HackerTrans
トップ新着トレンドコメント過去質問紹介求人

nenaoki

no profile record

投稿

WaSCR: A WebAssembly Instruction-Timing Side Channel Repairer

dl.acm.org
1 ポイント·投稿者 nenaoki·昨年·0 コメント

コメント

nenaoki
·昨年·議論
I think they just use the encryption and key exchange that WebRTC has cooked in https://datatracker.ietf.org/doc/html/rfc5764
nenaoki
·昨年·議論
The pin would just be for coordination, not encryption.
nenaoki
·昨年·議論
it's sad to compare.

apart from that: the word "mark" comes from a root for "boundary" or "border", and really it doesn't need to be about that; we're all in this together.
nenaoki
·昨年·議論
your shrewd idea might make a fine layer back up the Tower of Babel
nenaoki
·昨年·議論
The Wasm Constant Time proposal was just moved to inactive 4 days ago[0].

From what I can tell the bulk of the work for it was done in 2018[1], but it needs updating to consider SIMD, and for legwork to be done on moving it along as a proper spec extension.

Until someone picks up this valuable work and lands this much-needed feature in Wasm, we're extremely vulnerable to timing attacks in all Wasm crypto.

[0] https://github.com/WebAssembly/proposals/blob/9fc7a85e/inact...

[1] https://github.com/PLSysSec/ct-wasm
nenaoki
·昨年·議論
Python devs needing to be sheltered from mature C++ themes?

Checks out I guess.
nenaoki
·昨年·議論
Just based on the stage of the game I'd say it's not likely, but the possibilities are there:

https://news.ycombinator.com/item?id=43121383

It would have to be from unsupervised tool usage or accepting backdoored code, not traditional remote execution from merely inferencing the weights.
nenaoki
·昨年·議論
My understanding is that models are currently undertrained and not very "dense", so Q4 doesn't hurt very much now but it may in future denser models.
nenaoki
·昨年·議論
Pretty absurd conflation you've got there.

The package manager just offers a common interface for interop, you can still build without dependencies.
nenaoki
·昨年·議論
(NB "Two-faced LLMs" are apparently trivial: https://news.ycombinator.com/item?id=43121383)
nenaoki
·昨年·議論
An LLM would have to be two-faced in a sense to surreptitiously mess with code alone and be normal otherwise.

It's interesting and a headline worthy result, but I think the research they were doing where they accidentally found that line of questioning is slightly more interesting: does an LLM trained on a behavior have self-awareness of that behavior. https://x.com/betleyjan/status/1894481241136607412
nenaoki
·昨年·議論
These are a bit mythical, finding one for sale is no small feat.

I guess adding memory to some cards is a matter of completely reworking the PCB, not just swapping DRAM chips. From what I can find it has been done, both chip swaps and PCB reworks, it's just not easy to buy.

Software support is of course another consideration.
nenaoki
·昨年·議論
>A clamshell 5090 with 2GB modules has a max limit of 64GB

How does "clamshelling" get around the 32-bits per module requirement? Do the two 2GB modules act as one 4GB module when clamshelled?
nenaoki
·昨年·議論
Maybe A Whisker Away is actually a documentary...
nenaoki
·昨年·議論
https://nvidianews.nvidia.com/news/nvidia-puts-grace-blackwe...

GB10, or DIGITS, is $3,000 for 1 PFLOP (@4-bit) and 128GB unified memory. Storage configurable up to 4TB.

Can be paired to run 405B (4-bit), probably not very fast though (memory bandwidth is slower than a typical GPU's, and is the main bottleneck for LLM inference).
nenaoki
·昨年·議論
I reckon it's mostly noise. An ad I saw three times in the sample was just an awful mobile game I don't deserve to be subject to ads about, and the other ad I saw twice was just based on my location.
nenaoki
·昨年·議論
Nice job. It should ignore ads imho, my top 2 "largest influences" were just ads. I mean, I guess we do influence ads via engagement or whatnot, but it's not as if I pay mind to an ad the way I pay mind to a post.

My card: https://files.catbox.moe/t8rzlb.png
nenaoki
·昨年·議論
https://kokorotts.org/ is the proper site.
nenaoki
·2 年前·議論
4chan's /jp/ has [sjis] bbcode tags for formatting ASCII art consistently with the Mona typeface.

No thread up though, and the archive doesn't support the tags.
nenaoki
·2 年前·議論
A4 surely. A1 paper is massive.