jackcook

8 ms·

1.
Heathrow airport closed after huge fire causes power outage(telegraph.co.uk)
3 points by jackcook 1y ago|0 comments
2.
by jackcook 2y ago
Thanks for reading! The two stories are of course deeply intertwined: we wouldn’t have found the new side channel without the cautionary tale about machine learning. But the finding about ML misinterpretation is particularly notable because
3.
by jackcook 2y ago
Websites doing this would have to be careful about it: they might become the only website triggering a lot of interrupts randomly, which then makes them easy to identify. Our countermeasure which triggers interrupts randomly is implemented
4.
by jackcook 2y ago
Thank you! Really appreciate it
5.
When machine learning tells the wrong story(jackcook.com)
305 points by jackcook 2y ago|29 comments
6.
'Moon Goo' Is Shifting Under the Moon's Surface(vice.com)
2 points by jackcook 2y ago|0 comments
7.
by jackcook 3y ago
Yes you're spot on, the nonlinearities come from the full Mamba blocks, which I left out of this post for simplicity/to focus on the bigger ideas the paper introduced. You can see it marked by the "X" on the right-most p
8.
by jackcook 3y ago
Thank you for the kind words! I think it’s mostly to reduce complexity during training. Here’s an excerpt from page 9 of the Mamba paper: “We remark that while the A parameter could also be selective, it ultimately affects the model only th
9.
Mamba: The Easy Way(jackcook.com)
279 points by jackcook 3y ago|60 comments
10.
MeshGPT: Generating triangle meshes with decoder-only transformers(nihalsid.github.io)
738 points by jackcook 3y ago|157 comments
11.
Thousands of people apparently cheat at Wordle every day(newscientist.com)
1 points by jackcook 3y ago|1 comments
12.
by jackcook 3y ago
Wow, it was quite the surprise to wake up to seeing this post near the top of HN! I wrote the post, happy to answer questions if anyone is wondering about any details.
13.
by jackcook 3y ago
Yes, you're right, I should have mentioned it in the post, but I used pure greedy sampling for the GPT-2 outputs since I couldn't do anything but that for the Apple model. So temperature was set to zero, and there was no repetitio
14.
by jackcook 3y ago
I used greedy sampling (temperature 0) for all of them. Since I didn't have access to logits/probabilities for Apple's model, I wasn't able to do anything else in a way that would be fair.
15.
by jackcook 3y ago
Some context: In the upcoming versions of macOS and iOS, Apple is including a predictive text model which offers suggestions while you type, which they’ve said to be a "transformer model". I managed to find some details about this
16.
Apple’s new predictive text feature appears to be powered by GPT-2(jackcook.com)
6 points by jackcook 3y ago|1 comments
17.
by jackcook 3y ago
Apple is including a predictive text model which offers suggestions while you type, which they’ve said to be a "transformer model". I managed to find some details about this model
18.
A look at Apple’s predictive text model(jackcook.com)
3 points by jackcook 3y ago|2 comments
19.
Apple is rejecting apps that contain function names matching private APIs(github.com)
3 points by jackcook 4y ago|1 comments
20.
by jackcook 4y ago
I got a warning today when submitting my app that said I was using a private API function. Turns out they've essentially blacklisted certain function names that match anything in one of their private frameworks. Renaming functions (mak
21.
Server Guides Now on Swift.org(swift.org)
11 points by jackcook 4y ago|0 comments
22.
by jackcook 4y ago
I don't think any of these side channels are really easy to pull off without the technical capabilities of a nation state or something similar. I personally think embedding a malicious script in a CDN (e.g. https://blog.ryot
23.
by jackcook 4y ago
You'd just need to put the script on any webpage the user might access and leave open, such as Google, or Facebook, or whatever. The attack isn't specific to JavaScript, so really you could put this in a desktop app too, think Sla
24.
by jackcook 4y ago
You can pull off attacks like this from JavaScript by repeatedly recording the time and training a machine learning model on traces of instruction throughput over time, which my group did in a recent paper: https://jackcook.githu
25.
by jackcook 4y ago
We did exactly this in a recent paper we're presenting at ISCA next week (see https://jackcook.github.io/bigger-fish/ ) -- it's very possible for an attacker to do this. However, we didn't find that the s
26.
Attacking web browsers with machine learning(news.mit.edu)
3 points by jackcook 4y ago|0 comments
27.
by jackcook 4y ago
Yeah we tested with only a couple configurations for the paper, and the model only took traces themselves as the input, no additional features. In an earlier version of this project, I sent my code to 30 of my friends (all with different lo
28.
by jackcook 4y ago
Yeah, disabling or suspending JS in background tabs would definitely kill this version of the attack. However, our attack also isn't limited to JavaScript -- many of our experiments in the paper are implemented with a Python attacker.
29.
by jackcook 4y ago
Twitter thread: https://twitter.com/jackcook36/status/1534920169369309184 Paper: https://jackcook.github.io/bigger-fish/paper.pdf GitHub: https://github.com/jackcook/bigg
30.
Show HN: Machine-learning-assisted side-channel attacks(twitter.com)
8 points by jackcook 4y ago|5 comments

More ›