arcfour

Joined 5 years ago

Karma
1,138
Submissions
541
Member since
Jul 23
[ my public key: https://keybase.io/xx; my proof: https://keybase.io/xx/sigs/R62ug0Cx2VKe5381AqjX7h8pS8BBoC-yFb5ir-6IHd0 ]
View on Hacker News

Recent submissions

Comment · 3 days ago
I swear I have seen plenty of PCs attempt a PXE boot before failing and continuing on to the next boot option. It probably isn't the default for most "personal" machines but... That's not really a guarantee I would want to hang my hat on...
Comment · 3 days ago
You need to compile a device tree for every single device you want to support individually, whereas x86 has ACPI to avoid that mess. ACPI is its own mess, yes. And UBoot is great. But it isn't a standalone replacement for a unified firmware interface/"BIOS"/whatever.
Comment · 4 days ago
It would be even nicer to be carried by a bunch of servants and fed exotic fruits and not have to work, too, but isn't comparison the thief of joy?
Comment · 4 days ago
Seems excessively pessimistic.
Comment · 4 days ago
Probably never? Unless they get super far out of sync, a "medium" model just isn't the right choice for a "large" (or "extra large") model task.
Comment · 4 days ago
I use Sol 6.4 because it's newer (and "big") unless there is a specific benchmark that 6.1 Astra scores better on that I think I need.

Or I might try both and pick whichever I prefer for a given task...

Comment · 9 days ago
So I have been failing to do half of my career this whole time?

The people you hear from are famous personalities... That's the nature of being a famous personality. There are plenty of us who are just normal people with opinions of our own and no desire to cultivate a public name or face for ourselves...

Comment · 11 days ago
Rare in public PKIs, yes; not so much in private ones, I would imagine.

From my limited experience (using them at home) they seem to be fairly well supported in client libraries, actually!

- OpenSSL has full support, https://docs.openssl.org/master/man5/x509v3_config/

- GnuTLS has full support, https://www.gnutls.org/manual/html_node/X509-certificate-API...

- go (crypto/x509) supports everything except DirectoryName constraints, https://pkg.go.dev/crypto/x509#Certificate.Verify

- Python (pyca/cryptography) has full support, https://cryptography.io/en/stable/x509/reference/#cryptograp...

- Windows/Schannel has full support, https://learn.microsoft.com/en-us/windows/win32/seccertenrol...

- Java has full support, https://docs.oracle.com/en/java/javase/21/docs/api/java.base...

- I know that NSS also supports them from experience but (sorry!) couldn't find the docs in a few seconds of searching

- I know that Strongswan supports them well because I actually opened an issue about it a few years back and got it fixed :-)

(Just a few off the top of my head)

Comment · 11 days ago
It doesn't have to, you can set X509 name constraints which say "the CA may only issue/may not issue certificates for these Subjects," or you can set CAA in DNS, for example.

(Of course, the former isn't really intended to constrain trusted Root CAs, moreso internal PKIs. But it is an option people should know about!)

Comment · 14 days ago
Would be nice if we could choose, say, multiple 4090s or otherwise customize the configuration (or maybe I just missed the button for that?)
Comment · 14 days ago
Why would you be blocked? I cannot imagine why you would be for this specific task unless the supposed backdoor turned out to be real.
Comment · 16 days ago
I am in CVP too as I have worked professionally as a security engineer for various reputable companies for almost 10 years now and I got refusals to reverse engineer MS-DOS malware from 1994 because Anthropic has placed a blanket ban on reverse engineering any malware at all. Even the model would admit that was ridiculous.

OpenAI has no such restriction and I don't even need to use my Daybreak access, either, to analyze modern malware samples.

It's asinine, truly.

Comment · 19 days ago
This happened 3 weeks ago and no release was published on NPM containing the code.
Comment · 19 days ago
A very pertinent comment from zod's maintainer, from that page:

> EDIT Sept 24 — All of my packages on npm have migrated to use environment-scoped staged publishing triggerable only by workflow_dispatch. This means 2FA is always required, so even if (god forbid) an npm or GitHub token is compromised, it will not be possible for the attacker to publish new versions.

So at least that's good to see. It would be nice for them to actually remove the commit from git history, though...

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton