HNHacker News
TopNewBestAskShowJobs

azeemba

2,559 karma · joined February 2, 2019

<https://azeemba.com/>

<https://theUmpShow.com> - Baseball video game

submissionscomments
azeemba··on Open-LLM performances are plateauing
I feel like the post doesn't relate to the title?

The post seems to be about changing the Leaderboard and doesn't comment too much about whether the actual real-life performance of LLMs is plateauing and what can be done about it.

azeemba··on OpenAI and Microsoft Azure to deprecate GPT-4 32K
I am having trouble understanding what the complaint is here.

The docs still mention bigger models with 128k tokens and smaller models with 8k tokens. It seems reasonable to optimize for big and small use cases differently? I don't see how we are being "robbed".

azeemba··on CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js
The poster was joking that it looks like there are less than 126 Firefox users
azeemba··on CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js
The problem here was neither media extensions nor embedded JavaScript though.

It was pdf.js handling of fonts

azeemba··on Photobox – Free Open Source Google Photos Clone
https://immich.app/ has built in auto-detection and tagging.

I am surprised by the over-engineered comment. Object auto-detection is kind of an advanced feature and I would expect a lot of extra infra required for it. Immich hides it because they just publish docker containers for you but I imagine it would feel more complex if you were to look at the internals.

azeemba··on Which cognitive psychology findings are solid that I can use to help students?
The top answer highlights a lot of different things but spaced repetition does seem to get quite a bit of emphasis. I first learned of it from my buddy's blog post on how he uses anki cards to do space repetition for basically everything: https://www.petemillspaugh.com/anki

I tried to use them but haven't really stuck with it.

azeemba··on A High-Level Technical Overview of Homomorphic Encryption
I think the AI-model-as-a-service is actually a great use case.

You want to use their AI model but you don't trust them to not train on your data so you don't want to send your data to them. They don't trust you enough to send you their models.

So you encrypt your data, they compute on your data and send you the encrypted result back.

The only problem is that you have turned an expensive computation into a exponentially more expensive computation

azeemba··on Ask HN: How to do simple heartbeat monitoring?
A lot of vendors offer this and call it "synthetic monitoring". They will repeatedly send requests that you configure and record the success rate.

They usually all have pager duty integration as well.

Some examples:

Datadog: https://docs.datadoghq.com/synthetics/ Grafana cloud: https://grafana.com/grafana/plugins/grafana-synthetic-monito...

azeemba··on Show HN: Volume rendering 3D data in Three.js and GLSL
A cool property of volume rendering is that it requires much simpler calculations than other 3D rendering problems. It's simple enough that you can use Homomorphic Encryption to calculate the rendering of _encrypted_ medical data!

Here is my summary of it[1] and the original paper[2] I found this in

[1] https://azeemba.com/posts/homomorphic-encryption-with-images...

[2] https://arxiv.org/abs/2009.02122

azeemba··on Guess my RGB
Ha this reminds me of a game me and my friend made a few years ago: http://rbgnrgb.com/

You play as RBG fighting monsters with different RGB values.

azeemba··on Zed Editor: All Occurrences Search from 1s to 4ms
I mean Zed is clearly making a marketing push recently.

With that attention comes many new people finding it but also discovering that they can't use it.

azeemba··on Nextdoor's Heisensubscribe (and Other Dark Patterns)
I assume it's a play on `heisenbug` which is a bug that is not easily reproducible, or more strictly a bug that is unlikely to happen when you are specifically trying to observe it (by enabling debug logging for example).

I assume the use here extends the uncertainty part of the problem to the unsubscribe workflow.

azeemba··on Show HN: Tweening web visualisation, in Rust – (WASM)
https://easings.net/ is popular in gamedev circles to quickly visualize different types of easings
azeemba··on I looked through attacks in my access logs
Update your software frequently.
azeemba··on Curl is now a CVE Numbering Authority
The post links to more context here: https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-eve...

Last year, someone got got CVE's assigned for a curl issue for code that didn't exist AND managed to get a high severity assigned to it. So curl becoming a CNA lets them provide some control to this process.

azeemba··on PIDs: Creating Stable Control in Games
Interestingly, there was another PID post earlier today and someone specifically commented on using a PID for camera tracking: https://news.ycombinator.com/item?id=39011630#39016836

I am surprised to hear about a PD controller though. In my testing, a PI controller seemed to behave much better than a PD controller. In my research, it seemed a common strategy to drop the D-component completely but I did not see the suggestion to drop the I-component.

azeemba··on PIDs: Creating Stable Control in Games
Thanks for the link! The ideas are presented so well. Really a cool approach too
azeemba··on PIDs: Creating Stable Control in Games
What are you imagining in this situation? How would one use IK with a running animation?

You could remove the root motion of the animation and control the position of runner in code. This would allow controlling the position/speed easily but to look natural you still have to tweak the animation speed dynamically. Just changing the foot position via IK would not be enough to make the animation look natural. So feels like you are still left with the original problem of tweaking the animation speed.

azeemba··on Skiff: Various Privacy Failures
That's not inherently bad if the comment is relevant and the relationship is made clear in the comment.
azeemba··on A supply chain attack on PyTorch
The bug bounties are usually pretty clear that you aren't allowed to make changes in the production systems. Here they made many changes - including changing the name of a release.

The bug bounties also prefer seeing a working attack instead of theoretical reports. So not sure how they could have tested their attack in this situation without making actual changes.

azeemba··on Par: Paragraph reformatter, vaguely similar to fmt, but better
What does it use by default?
azeemba··on Ask HN: What's your "it's not stupid if it works" story?
Haha you invented WAF! https://www.cloudflare.com/learning/ddos/glossary/web-applic...
azeemba··on Open-source drawing tool – Excalidraw
I like excalidraw for live discussions but if I want to make more detailed or better looking diagrams, I really enjoy these two tools:

- For drag-and-drop/WYSIWYG, I really like DrawIO. They have a web version https://app.diagrams.net/ but I strongly recommend the desktop version https://github.com/jgraph/drawio-desktop/releases/

- For text-as-diagram, I think Mermaid wins this by default since GitHub added markdown support for these: https://mermaid.live/ (This was github's announcement https://github.blog/2022-02-14-include-diagrams-markdown-fil... )

azeemba··on Cryptographers solve decades-old privacy problem
I had written an intro level blog post exploring image analysis use HME: https://azeemba.com/posts/homomorphic-encryption-with-images...

One paper I used showed how X-rays can be analyzed without exposing the X-ray data itself.

This can be generalized more to any situation where one party owns a proprietary algorithm and another party owns sensitive input data but they don't trust each other.

Modern LLMs are actually the perfect example. You want to use chatgpt but they don't want to give you their model and you don't want them to see your input. If HME was more efficient, you could use it so that the person executing the model never sees your real input.

azeemba··on Footsteps of pi
Phi/golden ratio also has a cool continued fraction sequence...it's only 1's all the way down
azeemba··on Leonard vs. Pepsico, Inc
No loss. Pepsi never cashed the check
azeemba··on There's Math.random(), and then there's Math.random() (2015)
The intention is that web.crypto is used when reversing should be difficult.

The goal for Math.random is to have much lower memory and speed impact. You can certainly disagree with their priorities but given those priorities, it makes sense to go with a much simpler algorithm that can be reversed easily.

azeemba··on π in Other Universes
Thanks for your example! I have been thinking about it.

Your observation is correct and the surface of the sphere is a metric. The ratio of radius to circumference is not constant with that metric though so I feel like something should disqualify it. But I am not sure how.

So I think your observation shows that we need a stronger constraint than just being a metric. Other commenters have hinted that you need a normed vector space but I am not sure if that's sufficient.

azeemba··on I accidentally saved my company half a million dollars
I thought 30 Rock made up the term. Had no idea it was a real thing.
azeemba··on π in Other Universes
There is no concept of the "background metric" here. Both the radius and the circumference are measured in the defined metric itself.

Any metric that "pulls on the origin" compared to Euclidean distance will have to do the mapping in a continuous way. This will basically result in both the radius and circumference being expanded in that metric.

Matter of fact, I linked an article that proves that for _all_ metrics, the value of π is always between 3 and 4 (inclusive). Unfortunately the article might have gotten the hug of death so here is an alternative link: https://www.researchgate.net/publication/353330827_Extremal_...

← PreviousPage 2 of 4Next →