niea_11
Joined 9 years ago
Joined 9 years ago
https://www.reuters.com/technology/nvidia-is-sued-by-authors...
(The original video is in french but it has an autodubbed english track)
AISLE demonstrated in the last few weeks that small (weak per the author) models can find the openBSD bug (when pointed at the code). And apparently did several runs with the same results. Was gpt oss hallucinating on all those runs?
And what separates a strong model from a weak one? Is qwen3.5 27b weak?
Don't trust who says that weak models can find the OpenBSD SACK bug. I tried it myself. What happens is that weak models hallucinate (sometimes causally hitting a real problem) that there is a lack of validation of the start of the window (which is in theory harmless because of the start < end validation) and the integer overflow problem without understanding why they, if put together, create an issue. It's just pattern matching of bug classes on code that looks may have a problem, totally lacking the true ability to understand the issue and write an exploit. Test it yourself, GPT 120B OSS is cheap and available.
BTW, this is why with this bug, the stronger the model you pick (but not enough to discover the true bug), the less likely it is it will claim there is a bug. Stronger models hallucinate less, so they can't see the problem in any side of the spectrum: the hallucination side of small models, and the real understanding side of Mythos
I don't believe this is specific to the US. The agent at the border always has the last decision on whether you can enter the country even if you have a valid visa and travel documents.
Something like this :
magnet:?xt=urn:btih:BSXYFTH5VCJLB32DYS2FPTJUB2IVNKUS&dn=Fedora-Astronomy_KDE-Live-x86_64-37Microsoft did something similar before (without a vm) called Static Typescript : https://www.microsoft.com/en-us/research/publication/static-...
I always read it as being about empathy. Explaining that sometimes a person's action probably have subjectively valid reasons that we should try to understand, or at least try to accept.
I read the gp comment's quote the same way that's why I shared this one.
My understanding is that it's best effort because even if you control the seed/temperature, the model version and hardware specs you still have floating point math that will introduce rounding differences
an article explaining this in detail : https://news.ycombinator.com/item?id=45200925