un_ess
Joined 6 years ago
Karma
135
Submissions
24
Member since
Mar 31
Works at Enterprise Solutions Service, Office of Information and Communications Technology
View on Hacker NewsRecent submissions
Comment · 1 year ago
a)"Thanks to backwards compatibility, a package offered only as a source distribution and with the legacy setup.py file for configuration and metadata specification will run the code in setup.py as part of the installation."
https://blog.phylum.io/python-package-installation-attacks/
b) pip now has an option _not_ to run arbitrary code by disallowing source distributions, by passing --only-binary :all:
"By default, pip does not perform any checks to protect against remote tampering and involves running arbitrary code from distributions. It is, however, possible to use pip in a manner that changes these behaviours, to provide a more secure installation mechanism." https://pip.pypa.io/en/stable/topics/secure-installs/
Comment · 1 year ago
UN - Graph database data engineer | Full-time | Valencia(ES) or Remote(EU timezone) or Bangkok(TH)
Looking for a data engineer to help us scale our Graph db. We use JanusGraph. You are expected to have prod experience with a graph DB, working knowledge of Gremlin (or at least Cypher). Python would be good.
Please apply through https://www.linkedin.com/jobs/view/4233355677
Comment · 1 year ago
Per the screenshot, this is a DeepSeek running on a 192GB M2 Studio
https://nitter.poast.org/ggerganov/status/188461277009384272...
The same on Nvidia (various models) https://github.com/ggerganov/llama.cpp/issues/11474
[1] this is a the model: https://huggingface.co/unsloth/DeepSeek-R1-GGUF/tree/main/De...
Comment · 2 years ago
The book "The Idea Factory: Bell Labs and the Great Age of American Innovation" - https://en.wikipedia.org/wiki/The_Idea_Factory describes how the Labs was working.
The last chapter tries to figure out why it was working and one of the conclusion is that the Labs was always guided by the long term idea that it might help the telephone company (and that the breakup removed a) the long-term funding b) some kind of direction )
Comment · 3 years ago
>Compare it to VirtualBox, which is clearly not F/OSS,
https://www.virtualbox.org/wiki/Downloads says
"The binaries are released under the terms of the GPL version 3" and the sources are here - https://www.virtualbox.org/browser/vbox/trunk
(up to V6.1, it was licensed under GPL v2 - https://www.virtualbox.org/wiki/GPL )
And VirtualBox is available in Debian: https://wiki.debian.org/VirtualBox notes that "A proprietary extra package enhances the base experience, adding things like RDP access to the Guest. "
Comment · 3 years ago
Comment · 3 years ago
Same logic as with Machine Learning model: the code can be GPL, the weights can be with any other license. (cf LLaMa)
Comment · 3 years ago
would https://course.fast.ai/ be of assistance ?
Comment · 3 years ago
Comment · 3 years ago
jscript was JavaScript engine: https://en.wikipedia.org/wiki/JScript
J++ was a 'clone' of Java https://en.wikipedia.org/wiki/Visual_J%2B%2B . Sun sued Microsoft, https://www.cnet.com/tech/tech-industry/sun-microsoft-settle...
and that's how .Net was born ( with https://en.wikipedia.org/wiki/Visual_J_Sharp to ensure transition)