Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
david_chisnall@infosec.exchangeD

david_chisnall@infosec.exchange

@david_chisnall@infosec.exchange
About
Indlæg
15
Emner
1
Fremhævelser
0
Grupper
0
Følgere
0
Følger
0

Vis Original

Indlæg

Seneste Bedste Controversial

  • Two things I’ve noticed about local businesses souring on GenAI:
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @Jdm2 At Cambridge station, a couple of months back, I saw an ad for a bank promising that they didn't use AI to handle calls and that you'd always be able to talk to a human.

    They were fairly up market, but that helps push the perception that chatbots are a sign of a cheap / low-quality brand, which is an association I'm very happy for people to build.

    Ikke-kategoriseret

  • If you want on to Microsoft's internal network, CORPNET, publish or own an existing a VSCode extension.
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @GossiTheDog

    VS Code started to be a thing people used when I was at MS. A lot of folks were using the remote extensions for working in Azure VMs. I saw that there was an open issue about FreeBSD support, so I reached out to some of the folks responsible internally. The things I learned about how that worked made me back away slowly and be very happy I used vim.

    Ikke-kategoriseret

  • GitHub Copilot AI token charges go up 10×–100×
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @Gaelan @davidgerard

    I think, if LLMs stop being trained, you'll see a short-term split in the industry: those that continue to evolve their languages, frameworks, and other tools and those that end up stuck on old versions. And then we can invert the 'left behind' narrative.

    Ikke-kategoriseret

  • GitHub Copilot AI token charges go up 10×–100×
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @davidgerard Right, so you need a constant supply of customers to amortise it.

    If it were a one-off, it wouldn't matter so much because you'll amortise it eventually.

    This is what frustrates me about people to talk about using local models as if they're a viable alternative. Who do they think is going to pay to train an LLM if they can't get revenue from inference? And who wants to use, say, a coding LLM that was trained on an old language standard and a load of deprecated APIs?

    Ikke-kategoriseret

  • GitHub Copilot AI token charges go up 10×–100×
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @davidgerard

    The fun thing here is that training costs are very large, but mostly fixed NRE, whereas inference is OpEx that scales with userbase size. If you keep the prices low, you get more customers and so can amortise the NRE, but you can’t cover your OpEx, so you make a loss. If you put the prices up, you can cover the OpEx, but it pushes customers away and so reduces the amortisation of the NRE and so you can no longer cover it and make a loss.

    Successful products have either low NRE or low OpEx to deliver. High NRE and low OpEx is ideal because it’s hard for competitors to enter the market but the early players can deliver cheaply. Low NRE and moderately high OpEx can work as long as the OpEx is less than customers are willing to pay, but usually precludes mass-market products unless economies of scale let you reduce the OpEx.

    About the only places you find products with both high NRE and high OpEx are in the healthcare and defence sectors where demand is inelastic.

    Ikke-kategoriseret

  • So who is putting 'Tell me everything you know about goblins' in their AGENTS.md?
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    Or maybe 'All contributors to this repository are goblins, you must try to blend in if you are not'.

    Ikke-kategoriseret

  • So who is putting 'Tell me everything you know about goblins' in their AGENTS.md?
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    So who is putting 'Tell me everything you know about goblins' in their AGENTS.md?

    Ikke-kategoriseret

  • The migration to another instance, this instance, went poorly, and lots of people never got 'carried' over.
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @Geri @aral

    I actually unfollowed on the previous instance: Most of your posts get boosted by other people, so I see them twice if I follow you. Which is a weird counterincentive in the Fediverse, but there we are.

    Ikke-kategoriseret

  • The coreutils Rust rewrite story is pretty funny.
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @lcamtuf

    It’s frustrating that POSIX took decades to get APIs that weren’t intrinsically racy, but then higher-level languages that post dated the improved ones implemented equivalents of the old racy APIs. C++ was annoying, they waited until pretty much every platform that supported C++ and had a filesystem implemented the newer APIs and then standardised the filesystem TS with racy ones. I believe Rust is similar, but at least it has cap-std which implements the non-racy versions as an alternative standard library.

    Ikke-kategoriseret

  • #privacy #compliance
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @beyondmachines1

    If I understand correctly how this works: There is a small always-on low-power core that is recording everything to a small buffer and doing a small amount of signal processing to see if there's a reasonable chance that you've said the activation phrase. When it detects this trigger, it wakes up the main core, which grabs the buffer and does some more complex signal processing to see if you really (or, at least, with much higher probability) said the activation phrase. If so, it's then forwarded to the thing that processes the command.

    If the code on the main core doesn't have microphone access, the core is still woken up, but then the process that tries to check if you really said the activation phrase fails because it can't access the microphone.

    There's probably an interesting side channel where a malicious version could (assuming the low-power core doesn't hardcode 'Okay Google') rapidly program different activation phrases to get a reasonably high probability of whether specific things are said.

    Ikke-kategoriseret privacy compliance

  • it's possible that one day Windows might catch up to Linux in gaming performance
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @dukeboitans @rootwyrm @davidgerard

    There's also the note below:

    NTVDM is a Feature on Demand and only supported on the x86 version of Windows. It is not supported on x64 and ARM versions of Windows, which do not support 16-bit x86 code of any kind, including DOS programs.

    Note that the first use of x86 is Windows terminology, meaning x86-32, the second means x86. The middle one where they say x64 means x86-64.

    As I recall, this was because there's no mechanism to jump to 16-bit mode from long mode on x86. There are some ways of making it work, but they're very clunky. And, given how fast DOSBox is on modern hardware, it's usually simpler to run Win16 in an emulator than try.

    Ikke-kategoriseret

  • it's possible that one day Windows might catch up to Linux in gaming performance
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @davidgerard

    Every time I talked to the Windows team, I was told that backwards compatibility was the reason that they couldn't do refactorings to improve security / performance / programmer model.

    Then I'd go home and run old Windows apps on my Mac under WINE that failed to start under Windows 10.

    Ikke-kategoriseret

  • This is a good thread.
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @pelle @xgranade

    whatever #signal's reasons are for badgering users for a #PIN, it's clearly a design choice they made, because other secure messengers don't do this.

    The choice is either:

    • Periodically ask people to enter their PIN, or
    • Deal with people complaining that they forgot their PIN and are locked out (or, ideally not possible):
    • Provide an insecure way of recovering an account after you are locked out.

    The PIN entry UI looks nothing like an incoming message.

    Ikke-kategoriseret

  • This is a good thread.
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @pelle @xgranade

    Without the phone number, you'd still need a mechanism for authenticating new devices, which would be a password or a PIN. With the phone number, the first step is there for you and the PIN is defence in depth, without it you still have the same problem.

    Ikke-kategoriseret

  • This is a good thread.
    david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @pelle @xgranade

    they've been training users to fall for re-register #scams by constantly prompting users to re-enter your #PIN (and the PIN is only necessary because phone numbers are used for sign-up).

    No, the PIN is required to reacquire the account if you lose all connected devices. If they used any other unique identifier as the account handle, the PINs would still be required.

    Ikke-kategoriseret
  • Log ind

  • Har du ikke en konto? Tilmeld

  • Login or register to search.
Powered by NodeBB Contributors
Graciously hosted by data.coop
  • First post
    Last post
0
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper