bobba27

6 ms·

1.
by bobba27 2y ago
They did fuck up quite a bit though. They injected their payload before they checked if oss-fuzz or valgrind or ... would notice something wrong. That is sloppy and should have been anticipated and addressed BEFORE activating the code. Any
2.
by bobba27 2y ago
This is a state sponsored event. Pretty poorly executed though as they were tweaking and modifying things in their and other tools after the fact though. As a state sponsored project. What makes you think this is their only project and that
3.
by bobba27 2y ago
For the duration of a major release, up until ~x.4 pretty much everything from upstream gets backported with a delay of 6-12 months, depending on how conservative to change the rhel engineer maintaining this part of the kernel is. After ~x
4.
by bobba27 3y ago
C and C++ are HARD to use correctly, but how many of those 60-70% vulnerabilities would have been resolved by just compiling with llvm address sanitizer? It would have stopped virtually all of them? https://llvm.org/pubs&#x2
5.
by bobba27 3y ago
70% sounds a bit high but I can accept it. You can do a lot in regards to memory safety also in C / C++ : https://llvm.org/pubs/2006-05-24-SAFECode-BoundsCheck.pdf Anyway. Writing safe code in C is HARD but possib
6.
by bobba27 3y ago
The question is whether this actually "creates a 3d model based on the picture", or if it "finds an existing model that looks similar to the picture and texture map it".
7.
by bobba27 3y ago
Yes. But it is still promising. Things are getting incrementally better. (I dream of the day when this can be used to automatically create paper-craft templates.)
8.
by bobba27 3y ago
To me, a cynical old man, the threat sounds that "it might say something politically incorrect or that I disagree with". That is what I understand the threat is, not a robot uprising a-la Terminator.
9.
by bobba27 3y ago
There are arguments for this. When we are talking about "ai safety" == "don't swear or say anything rude, or anything that I disagree with politically". What we are talking about is creating sets of forbidden knowle
10.
by bobba27 3y ago
Very early google was full of passion and people that wanted to build cool things for users. There was a passion where building things that would surprise and delight users. The process when this changed was slow but I think started 2008-20
11.
by bobba27 3y ago
TBH, I think those reasons are BS, and in fact what they claim he did is normal in any tech company. Start multiple projects with different approaches in parallel and pick the best at the end. That is how you innovate and test stuff fast, a