execveat

6 ms·

1.
by execveat 8mo ago
Defenders have threat modeling on their side. With access to source code and design docs, configs, infra, actual requirements and ability to redesign / choose the architecture and dependencies for the job, etc - there's a lot that
2.
by execveat 11mo ago
The real world use cases for LLM poisoning is to attack places where those models are used via API on the backend, for data classification and fuzzy logic tasks (like a security incident prioritization in a SOC environment). There are no th
3.
by execveat 2y ago
CrowdStrike does this trick where it replaces the file (being transferred over a network socket) with zeroes if it matches the malware signature. Assuming that these are the malware signature files themselves, a match wouldn't be surpr
4.
by execveat 2y ago
It's heartwarming to believe in the "family" narrative some companies promote, but it's important to remain pragmatic. This narrative is just a motivational tool to encourage employees to go above and beyond their compen
5.
by execveat 2y ago
I might be misunderstanding, but from Andrew's Linkedin it looks like he wasn't a security researcher at MS, he was actually the person responsible for translating between security researchers and the upper management: > Evang
6.
by execveat 2y ago
For the MS size entities, the risk calculation is way more complicated. The 1:1 between cost of mitigation vs cost of exploitation only applies to opportunistic attacks, really. At the level where APTs get involved, the data / access m
7.
by execveat 2y ago
Well, because as a security person I can only evaluate his actions from the point of security. Evaluating actions of MS business leadership is beyond my expertise. I highly doubt that the senior leadership would willingly accept this kind o
8.
by execveat 2y ago
I work in infosec, and this sounds like a communication failure on the whistleblower's part. Contrary to what many people believe, the profits should be prioritized over security for the most companies, that's only natural (afte
9.
by execveat 3y ago
At this point you should just leave this dumpster fire of an organization and find a more reasonable place to work. I can't relate to the people who keep inventing atrocious workarounds ignoring the problem that they work in a hostile
10.
by execveat 3y ago
Allow the eIDAS certificates, but limit them to the country code TLDs to match the jurisdiction of the certificate issuer.
11.
by execveat 3y ago
You can't block a browser at the DNS level.
12.
by execveat 3y ago
No, there is no confusion here at all (for a Python developer). I would consider it a code smell though as the whole problem is completely avoidable by better naming. By the way, there is a vulnerability (Prototype Pollution) that is only p
13.
Snuggsi ツ – Easy Custom Elements in ~1kB(github.com)
1 points by execveat 3y ago|0 comments
14.
by execveat 3y ago
There also are programmers who are aware of much more complicated things being done in sister projects, like JVM and JS runtimes in this case.
15.
by execveat 3y ago
In my experience Bing chat and phind are useless. But perplexity.ai and GPT4 are amazing. GPT-3.5 and Cloude-instant (available through poe.com) are cool as well, even though they got significantly dumbed down recently, presumably to lower
16.
Bard Activity Setting(myactivity.google.com)
3 points by execveat 3y ago|0 comments
17.
by execveat 3y ago
Yeah, but Reset the chat between your questions. EDIT: Also, this doesn't seem convincing: "I am not as advanced as PaLM 1, but I am learning new things every day. I hope that one day I will be able to do everything that PaLM 1 ca
18.
by execveat 3y ago
It seems that Bard's version is only specified in the prompt, and it doesn't have a strong sense of identity. For me it's pretty reliable: 1. ask it what PaLM 2 is (to pollute the context) 2. ask it whether it's based on
19.
by execveat 3y ago
ChatGPT was the same last year, but since ClosedAI added some kind of magic (fine-tuning or just embeddings auto-injection) so that models can somewhat describe themselves.
20.
by execveat 3y ago
It's a language model, FFS. Ask it whether it uses PaLM 1 and it will confirm it as well.
21.
by execveat 3y ago
Not even close. I'd prefer local WizardLM/Vicuna to this Artificial Idiot. The funniest to me is that one of the examples they suggest you try is asking questions about google/jax repo, which kinda suggest that Bart can index
22.
by execveat 3y ago
They also said they are removing the waitlist, but it's still there. EDIT: The waitlist is removed, but the rollout takes some time.
23.
by execveat 3y ago
> The problem is, guys with guns will come to your door, beat you with a wrench, and put you in jail. Counterpoint: guns, doors, wrenches and jails are tools as well. So, I don't buy this notion that technology can't solve soci
24.
by execveat 3y ago
As a data point I'm getting >3 tokens per second for 30b model (q5_1 quantization) and >1 token per second for 60b model (q5_1 as well) on M1 Max. This is good enough for my usecase and it beats an old P40, but I have no idea wha
25.
by execveat 3y ago
You can't right now. Devs are working on instructions for porting other models, but they're not ready yet. The point of MLC is that it supports pretty much all GPU backends out there (including Intel and Mac). The bundled model is
26.
by execveat 3y ago
I get 3 tokens per second on M1 Max running 30B models compared to 1 token per second on a GPU (P40), both quantized to 4bit. So, in my opinion CPUs are better for inference (at least fast CPUs with DDR 5 versus cheapest GPUs). The reason w
27.
by execveat 3y ago
ARM-based Macs are the easiest way to get an acceptable performance without the headaches right now, if you can afford the price. Install https://github.com/oobabooga/text-generation-webui , update pytorch and llamacpp-
28.
by execveat 3y ago
It's nowhere close to Codex/Copilot. Try the demo: https://huggingface.co/spaces/replit/replit-code-v1-3b-demo
29.
by execveat 3y ago
Technically anything that's based on pytorch can run on CPU, you just need to tell it to do so. For example, in textgen add '--cpu' and you're done. It will be super slow though. GGML format is meant to be executed throu
30.
by execveat 3y ago
RedPajama is creating a dataset. This is a permissively licensed model trained on that dataset.

More ›