HackerLangs
TopNewTrendsCommentsPastAskShowJobs

murderfs

1,563 karmajoined 9 yıl önce

Submissions

Anthropic performing prompt injection on its users

old.reddit.com
22 points·by murderfs·6 gün önce·0 comments

comments

murderfs
·dün·discuss
Then why only have one human bookkeeper? Surely two would be better, since you can compare their results. But then, perhaps you should hire three, so you can figure out which one is right.
murderfs
·dün·discuss
Presumably your current book keeper is not your slave, and you have to pay them...
murderfs
·evvelsi gün·discuss
The board game has extensive rules on mech design, but for weapons, it's just wherever they'll fit. Some of the built-in hardware has fixed locations: cockpit, life support, sensors go in the head; engines go in the center torso (with light and xtralight fusion engines spilling out into the side torsos as well), arm and hand actuators go in the arms, and hip, leg, and foot actuators go in the legs. You can see this in the critical slot section in a record sheet: https://i.redd.it/jt3p2f1v14gf1.jpeg

This one definitely deviates from tabletop: pretty much everything except the smallest weapons have an integral tonnage, and the weapons themselves don't line up directly with their tabletop versions.

The newer games tend to be absolutely consistent with the mech design rules in terms of what weapons are available, and their weights and sizes, such that board game designs are legal in the game (and usually the state you get the mechs in before you customize them), and customized mechs are legal board game designs. They tend to limit the customization by doing things like having mechs have predefined hardpoints that limit what types/sizes of guns can go where, because otherwise you just end up with every mech being identical, with maximum armor and the rest of the tonnage being spent on whatever happens to be the most optimal weapon.
murderfs
·3 gün önce·discuss
I'll do better than a second case, here's three:

Barracuda Networks: https://krebsonsecurity.com/2013/01/backdoors-found-in-barra...

Fortinet: https://community.spiceworks.com/t/hard-coded-password-backd...

Korenix: https://sec-consult.com/vulnerability-lab/advisory/backdoor-...

The fact that the password is "rzadmin" makes it a lot more likely that this is just run of the mill stupidity, and not something more nefarious: you'd want a backdoor that isn't blindingly obvious and usable by the CIA.
murderfs
·4 gün önce·discuss
Edge history syncing, presumably.
murderfs
·5 gün önce·discuss
> Also, as the device is Japanese, it uses JIS screws rather than Philips (in addition to triwing), which could surprise some.

My understanding is that Europeans also generally tend to not use Phillips screws, but Pozidriv instead.
murderfs
·6 gün önce·discuss
They passed a tax on basically just Amazon in 2018 and there were rumblings of Amazon leaving the city for Bellevue/Redmond. The city council repealed it within a month and things quieted down, but then COVID happened, they passed basically the same tax again, and this time it stuck. Since then, Amazon's been slowly leaving Seattle for the eastside by moving employees as their building leases expire: https://www.seattletimes.com/business/amazon/amazon-no-longe...
murderfs
·6 gün önce·discuss
U+1F5FA does it in 4 bytes!

https://www.compart.com/en/unicode/U+1F5FA
murderfs
·7 gün önce·discuss
I don't understand why people are so deluded about the value of metadata about them. It's not that valuable, you're not that important.
murderfs
·8 gün önce·discuss
> AOSP made it increasingly difficult to contribute without being an Android partner and it's nearly impossible now.

Yes, by "upstream", I mean "upstream Android".

> Google didn't invent MTE or memory tagging.

Sure, they didn't invent memory tagging (SPARC ADI was an implementation from a decade ago, and I'd bet IBM had an implementation of something similar in like the 70s, judging by the rest of ISA innovations in the last decade), but they definitely invented the instantiation of it in ARM. Pretty much everything aside from instruction encoding for MTE was specified in a doc sent by Google to ARM in response to ARM telling Google something along the lines of "the entirety of our efforts in the security space are going to be spent on something that you're not going to see any benefit from within the next decade: CHERI aka Morello aka Arran".
murderfs
·9 gün önce·discuss
> They are "permitted" to access to Google Play Services because their work hardening Android currently benefits Google.

Very little in GrapheneOS has gone back upstream post-Copperhead.

> Once Google feels like there is sufficient stability and compatibility with hardened memory allocator and tagged memory (and when they can get Qualcomm to support it across their range), they will make harder, until impossible, for Graphene.

What are you talking about? Google doesn't use hardened_malloc, and they literally invented MTE.
murderfs
·9 gün önce·discuss
There Is No Safe Dose of Prions: https://pmc.ncbi.nlm.nih.gov/articles/PMC3156228/
murderfs
·9 gün önce·discuss
This is arguably required by Article 30 of the EU Digital Services Act.
murderfs
·9 gün önce·discuss
I guarantee you that there are zero email chains from execs bragging about a policy that'll block the dozens of users running Revanced.
murderfs
·11 gün önce·discuss
A 5090 gets you 32GB with 1.8 TB/s of memory bandwidth for ~$4k, RTX A6000 gets you 48GB at 768 GB/s for ~$3.5k, 2x 3090 gets you 48GB for $2000 or so, and if you're willing to go into the wilderness, there are much cheaper options like the AMD MI50.
murderfs
·13 gün önce·discuss
So add it as an axiom with a comment pointing to the proof. If you don't trust the proof because you don't personally understand it, why are you using a proof assistant in the first place?
murderfs
·17 gün önce·discuss
"a client that turned out to have been rife with SQL injection" sounds more like they left the doors open, but the report focused on the lack of security bars on the windows.
murderfs
·18 gün önce·discuss
There are over 12,000 7/11s in the United States, and probably hundreds of thousands of competitors (certainly if you include gas station stores). The thing that's different about Japanese convenience stores is that, 24/7, they sell food that's incredibly high quality compared to what you can get in American convenience stores at extremely low prices, and that doesn't seem to be the case for Zabka?
murderfs
·20 gün önce·discuss
> When an invalid instruction exception occurs, it is very easy to identify whether the invalid instruction was an AVX-512 instruction, because those start with a prefix different from any other instructions.

You're missing the point: the processes executing AVX-512 do not have any particularly strong requirement for AVX-512 instructions, they're just optimistically using them to improve performance because CPUID claimed they were supported. It would be pathologically bad behavior to control scheduling behavior with this, because in practice it would result in things like glibc deciding to use AVX-512 for string functions resulting in every program that uses memcpy (i.e. every program) not being allowed to be scheduled on the little cores.
murderfs
·20 gün önce·discuss
These aren't from Google or Apple, they're from the wireless providers: https://en.wikipedia.org/wiki/Cell_Broadcast