6r17

"The LLM is better because the pelican hat is better"

Benchmarking like never before

Same announcement every year for the past 10 years and same shit.

There are many people who have voiced this topic already. If you don't care about your privacy why do other people have to give it up ? It's a non-argument - nobody cares about your opinion.

War is coming to Europe. At this point I'm even thinking about moving to China - at least they don't accept Zuckerberg checks. Tbf in my case I'm also a tech holder - so i'm just getting robbed.

The worse is - we say it's about child safety - but that same rhetoric is actually defending kids to have a smartphone.

Fight this shit off. We do not need this. Digital Privacy has tools coming up - we are all loosing on this because of a few monkeys I wish some people had to courage to deal with. I'm honestly exhausted by this shit. Let all of it rot.

My heard hurts - i was stupid enough to think that SIMD was a CPU only thing - I don't understand why it would be ported to GPU - huge kudos to managing to surprise me

I built myself such a simple lexicon for technical stuff (concurrency vocab - invariant, genetics, stuff like that) - can only recom the practice as vocabulary is clearly a big step difference

One clean implementation of this is to wipe everything on the 2nd password failure.

Hi,

2 days ago in the night, French President Macron has passed through the mandatory age verification on social networks to force identity verification.

Anyone with good sense of pragmatism would come up with the reasoning that forbidding a smartphone to <15YO is a bounded law with more effect on the targeted demographic.

This style is of course a lie is disguise to push for taking control on the networks and news outlet. I can imagine how news in the US are (fake) - and you can imagine that we as well have news outlet completely fake in France.

The internet has given us a hope, it has given results to democracies, we are seeing the world for what it is, we have much more people that are aware of the broken system, much more people that are transgressing from the mainstream outlets.

We were given the right to inform ourself by ourself, to get to criticize things. And this is slowly being taken out from us in Europe.

I'm devastated atm. Quiet honestly very emotive.

We need to talk about this. We need to stand up. We need to do it, right now. I cannot think about a world where someone would decide what i read or what i'm going to think, or what i can say or not, and who to talk to and why - i do not understand why people would be guilty by default.

I posted this freaking topic on multiple french subreddits to get this kicked-out on all of them - it's arguably one of the most important topic of the hole f* internet.

Please help.

TBF it's the healtiest approach to it. It's just risk mitigation. Nobody cares about it - there are nice papers to implement it ; just freaking do it.

I love it - stupidly creative - first time i see this yet it feels I always knew how it was meant to behave

Hei i'd argue the opposite ; the target you named are actually able to formalize this and spend more time on this because they have the mathematical background - it is not the case for many amateur programmer who would now be exposed to such problematic with a tool that can give them somewhat of an insight - being exposed to the tool it-self alone is huge because it allows an operator to experience and learn - this is all of course almost hyperbolic, reality is that most people won't be doing that - but it allows it, and it's cool !

Yes because taking advice to medicine itself everyday based on an online entrepreneur forum to "boot-yourself" is 100% a good advice that you should take blindly without taking a notice on what you are doing.

You are so right.

right...

https://www.google.com/search?q=artificial+creatine+side+eff...

kidney damage. liver damage. kidney stones. weight gain. bloating. dehydration. hair loss. muscle cramps.

The fact that you estimate weed as a drug is correct - the fact that you don't realize that everything is basically a drug depending on the amount an potency is worrying.

Hei more than that - as an avid weed consumer - drugs are not dangerous by themselves especially when you don't like them - they are dangerous when you create space for them and get along with them. I like to believe weed is my little "cheat" - but i'd argue that any product is an abuse on a daily basis - so taking creatine once in a while might be fun to try out - but i would warn about anything on the spectrum of "regime" that plan for a daily basis etc... especially as you rightfully justified, without a doctor or an expert being able to know what effect this is going to have on a said person.

Very cool work ! I'm running harness system myself and could measure improvement of token use of 2x to 10x on gsm8k only by running a math harness - i'm confident the future is bright for people who will know how to sell tech that is appropriately scaled to one's need. We absolutely do not need to run Claude 123 for most tasks and we better prepare for the rag-pull !

open-bsd will always feel like a safe pick for anything in regard to vault or key holding ; it's not appropriate to run anything CPU intensive - but it's a very appropriate system for anything that just need to boot up and hold some data ; eventually expose a network interface.

But can you prove that we cannot identify someone using that data ? First thing to come in my mind is the audio that we can plug-in ; that-said it's a very nice idea, package and maybe even product - kudos !

You have stated everything in your answer. I want to point out that the problematic starts with who controls the safety. Yes tech-constructors should be obligated to build their software such that the end-user can exercise any kind of required control and yes the parent should be liable. None of this require the government forcing identity through the OS layer.

The problem with that statement is that a lot of people who yield it fail to see the advantages that come with these extra shenanigans ; and let's just take pure concealment so I don't pushing weird arguments ; in the age of AI - each time we are able make an attacking AI misaligned we are essentially buying time ; an on-going attack is never a on-shot event ; it's an ongoing process where the attacker has to understand where it is located and what it can do ; since each element will be a resource ; do not let it have it in the first place.

It's a bit of an elitist view of security that romanticize concepts without thinking about what they can actually be used for. My personal bad experience with that was a manager who was stating me that having a different subdomain for the admin panel was a concealment and not a security practice.

I mean - it's very easy to see how this kind of argument actually prevents from doing something that can help just on the basis of philosophical purity - which often just miss the point - security is not a mechanism that will solve all your problems ; heck in fact I have to layer at least 4 mechanisms just on the http interface to feel safe ; it's more of a lot of layers that together form a barrier ;

We sit too much on TLS thinking "That's it, security job is done" - then we get some crazy stuff like French ANTS that get pawned with some IDOR ; as IF f* using some hash or something ; ANYTHING PLEASE F* HELL ; would have not helped

I'd be worry about security tbf - this sounds cool until it's used to host some weird shenanigans and nobody has any kind way to tell who did what

On a less dramatic pissed (rightfully) reading ; I have found that if you do give the capability to a LLM to do something ; it will be inclined to see this as an option to solving what it what asked to ; but then giving the instruction by negative present very poor results whereas the same can be driven by a positive one ; a "don't delete the database" becomes "if you want to reset the database you have a tool that you can call ..." ; at which point this tool just kills the agent. That said - this solution cannot guarantee by itself that the command is not ran ; but i'd argue that people have be writing more complex policies for ages - however the current LLM-era tend to produce the most competent idiots.

I mean that there is a big difference between a state automatically providing your data to any other state while having "their database disconnected" - and a human operator in the loop and an administrative verification of the appropriate access ;

For example this would allow a state to refuse access to the PI of their citizens for cases that are not administratively documented. This forces the access audit sufficiently that a malign actor cannot simply request data for a citizen without having probable cause ; another vector we want to protect ourselves against is simply the psycho/sociopaths that have access to these data without surveillance.

Whether there is a single app or not doesn't really matter - i'm more concerned about the database itself and the inter-connectivity between them and most importantly by which control acceptance protocol we abide between states.

The idea that we want a single database or a network without any kind of control is frightening me

I tried it not long ago - it's really cool just a tad sad that the rust eco-system didn't allow verus to be more streamlined in the tool and requires these little shenanigans with a different build of it - it felt a bit clunky to swap cargo for the verus one ; but the tool is definitely needed right now

"You’d think telemetry is screen recording your every move" - that's literally what tracing and telemetry is about.

"Sure, you can spend the weeks to months of expensive and time consuming work it takes to get a fuzzy, half accurate and biased picture of what your users workflows look like through user interviews and surveys. Or you can look at the analytics, which tell you everything you need to know immediately, always up to date, with perfect precision." -> your analytics will never show what you didn't measure - it will only show what you already worked on - at best, it's some kind of validator mechanism - not a driver for feature exploration.

This kind of monitoring need to go through the documented data exposure - and it's a sufficient argument for a company to stop using github immediately if they take security seriously.

But I'd add that if you take security seriously you are not on Github anyway.

Fun is not always about finding up the exact look or design of something - you might be having it for your own particular reason - and by the time a website has to present it might have shifted already. That's why these land and why we might be confused about the process

I kind of agree with the comment here that a lot of stuff happening around comes out from an idea without proof that the project has a meaningful result. A compacting memory bench is not something difficult to put off but I'm also having difficulties understanding what would be the outcome on a running system

Same hack here ; I have no DSN running by default - much more handy than having to set up nginx as it has no opinion on the targeted infrastructure. And the bonus point is that you can see every sneaky request that happens when you browse ; so another side-project connected to this is to make an inventory and policy filter