bmenrigh

10 ms·

1.
by bmenrigh 3d ago
This is why the checking doors / neighborhood analogy isn't a good one. Having one person with poor computer security negatively impacts everyone. Hacked sites turn into phishing landing pages, exploit kit hosting, stolen data dum
2.
by bmenrigh 3d ago
If the neighborhood was constantly being canvased by criminals checking doorknobs, so your concerned neighbor went over to your house to check your doorknob, and then let you know if you accidentally left it open, would you also accuse your
3.
by bmenrigh 3d ago
Calling vuln scanning from a non-profit a felony is a bit of a stretch. Many for-profit companies do similar vuln scanning and then threaten companies with security "scorecards". That is borderline extortion.
4.
by bmenrigh 3d ago
I just checked my own webserver logs (I also run a sever in the ntp pool) and I too see some hits in my webserver logs. They look to all be log4j vuln scanning activity (CVE-2021-44228), and the volume isn't that high (a few a day, and
5.
by bmenrigh 13d ago
If someone wants to beat me to either a solution, or proving no solutions exists, then by all means :-) I think it's an extraordinarily hard problem computationally, even with exceptional theoretical backing. Where people may be able t
6.
by bmenrigh 13d ago
Well I’m first exhausting some promising regions of the search space which should complete in less than 2 weeks. After that I strongly suspect a solution doesn’t exist (for the column grouped space I’m searching). If it were just a matter o
7.
by bmenrigh 13d ago
A set of permutation fair dice work for any subset of dice and players. So a 4-dice perm-fair set allows any three dice to be used and is guaranteed to be perm-fair for 3 as well. The “Go First” name is catchy for laypeople, but permutation
8.
by bmenrigh 13d ago
The big open question is whether a set of 5 (permutation fair) 30-sided dice exists. I’ve been working on that on and off since 2012. I picked it up again about a month ago and have made dramatic speed improvements to my search, but exhaust
9.
by bmenrigh 13d ago
> GPT‑6 Astra brings together years of research and big bets across pre-training Do we know if they’ve finally completed another pre-training run, or is this building off the same pre-training base they’ve been using since the GPT-4 days
10.
by bmenrigh 19d ago
At first I was going to say this is just the tetrahedra trick dressed up in slightly different clothes, and some sense it is, but there is a nice cancellation in the y and z coordinates which leads to less calculation in practice.
11.
by bmenrigh 20d ago
I saw some news last week saying the project had reached 100%. Looking at the git repo ( https://gitlab.com/kholdfuzion/goldeneye_src ) that claim is a bit harder to verify, but maybe look again?
12.
by bmenrigh 27d ago
Okay this result may well be in his expertise wheelhouse but what about the recent smooth Carathéodory conjecture disproof? Or the Jacobian, or the Hadamard matrices? It seems to span a pretty wide range. I know others are getting good resu
13.
by bmenrigh 27d ago
I just don't understand how Alpöge can get Claude to construct so many complex mathematical objects. He must already have some deep insight into the structure these things are likely to take. Naive prompting, or naive search would not
14.
by bmenrigh 1mo ago
Has FHE really progressed so far that it's now so efficient that doing computation on an encrypted prompt is feasible? I thought even basic operations like FHE addition were still thousands of times more complex. The only mention in t
15.
by bmenrigh 1mo ago
> In which parallel universe? "As far as my technological life goes"
16.
by bmenrigh 1mo ago
I'm one of the BSidesSF CTF organizers and challenge authors (symmetric). The article is a few months old now (May) which is ancient history as far as AI advancements go. That said, I'm still emotionally coming to terms with what
17.
by bmenrigh 1mo ago
These sorts of manifesto essays have never resonated with me. To me it never was—- and never has been—- about freedom. It’s about curiosity and knowledge. The essay seems to glorify the bad-old-days of fighting for freedom against corporate
18.
by bmenrigh 2mo ago
A pretty reasonable question. I guess it could be my ISP filtering. Or rather could have been, since the issue seems like it was transient. I'm now getting resolutions. Very strange, I wish I'd recorded what was going on better wh
19.
by bmenrigh 2mo ago
I'm in the US and I'm either getting NXDOMAIN or NOERROR (with no A record answer) back from every big nameserver I try (my ISP, Google, Cloudflare, etc.). But a dig +trace archive.ph (which recurses all the way to the root locall
20.
by bmenrigh 3mo ago
The 2n choose n solution isn't at all intuitive to me but thinking about it in terms of 40 steps, 20 of them rightward and 20 of them downward an then looking at all distinct permutations of these 40 steps as (40!) / ((20!)^2) is
21.
by bmenrigh 3mo ago
Oh I didn’t mean at all charging them. I mean licensing in the sense of granting rights for the purpose of training. Probably most labs would be fine adding the language to the training for free as long as the dataset quality is high and it
22.
by bmenrigh 3mo ago
I think at this point what the Netherlands, and any other country that wants a good model in their language should do, is gather up every piece of text ever written in that language and license it to the big AI labs/companies for train
23.
by bmenrigh 3mo ago
I was just looking at Unicorn last week because it's used by unipacker to do automated unpacking of binaries. I built a "toolbox" for gpt-5.5 to do semi-automated malware and exploit reverse engineering and unipacker is somet
24.
by bmenrigh 4mo ago
Mini Micro seems to be built on Unity. The MiniScript portion of it is open source https://github.com/JoeStrout/miniscript but the version packaged for use by Unity costs some money. I can't tell if the people beh
25.
by bmenrigh 4mo ago
Every C program I've had codex write ended up costing me more time than had I just done it from the start myself. Whereas almost every Python program it's written for me saved me time, even including the time I spent cleaning it u
26.
by bmenrigh 4mo ago
The black box analysis needed to decode this is incredibly hard but also incredibly fun and rewarding to pull off. Very impressive work.
27.
by bmenrigh 4mo ago
Ah I was a few years later on the TI-86. Around 1999. Between this, and SNES emulation (searching memory for values and adjusting things to see how they'd affect the game), I was destined for computer science.
28.
by bmenrigh 5mo ago
Which is exactly why I mentioned rejection of zero, negative numbers, etc. You can reject them, but doing so just throws away useful tools without gaining anything in return.
29.
by bmenrigh 5mo ago
Rejecting infinity is a purely philosophical stance that doesn’t teach us anything about reality. There is a big difference between “infinity doesn’t exist” and “infinity doesn’t exist physically”. I should also add that the resolution of z
30.
by bmenrigh 5mo ago
The article doesn’t really tell us what is gained by rejecting infinity. And in general, why not also reject zero, negative numbers, irrational numbers, complex numbers, uncomputable numbers, etc.? Seems like an article about quacks that ca

More ›