er4hn

2,092 karmajoined 6 năm trước

I sometimes jot down longer thoughts at https://er4hn.info/

comments

4 giờ trướcdiscuss

The purchasers of the cameras, ie HOAs, law enforcement, etc, own the data. They are also the ones routinely caught abusing this. This is a real problem that should be dealt with by enforcing laws against the people improperly using the data.

I'm not sure what a realistic solution is for Flock to try and manage data they do not own nor if it makes sense for them to deny access to data they are not the owners of.

25 ngày trướcdiscuss

signull is more of an anonymous sh*tposter than a known industry insider, but I think this does capture the sama contribution to OpenAI very well. At least from an outsider who follows this stuff based on vibes.

26 ngày trướcdiscuss

I wonder how it compares to https://github.com/inkle/ink of Sorcery! and 80 days fame?

2 tháng trướcdiscuss

This page came about because of how long it took PQC to get standardized. This was a slow enough process that a whole slew of QKD vendors arose and sold a lot of products promising this as a solution to dealing with quantum computers and harvest now decrypt later attacks. Many of those products did not do a great job at actually preventing listening in on their lines since QKD is an ongoing field of research where new issues are routinely being discovered.

5 tháng trướcdiscuss

This must be what gwern meant when he said to write for AI.

6 tháng trướcdiscuss

Right, that's the same situation as fuzz testing today, which is why I compared it. I feel like you're gesturing towards "Attackers only need to get lucky once, defenders need to do a good job everytime" but a lot of the times when you apply techniques like fuzz testing it doesn't take a lot of effort to get good coverage. I suspect a similar situation will play out with LLM assisted attack generation. For higher value targets based on OSS, there's projects like Google Big Sleep to bring enhanced resources.

6 tháng trướcdiscuss

I think the author makes some interesting points, but I'm not that worried about this. These tools feel symmetric for defenders to use as well. There's an easy to see path that involves running "LLM Red Teams" in CI before merging code or major releases. The fact that it's a somewhat time expensive (I'm ignoring cost here on purpose) test makes it feel similar to fuzzing for where it would fit in a pipeline. New tools, new threats, new solutions.

7 tháng trướcdiscuss

It's clear, from watching Russia fail to be completely sanctioned that this is not watertight. The question I have is: have these sanctions added a money laundering tax to doing business? How much? What is the cost of enforcing the sanctions vs the added cost and is that worth it?

I don't know if this has been explored, bit I think it's an interesting follow on to "all or nothing" watertight sanctions.

7 tháng trướcdiscuss

In theory it prevents failures of the allocator that would allow reading uninitialized memory, which isn't really a thing in Go.

In practice it provides a straightforward path to complying with government crypto certification requirements like FIPS 140 that were written with languages in mind where this is an issue.

10 tháng trướcdiscuss

Speaking (unofficially) as someone who works at one of the "other brands" that reeks of journalists having a bias.

10 tháng trướcdiscuss

Well the idea behind tokens is that they should be time and authZ limited. In most cases they are not so they degrade to a glorified static password.

Solutions like generating them live with a short lifetime, using solutions like oauth w/ proper scopes, biscuits that limit what they can do in detail, etc, all exist and are rarely used.

10 tháng trướcdiscuss

Not having redundant rails in case of breakdowns is something BART is well known for

3 năm trướcdiscuss

“Nothing in this world can take the place of persistence. Talent will not; nothing is more common than unsuccessful people with talent. Genius will not; unrewarded genius is almost a proverb. Education will not; the world is full of educated derelicts. Persistence and determination alone are omnipotent. The slogan "press on" has solved and always will solve the problems of the human race” - Calvin Coolidge

5 năm trướcdiscuss

It is worth noting that this is not an impossible problem. I'm not a js expert, and it seems that js loves imports, but Nix solves exactly this problem on Linux. You have, for each end binary, a set of dependencies. If they are exactly the same, they can be shared among programs, otherwise you would have different versions of the dependency, all the way down, per program.

It can be bloaty, and you have to manually look at and test packages if you want to get everyone on the same set of dependencies, but you end up with reproducible environments.

5 năm trướcdiscuss

That just sounds like poor cooperation between teams.

5 năm trướcdiscuss

This makes it even better. Thank you for that insight!

5 năm trướcdiscuss

> The user told the hackers to try depositing the stolen tokens without Tether, which the hackers did successfully and they deposited all the addresses into Curve. The hackers then sent the anonymous user about $45,000 worth of ethereum for their help.

Best part of the article is how an anonymous person helped the hackers launder their money and got a tip for it.