News for hackers. Stuff that matters.

belladoreai

Re:Stimulation Clicker on Monday January 06, 2025 @11:57AM (#42612315)
classic neal.fun
Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @07:02PM (#40628336)
You can find many references by googling some variations of keywords Docker, Windows, brick
Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @05:46PM (#40627890)
"Bricking" is when your electronic device stops working, i.e. becomes a brick. Docker is known to occasionally brick Windows machines.
Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @05:45PM (#40627881)
Yep, it's super powerful.

I would say that the "more secure way" is to just use ComfyUI without installing any obscure nodes from unknown developers. You can do pretty much anything using just the default nodes and the big node packs.

Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @05:03PM (#40627597)
Well, Docker is great for this as long as you're not one of the unlucky few whose machine is bricked because of Docker. So, mostly yes, I suppose.
Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @02:57PM (#40626634)
The person who created the custom node is the same person who "hacked" it. Whether or not the account is technically owned by some unrelated civilian is not important, because there is no other activity on the account.
Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @02:20PM (#40626378)
Okay, sure. But if we have an account which has never had any legitimate activity on it ever - an account that has only ever been used to push malware - then I don't know if it matters much who is the "rightful owner" of the account. Things would be different if the GitHub account had some legitimate activity before the "hack".
Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @02:00PM (#40626228)
I have not seen a statement from Nullbulge so it's not appropriate to say that they took over the repo.

The author of the repo is claiming that their repo is hacked, but this is an obvious lie, because their very first GitHub commit is the one where they push the malware. Nobody would hack an empty GitHub account.

I don't know if the author of the repo is lying when they say that Nullbulge is behind the attack (perhaps the author is part of Nullbulge, perhaps not).

Re:Keylogger discovered in image generator extension on Sunday June 09, 2024 @01:58PM (#40626220)
It was an extension for ComfyUI, which has 37k stars on GitHub. The way ComfyUI is commonly used is that a person shares a "workflow" file, which utilizes various obscure extensions (called "custom nodes") and then the people who want to run the workflow on their own computer will install all these obscure custom nodes that have like 40 stars on GitHub or so.
Re:GPT-4o on Wednesday May 22, 2024 @11:56AM (#40442500)
Well, I asked for evidence and nobody provided any.
Re:GPT-4o on Tuesday May 14, 2024 @08:56AM (#40354721)
"The invisible spaghetti monster exists! It's just invisible so you can't see it!"

Where's the evidence that there's any significant use of NSFW AI by women?

Re:GPT-4o on Monday May 13, 2024 @07:07PM (#40349640)
This is not true at all. I'm active in multiple NSFW AI Discords and Subreddits, and looking at the type of material people engage with, almost all of it is very clearly targeted at heterosexual men. I'm not even aware of any online communities that would have NSFW AI stuff targeting mainly female audience.
Re:Show HN: LLaMA 3 tokenizer runs in the browser on Tuesday April 23, 2024 @06:52PM (#40138275)
I don't think I really understand your use case.

My library solves the following problem: how to tokenize text in a way that is compatible with llama3.

If you don't have any particular constraint (as in "tokenize text in a way that is compatible to model X"), then you can just write your own tokenization that tokenizes the text however you want. It doesn't really make sense to use a complicated tokenization scheme from some LLM model if you don't need to be compatible with that model.

If you really want each word to be its own token, you can easily do that by just splitting on whitespace and punctuation (though that will lead to a huge vocabulary).

Re:Show HN: LLaMA 3 tokenizer runs in the browser on Tuesday April 23, 2024 @12:28PM (#40133821)
It's the best option you have if you need to work with multiple LLMs in the browser.
Re:Show HN: LLaMA 3 tokenizer runs in the browser on Monday April 22, 2024 @02:54PM (#40117535)
If you need to work with multiple LLMs, you probably want to use transformers.js
Re:Show HN: LLaMA 3 tokenizer runs in the browser on Monday April 22, 2024 @12:28PM (#40115901)
> "What " might be a different token than "What" but the total token count shouldn't increment, would just be a different token, right?

The input string "What" (without trailing space) tokenizes into 1 token. The input string "What " tokenizes into 2 tokens. In theory, one might have a tokenizer that would simply tokenize "What " into a single token, but the actual tokenizers we have will tokenize that into at least 2 tokens.

> Curious then why this is called "LLaMA 3 tokenizer" what does it have to do with llama3?

When you input text into any of the LLaMA 3 models, the first step in the process is tokenizing your input. This library is called "LLaMA 3 tokenizer", because it produces the same tokenization as the official LLaMA 3 repo.

When I said that different models use different tokenization schemes, I am talking in comparison to other models, such as LLaMA 1, or GPT-4. Different models use different tokenizers, so the same text is tokenized into different tokens depending on if you're using GPT-4 or LLaMA 3 or what not.

Re:Show HN: LLaMA 3 tokenizer runs in the browser on Monday April 22, 2024 @08:11AM (#40113580)
> I'm not sure it's working correctly, I entered the word "what" and it says "4 characters, 3 tokens", I type a space and it says "4 tokens" - shouldn't it just be 1 token? and the space shouldn't count in this case?

When you enter the word "what", the 3 tokens were: start-of-string token, the token "what", and end-of-string token. I made a change now to hide the special start-of-string and end-of-string tokens so that the visualization is a bit simplified.

Adding a space to input changes the tokenization of the input. Sometimes the resulting token count is the same (if the space is merged into some other text), sometimes the resulting token count increases by one (if the space does not get merged).

That part of the tokenizer is working correctly.

> Also occasionally a space appears as a capital G (in Chrome)

Fixed, thanks for reporting! This is a fork of my earlier tokenizer for LLaMA 1 and the demo visualizer had special handling for tokens 0-256 in LLaMA 1. This LLaMA 3 tokenizer doesn't have same special tokens, so some tokens would be visualized in a weird way (like that G thing you reported). I removed that special handling now and it fixed the visualization issue.

> Question: Is there a special ruleset that llama3 follows that other LMs don't as far as what qualifies as a token?

Different models use different tokenization schemes. Most models use some kind of variant of Byte Pair Encoding, trained with their data (the tokenizer itself is also trained, not only the language model).

Can you show me one (1!) artist who makes a living wage off of crypto payments without any kind of ponzi-like speculative aspect? An artist who is just using crypto as means of payment AND actually getting paid with it. Just one example is enough.
> If an artist can’t manage to set up a crypto account—or a bank account, which requires the exact same documents—they are probably not in a position to run their own art business.

The artist, sure. But once the artist goes through all that work to set it up, will they get access to food which they need in order to continue living? No, they won't. Because the consumers will prefer products that are easy to pay for.

> No—I am talking broadly about artists selling their work through crypto, and some of it does include $5 comics, like Sloth Zine:

aaand the link you gave is an NFT collectible...

The price point was not the main point here - sure an NFT doesn't have to be expensive it can also be cheap. That was not the point. My point was that the audience for ponzi-like NFT games is different from the audience for more "traditional" consumers of art. If you are, for example, an artist who currently makes comic books that people will pay for with Visa and Mastercard, you will not be able to provide food on the table by switching into crypto payments.

> A lot of artists already are using crypto to accept payments. Look at “crypto art” space as a whole.

You're conflating collectibles, which are purchased for speculative purposes, to the kinds of art which are purchased for consumption. Yes, you can use crypto to build ponzi-like games for digital assets, everybody knows that. The question here is can an artist charge like $5 for a comic book or $10 for a monthly subscription. And the answer to that question is no, not to an extent where they would be able to afford food, which they need in order to continue living.

> You don’t need tons of paperwork to set up on and off ramps.

I personally needed a passport, a driver's license, and a recent electricity bill. I also needed a mobile phone with video camera, plus a banking connection which is crypto friendly.

> Can you give reasons why it wouldn't besides people (which includes payers) don't want to use it?

Sure! Acquiring the required paperwork and banking connections to get on crypto on/off ramps is difficult. That's one reason.

Anyway, see how you retreated your argument to "which includes payers"? So it seems that you actually agree with me that artists wouldn't be able to set up crypto payments to provide a livelihood for themselves, due to reasons which are outside their control.

It highlights the issue that the suggested solution is a theoretic or academic solution which we theorize might work out some day, but is not currently a realistic solution for the need to provide food for artists to eat so that they could remain alive.

The fact that you disagree with the explanation due to ideological purity reasons is not grounds for downvoting it.

> For no reason other than people don't want to.

You're living in complete fantasy land. There are many reasons people find it hard to make payments in crypto, other than "just don't want to".

Again, I'm reiterating the point that artists need to eat food to live, and artists would be happy to set up payments in crypto, if that would lead to them gaining access to food. But it wouldn't, so they won't.

> You can look at the code. It's like 50 lines. It is logically trivial

Ah yes, the thing I always love to do before purchasing a naughty comic book: code reviews! I just love to read the code that verifies that my $2 purchase of a comic book. I love sweating nervously and verifying that clicking this button will not have unforeseen consequences, such as one where I lose my house because I missed something in code review. wHy dOEsNT evERyONe jUSt uSE crYPtO

If you're an artist who needs to eat food in order to live, this "payment system" does not facilitate your ability to achieve that.
Not sure why you're being downvoted, because your comment succinctly highlights the issues and is correct.

Older »