HackerTrans
TopNewTrendsCommentsPastAskShowJobs

nenaoki

no profile record

Submissions

WaSCR: A WebAssembly Instruction-Timing Side Channel Repairer

dl.acm.org
1 points·by nenaoki·ano passado·0 comments

comments

nenaoki
·ano passado·discuss
I think they just use the encryption and key exchange that WebRTC has cooked in https://datatracker.ietf.org/doc/html/rfc5764
nenaoki
·ano passado·discuss
The pin would just be for coordination, not encryption.
nenaoki
·ano passado·discuss
it's sad to compare.

apart from that: the word "mark" comes from a root for "boundary" or "border", and really it doesn't need to be about that; we're all in this together.
nenaoki
·ano passado·discuss
your shrewd idea might make a fine layer back up the Tower of Babel
nenaoki
·ano passado·discuss
The Wasm Constant Time proposal was just moved to inactive 4 days ago[0].

From what I can tell the bulk of the work for it was done in 2018[1], but it needs updating to consider SIMD, and for legwork to be done on moving it along as a proper spec extension.

Until someone picks up this valuable work and lands this much-needed feature in Wasm, we're extremely vulnerable to timing attacks in all Wasm crypto.

[0] https://github.com/WebAssembly/proposals/blob/9fc7a85e/inact...

[1] https://github.com/PLSysSec/ct-wasm
nenaoki
·ano passado·discuss
Python devs needing to be sheltered from mature C++ themes?

Checks out I guess.
nenaoki
·ano passado·discuss
Just based on the stage of the game I'd say it's not likely, but the possibilities are there:

https://news.ycombinator.com/item?id=43121383

It would have to be from unsupervised tool usage or accepting backdoored code, not traditional remote execution from merely inferencing the weights.
nenaoki
·ano passado·discuss
My understanding is that models are currently undertrained and not very "dense", so Q4 doesn't hurt very much now but it may in future denser models.
nenaoki
·ano passado·discuss
Pretty absurd conflation you've got there.

The package manager just offers a common interface for interop, you can still build without dependencies.
nenaoki
·ano passado·discuss
(NB "Two-faced LLMs" are apparently trivial: https://news.ycombinator.com/item?id=43121383)
nenaoki
·ano passado·discuss
An LLM would have to be two-faced in a sense to surreptitiously mess with code alone and be normal otherwise.

It's interesting and a headline worthy result, but I think the research they were doing where they accidentally found that line of questioning is slightly more interesting: does an LLM trained on a behavior have self-awareness of that behavior. https://x.com/betleyjan/status/1894481241136607412
nenaoki
·ano passado·discuss
These are a bit mythical, finding one for sale is no small feat.

I guess adding memory to some cards is a matter of completely reworking the PCB, not just swapping DRAM chips. From what I can find it has been done, both chip swaps and PCB reworks, it's just not easy to buy.

Software support is of course another consideration.
nenaoki
·ano passado·discuss
>A clamshell 5090 with 2GB modules has a max limit of 64GB

How does "clamshelling" get around the 32-bits per module requirement? Do the two 2GB modules act as one 4GB module when clamshelled?
nenaoki
·ano passado·discuss
Maybe A Whisker Away is actually a documentary...
nenaoki
·ano passado·discuss
https://nvidianews.nvidia.com/news/nvidia-puts-grace-blackwe...

GB10, or DIGITS, is $3,000 for 1 PFLOP (@4-bit) and 128GB unified memory. Storage configurable up to 4TB.

Can be paired to run 405B (4-bit), probably not very fast though (memory bandwidth is slower than a typical GPU's, and is the main bottleneck for LLM inference).
nenaoki
·ano passado·discuss
I reckon it's mostly noise. An ad I saw three times in the sample was just an awful mobile game I don't deserve to be subject to ads about, and the other ad I saw twice was just based on my location.
nenaoki
·ano passado·discuss
Nice job. It should ignore ads imho, my top 2 "largest influences" were just ads. I mean, I guess we do influence ads via engagement or whatnot, but it's not as if I pay mind to an ad the way I pay mind to a post.

My card: https://files.catbox.moe/t8rzlb.png
nenaoki
·ano passado·discuss
https://kokorotts.org/ is the proper site.
nenaoki
·há 2 anos·discuss
4chan's /jp/ has [sjis] bbcode tags for formatting ASCII art consistently with the Mona typeface.

No thread up though, and the archive doesn't support the tags.