TrueDuality

7 ms·

1.
by TrueDuality 28d ago
I have a kid with my partner and I'm still not sure it was the right decision for me. They do become a full-time job in their own right and there is a whole set of skills that you can kind of learn through books but is going to be uniq
2.
by TrueDuality 1mo ago
You should go read the actual technical reports of the incidents and the follow on reports about the capabilities of smaller models in similar kinds of environments. This isn't new. The things exploited are still pretty basic in old an
3.
by TrueDuality 1mo ago
Ah yes let the FUD continue. This is a real problem but so far not nearly as severe as any of the marketing has made it out to be to the overall detriment of everyone including these companies announcing these scary capabilities. These anno
4.
by TrueDuality 1mo ago
What you're describing is a harness implementation detail not something specific to the MCP protocol or even how skills behave. Both of those are effectively providing the same level of information to the harness. Harnesses have tradit
5.
by TrueDuality 2mo ago
Really not trying to be cheeky... but why? Who is the audience here? I can see maybe academics with small grants and want to do the absolute minimum spend on compute... But that is an audience you will have to fight for every cent. This doe
6.
by TrueDuality 2mo ago
The problem frequently crops up in order-deterministic systems that use time and haven't accounted for the edge case of all the vagaries related to time-keeping of this being only one. I've worked on some extremely sensitive syste
7.
by TrueDuality 4mo ago
Do you want to trust your company's legal commitment on the output of modern LLMs?
8.
by TrueDuality 6mo ago
The article itself covers the specific reasons that has led to that exact problem and the potential solutions available in the ecosystem with their various trade-offs.
9.
by TrueDuality 6mo ago
A big chunk of the problem with this kind of legislation for me is that it inherently indicates a failure to govern to me. I disagree with the premise of the solution, but even more so this is trying to legislate a specific engineering solu
10.
by TrueDuality 7mo ago
This is publicly publishing the account ID. There is an optional extension in RFC8659 that extends it but it isn't required by any implementer. This puts that ID into a public well known location that is easy to scrape and will be (thi
11.
by TrueDuality 7mo ago
The accounturi is an optional extension. Email, and phone are also optional. This is the first challenge that publicly requires you to specify your account ID publicly. There may be implementations that require it but neither Let's Enc
12.
by TrueDuality 7mo ago
I think this is solving a real operational pain point, definitely one that I've experienced. My biggest hesitation here is the direct exposure of the managing account identity not that I need to protect the accounts key material, I alr
13.
by TrueDuality 8mo ago
I'm not sure the distinction matters, and attribution is inherently hard and easy to get wrong. I frequently read Country X is doing Y, less as a indicator of government action and more of a single that we can't be more specific o
14.
by TrueDuality 9mo ago
Pretty unlikely in my book. This runs OpenWRT out of the box. Given, there are still closed source binary blobs in these things, especially around WiFi 6 and frequently the customizations for the kernel isn't released, but those tend t
15.
by TrueDuality 9mo ago
I love the inherent wonder and joy in this post around the original images.
16.
by TrueDuality 10mo ago
Now THAT is great news
17.
by TrueDuality 10mo ago
This is a false equivalency I'm surprised no one else has brought up. An archive of a site preserves attribution inherently, the scraping and training are not.
18.
by TrueDuality 11mo ago
Yeah you're 100% right that it's optional. It's usually only required to allow company data such as email, slack, file sharing etc on your personal device. If you're on-call it is VERY rare for an employee to win a fight
19.
by TrueDuality 11mo ago
Having a device enrolled in an MDM package does not make it a corporate device. Many corporations require personal devices be managed to support remote wiping. If I install a productivity or developer tool on my personal phone or laptop for
20.
by TrueDuality 11mo ago
I haven't decided my opinion on this specific license, ones like it, or specifically around rights of training models on content... I think there is a legitimate argument this could apply in regards to making copies and making derivati
21.
by TrueDuality 11mo ago
Another commenter mentioned that this is needed for consistently ordering events, to which I'd add: The consistent ordering of events is important when you're working with more than one system. An un-synchronized clock can handle
22.
by TrueDuality 1y ago
That is also what I came here to find out. Would love to hear from the creators of the project how it compares and contrasts to Talos. We've been running Talos for a few bare-metal and air-gapped cluster deployments with pretty good su
23.
by TrueDuality 1y ago
The irony for me is that it's already slow because of the lack of native 64-bit math. I don't care about the memory space available nearly as much.
24.
by TrueDuality 1y ago
You don't necessarily need on-package RAM for this. I'm not sure I'd build a project around this, but 16MiB of RAM would hardly be BOM killer.
25.
by TrueDuality 1y ago
I write primarily as a means to collect my thoughts and outcomes around projects. I keep analytics on my site not to optimize for any particular audience but because it feels validating and that I'm contributing in another form. I stil
26.
by TrueDuality 1y ago
LXC far predates docker regardless of size or impact. It's not disingenuous if you were literally the foundation docker was able to package into a shiny accessible tool.
27.
by TrueDuality 1y ago
Remember that under the last reign of the current present, information services were removed from Title II regulation. Biden did vote to restore the net neutrality status last year but that was challenged in court and never went into effect
28.
by TrueDuality 1y ago
How many of the makers of these trash SEO sites are going to voluntarily identify their content as AI generated?
29.
by TrueDuality 1y ago
The references I'd direct you to are NIST 800-53r5 controls CM-3 (Configuration Change Control) and CM-4 (Impact Analyses) along with their enhancements, require that configuration changes go through documented approval, security impac
30.
by TrueDuality 1y ago
Speaking as someone who has worked in tightly regulated environment, certificates are kind of a nasty problem and there are a couple of requirements that are in conflict for going to full automation of certificates. - Rotation of all certif

More ›