·mese scorso·discuss
My SD cards have always had stuff in that folder. It scares me. I try not to look
int0x29
·mese scorso·discuss
Looks like they fixed this one since I last checked in 2016
int0x29
·mese scorso·discuss
> Is there an opinionated reason not to break out capabilities?

If you have a disability and need tools to use your computer the last thing you want to do is have those things not only off by default but complicated and involved to turn on.
int0x29
·mese scorso·discuss
Controlling my computer is appropriate scope for an accessibility tool
int0x29
·mese scorso·discuss
> However, I would like to point out that Apple isn't totally wrong here because the accessibility API unfortunately is way too broadly scoped, and because of that you literally get access to everything on the computer like you you can screenshot listen and and move the cursor... This is completely ridiculous and the proper engineering solution would actually be to phase out the accessibility API and replace it with something that is narrowly scoped so you can grant specific permissions individually

If you don't have use of your hands you want that. The whole point of accessibility APIs is allowing arbitrary control of your computer via novel means. One of the big selling points of Dragon Natually Speaking is the ability to tell your computer to do things based on descriptions without a mouse. "open outlook", "click compose", "select subject", "type foo", etc.

And no the solution here is not computer vision with an LLM. Text and buttons rendered on my computer exist in memory somewhere as text and buttons. We should not need to convert them to pixels and back lossily to recover text and buttons. We should just expose things to the accessibility API and not guess.
int0x29
·mese scorso·discuss
Isn't it a mediatek CPU with an Nvidia GPU on the same package? At least thats what most of the reporting for nvidia laptop chips has been saying.
int0x29
·mese scorso·discuss
Worse it's from a marketing perspective if you read the guys bio.
int0x29
·mese scorso·discuss
The Donner Party begs to differ
int0x29
·2 mesi fa·discuss
Generating realistic video of arbitrary things and people at scale is quite a bit of a different game than retouching photos
int0x29
·2 mesi fa·discuss
Saying that watermarking fake things is bad kinda strongly implies it
int0x29
·2 mesi fa·discuss
Accepting blindly destroying the concept of thruth should not be the hacker ethos either.
int0x29
·2 mesi fa·discuss
Ignoring whether the 3D effect is good or not, moving video on a moving billboard in moving traffic is a terrible idea which should be banned.
int0x29
·2 mesi fa·discuss
It really shouldn't be the RPCS3 devs' problem to fix other people's broken AI pipelines.
int0x29
·2 mesi fa·discuss
I'm curious what broke the embargo. Did it leak or did a third party find it independently?