Viewing profile — mirashii

If I’ve understood correctly, what your missing here is that the first core in SMM tells the second to join it in SMM, times out on the wait, does its thing and exits, but then the…

Just FYI, it’s “piqued my interest”

What’s the point? To save money paying a human to man a support email. That human would have also been hopelessly uninformed for all the same reasons.

The root cause seems to be known, unlike what this article implies. A bunch of other articles discuss the entropy issue, https://insider.btcpp.dev/p/when-randombytes-runs-but-doesn…

> give them a json specification, they're not always amazing at following it Used correctly, this hasn't been true for a quite a while. Most inference engines have a form of gramma…

> The Fil-C runtime is tiny compared to TS and C# Sure, this is a simple fact. > So Fil-C is safer than those This is not a simple fact that follows, and a good example of why you …

I generally agree with all of this, but I'll add a few additional remarks. Because it's come up a bunch lately, I decided to do a bunch of code review/audit of the Fil-C codebase, …

I think the consensus is that this would be the wrong end to tackle the problem from. Your project should include ruff at the version it wants to use in its pyproject.toml. Bump th…

I've spent some more time over the last day looking at Fil-C more closely, and come to the conclusion that this: > The thing that makes races hard to debug in C or C++ is memory co…

The really silly thing is that Fil-C and Zig here have chosen a definition of memory safety that specifically excludes a bunch of overflow vulnerabilities and type confusion. At le…

I’m having a hard time understanding how these two things can be true at once. Just because the capability exists that somewhere in my program a valid pointer to a piece of memory …

I like "honor system" as a term. I've been looking for the right term to replace the irresponsible usage of guardrails with, and best I've had so far is the pinky promise protocol.…

Clearly not. Good security is about defense in depth. The service that was exploited was meant to be an offline, frozen package cache, it shouldn't have been anywhere near a networ…

There is some aspect of baking the rules into the model, that's what I refer to as RLHF above (which I use here as more a catch-all term for a variety of post-training activities),…

> They didn't turn off the network protections Right, but this is my point in saying I can't reach the same conclusion that they've invested a lot into these systems for production…

> I expect OpenAI would agree with you that "the lack of a real sandbox or airgap is nothing short of irresponsible on OpenAI's part". They have clearly invested a lot in those sys…

> Given the absence of guardrails there was nothing to prevent the model from attempting to break out of that sandbox, break into Hugging Face, and read the answers from there inst…

Add to that list respecting the TOS of the user's ISP so that the user does not get banned, and providing some sort of remuneration if illicit activity through the proxy causes pro…

There’s a number of comments and linked threads suggesting it is not, but easier to just link the biggest thread than try to track all the subthreads.

A Github issue with actual data instead of just someone reposting info: https://github.com/openai/codex/issues/28224 Previously discussed: https://news.ycombinator.com/item?id=4862…

A Github issue with actual data instead of just someone reposting info: https://github.com/openai/codex/issues/28224 Previously discussed: https://news.ycombinator.com/item?id=4862…

Yes. Flash cells in SSDs are rated for a particular number of write cycles.

This metaphor, while it seems intended to challenge the OP, kinda reinforces it. Many countries and cultures give some limited access to alcohol at a younger age, and the result is…

This is and has been a common term in any systems programming concept for decades. You can, for example, search CVEs and easily find some from over 15 years ago: https://www.cve.or…

> what is most likely a simple mistake or process breakdown I think this needs justification. My status quo is to believe that most times I have a problem when dealing with these l…