News for hackers. Stuff that matters.

nenaoki

I think they just use the encryption and key exchange that WebRTC has cooked in https://datatracker.ietf.org/doc/html/rfc5764
The pin would just be for coordination, not encryption.
it's sad to compare.

apart from that: the word "mark" comes from a root for "boundary" or "border", and really it doesn't need to be about that; we're all in this together.

your shrewd idea might make a fine layer back up the Tower of Babel
Re:WASM 2.0 on Friday May 09, 2025 @08:07PM (#43942114)
The WASM Constant Time proposal was just moved to inactive 4 days ago[0].

From what I can tell the bulk of the work for it was done in 2018[1], but it needs updating to consider SIMD, and for legwork to be done on moving it along as a proper spec extension.

Until someone picks up this valuable work and lands this much-needed feature in WASM, we're extremely vulnerable to timing attacks in all WASM crypto.

[0] https://github.com/WebAssembly/proposals/blob/9fc7a85e/inact...

[1] https://github.com/PLSysSec/ct-wasm

Python devs needing to be sheltered from mature C++ themes?

Checks out I guess.

Re:Qwen2.5-VL-32B: Smarter and Lighter on Tuesday March 25, 2025 @06:37AM (#43469724)
Just based on the stage of the game I'd say it's not likely, but the possibilities are there:

https://news.ycombinator.com/item?id=43121383

It would have to be from unsupervised tool usage or accepting backdoored code, not traditional remote execution from merely inferencing the weights.

Re:Qwen2.5-VL-32B: Smarter and Lighter on Tuesday March 25, 2025 @06:22AM (#43469668)
My understanding is that models are currently undertrained and not very "dense", so Q4 doesn't hurt very much now but it may in future denser models.
Re:Carefully but Purposefully Oxidising Ubuntu on Tuesday March 18, 2025 @12:22AM (#43395729)
Pretty absurd conflation you've got there.

The package manager just offers a common interface for interop, you can still build without dependencies.

[delayed]
An LLM would have to be two-faced in a sense to surreptitiously mess with code alone and be normal otherwise.

It's interesting and a headline worthy result, but I think the research they were doing where they accidentally found that line of questioning is slightly more interesting: does an LLM trained on a behavior have self-awareness of that behavior. https://x.com/betleyjan/status/1894481241136607412

Re:Intel's Battlemage Architecture on Wednesday February 12, 2025 @12:38PM (#43027632)
These are a bit mythical, finding one for sale is no small feat.

I guess adding memory to some cards is a matter of completely reworking the PCB, not just swapping DRAM chips. From what I can find it has been done, both chip swaps and PCB reworks, it's just not easy to buy.

Software support is of course another consideration.

Re:Intel's Battlemage Architecture on Wednesday February 12, 2025 @10:29AM (#43026329)
>A clamshell 5090 with 2GB modules has a max limit of 64GB

How does "clamshelling" get around the 32-bits per module requirement? Do the two 2GB modules act as one 4GB module when clamshelled?

Re:Your AI Can't See Gorillas on Saturday February 08, 2025 @02:48PM (#42985638)
Maybe A Whisker Away is actually a documentary...
Re:Official DeepSeek R1 Now on Ollama on Tuesday January 21, 2025 @02:25AM (#42777418)
https://nvidianews.nvidia.com/news/nvidia-puts-grace-blackwe...

GB10, or DIGITS, is $3,000 for 1 PFLOP (@4-bit) and 128GB unified memory. Storage configurable up to 4TB.

Can be paired to run 405B (4-bit), probably not very fast though (memory bandwidth is slower than a typical GPU's, and is the main bottleneck for LLM inference).

I reckon it's mostly noise. An ad I saw three times in the sample was just an awful mobile game I don't deserve to be subject to ads about, and the other ad I saw twice was just based on my location.
Nice job. It should ignore ads imho, my top 2 "largest influences" were just ads. I mean, I guess we do influence ads via engagement or whatnot, but it's not as if I pay mind to an ad the way I pay mind to a post.

My card: https://files.catbox.moe/t8rzlb.png

https://kokorotts.org/ is the proper link.
4chan's /jp/ has [sjis] bbcode tags for formatting ASCII art consistently with the Mona typeface.

No thread up though, and the archive doesn't support the tags.

Re:ReMarkable launch Paper Pro, a colour e-ink tablet on Wednesday September 04, 2024 @08:02PM (#41452110)
A4 surely. A1 paper is massive.
Re:Google delays third-party cookie demise yet again on Wednesday April 24, 2024 @07:07PM (#40150990)
It's whitelisted based on the embedding domain.

https://support.google.com/youtube/answer/132596

>Ads appear on brand safe sites: YouTube works diligently so that our advertisers' brands appear on sites that reflect our respective core values. Our systems closely evaluate websites and their content against various factors when finding out whether to turn on In-stream ads on YouTube embeds. These factors include a strict set of guidelines on content like adult imagery, violence, inappropriate and hateful language, and sites that promote infringement.

Sleep Cycle does this.
Re:PicoCalc: A Fully-Functional Clone of VisiCalc on Wednesday October 04, 2023 @04:27AM (#37762405)
Numbers has some good incremental improvements. It does have first-class support for headers, and even uses them for references which makes things absurdly clear in comparison to the plain A1 format. Multiple tables per sheet is also particularly great IMO.

The web version was mostly replete last I used it half a decade ago, including realtime collaboration with mac and iOS.

Not to say it's not moronic to be driving inattentively at all, but it could be the case the self-driving system's behaviour wasn't ideal, in that it could have lent an impression of a clear road to the other driver.

It wouldn't excuse the driver, especially given them fleeing, but it's an aspect worth consideration if it came into play at all.

Re:Tell HN: I Miss Flash on Monday October 02, 2023 @03:28AM (#37734948)
JPEXS[0] is very full-featured if you're interested in porting swfs.

I revived this simple loop the other weekend and it was a breeze to extract the media;

https://fwoofy.moe/ (sound warning)

Original https://dagobah.net/flash/fwoofy.swf

[0] https://github.com/jindrapetrik/jpexs-decompiler

[delayed]
Re:Everything authenticated by Microsoft is tainted on Sunday October 01, 2023 @03:18AM (#37723532)
It's named so because you have "0 days" to patch it; it's not referring to the age of the vuln.

Older »