qxfys

Joined 8 years ago

Karma
72
Submissions
59
Member since
May 10
syafiq.github.io
View on Hacker News

Recent submissions

Comment · 1 year ago
vulnerability discovery and exploitation, with zero false positives.

https://vyprsec.ai/

Yep, you read it right. 0 false positives. We scan the whole codebase for possible vulnerabilities, rank them, write the proof-of-concept for exploitation, spin up the software in a sandbox, and then attack. All of them happen autonomously without human involvement.

The end report? Only verified vulnerabilities are being reported without noise.

Already reported some unknown vulnerabilities in open source projects. The good thing is we're just getting started.

Comment · 1 year ago
Thanks! But, I can't find any details on how you "intelligently adjust quantization for every possible layer" from that page. I assume this is a secret?

I am wondering about the possibility that different use cases might require different "intelligent quantization", i.e., quantization for LLM for financial analysis might be different from LLM for code generation. I am currently doing a postdoc in this. Interested in doing research together?

Comment · 1 year ago
How do you pick which one should be 2, which one should be 4, etc. Is this secret sauce? or, something open?
Comment · 1 year ago
Wondering how this kind of thing can be automatically discovered by an LLM. Anyone have any experience?
Comment · 1 year ago
Noob question: do they need to re-certify for each new model release?
Comment · 2 years ago
random question to a popular thread:

do any of you use LLM for code vulnerability detection? I see some big SAST players are shifting towards this (sonar is the most obvious one). Is it really better than the current SAST?

Comment · 2 years ago
It sounds like my random Raspberry Pi sitting somewhere in my server room that has to be restarted every <x> weeks.
Comment · 2 years ago
Tried it. It would save me a lot of time, I would say!

One suggestion: The back-and-forth chat in the beginning could be improved with a more extensive interaction. So, the final prompt could be more fine-grained into a specific area/context/anything one would aim for.

Comment · 2 years ago
he did actually.
Comment · 2 years ago
I can see two different interpretations in the comment section. just like our world. people believe what they want to believe.
Comment · 2 years ago
I guess it's somewhere in the EU?
Comment · 2 years ago
+1
Comment · 2 years ago
flew this area countless times. cannot recall when I had a flight without turbulence.
Comment · 2 years ago
I did. But unfortunately, work does not allow me to optimize this solution.
Comment · 2 years ago
So, what do Ilya and Jan know that we don't know?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton