Viewing profile — dave_universetf

The readme has strong LLM smells. Was the code written by an LLM as well? What is your experience with cryptographic engineering, in particular avoiding common implementation pitfa…

It's vibe coded, so not surprising that it replicates the patterns of existing systems.

+1, the information content is nice, but the AI telltales and writing patterns were annoyingly distracting.

This is probably just a difference in how your brain and the author's work. A variety of home organizers have told me that people mean different things when they say they want an o…

Strictly speaking: no. The "forward pass" terminology does not imply that there exists a "reverse pass" that does the same kind of computation. Rather, it's describing two differen…

Both, with caveats. The attention computation is fundamentally quadratic: for every token in the sequence, you're doing a computation that has to compute over every other token in …

I don't know about all hyperscalers, but I have knowledge of one of them that has a large enough fleet of atomic frequency standards to warrant dedicated engineering. Several dozen…

I wrote MetalLB, a bare metal load-balancer for Kubernetes, because I needed one for myself. It gained some popularity because for a couple years, it was the only way to get workin…

Does the orange light specifically mean no RF link at all? Or does it include anything that prevents the modem from getting an IP address and route configuration? If the latter, BG…

BGP is the canonical way to take your entire global network offline within seconds. Glancing at BGP looking glasses, Starlink's prefixes seem to still be announced, but there could…

They are/were scanning random public projects and creating unsolicited bugs in those projects to chide them about profanity in their source code. The linked thread is just a bunch …

In the case of this attack, somewhere between 40s and 30min of physical access, depending on how the card was set up. In the case of a hotel, the spicy card to clone would be the c…

Indeed. Alas (or fortunately depending which colour team you work on), fully broken Mifare Classic is still all over the place, and likewise the "hardened" variant broken in this p…

Possibly so. It just means that based on the report's findings, even if you'd decided to play it safe and buy exclusively from NXP directly (the creators of this ecosystem and owne…

The paper reports that the same backdoor seems to be present in some NXP and Infineon SKUs as well, including some manufactured in Europe.

Yeah, admittedly it's confusing terminology generally, because it's still natural to say you're swapping the page tables out when you do a context switch on current systems. I prob…

Please, name these academic Unixes! I would love to go see what they do. Down-thread there's a mention of minix, which does the normal thing: demand paging, context switches only t…

Also no. It was rolled back hours ago, and cache.nixos.org keeps all past builds so it didn't even need rebuilding. Orthogonal to that, the backdoor was irrelevant to nix in at lea…

It's not a problem, never has been. Nix mirrors all source bundles it pulls from third parties and caches them. cache.nixos.org has a copy of all the sources needed to build not ju…

Worth noting that, like many immediate mode UIs, it seems to not integrate with OS accessibility infrastructure at all. That means any UI built with it will be a black box to anyon…

Worth noting this is an expired draft. Anyone can publish drafts with no vetting. This particular author is also a frequent flyer of nonsensical IETF drafts that make no sense to a…

Yeah I was imprecise in the description here, because I started trying to describe how a mechanical movement works and it went into the weeds really quickly :) More accurately, the…

There's a sibling thread making the same point, and: yeah, I overgeneralized on that bit. The instance I had in mind was the M.A.S.H. TV show, which has a couple exchanges involvin…