vitonsky

Joined 3 years ago

Karma
109
Submissions
44
Member since
Aug 19
Founder of Linguist Translate - a privacy focused translation services. CEO at PrimeBits - a B2B solutions
View on Hacker News

Recent submissions

Comment · 1 month ago
It does not work in latest Firefox, so it is lie to call it "Decision model in your browser". It rather "Decision model in your Chromium browser where WebGPU is enabled"
Comment · 4 months ago
> GPU sharing with docker and VMs

Yeah, we really live in age of Internet Explorer 6 yet.

We already have cool features in browsers, like transparent backgrounds, rounded borders, and even HTML 5 video elements, but we still cannot use VM intensively for any purpose with no hassle.

Maybe 10-50 years later we finally can use Linux laptop with RTX 5060, and just run a Call Of Duty multiplayer while a local LLM will fix bugs in our code.

Comment · 10 months ago
Yet another promotional post of Mullvad team. Nice story, but I don't buy it.

Email is fine when it is an option. Mullvad have even option to pay with a credit card & PayPal. That's more sensitive data than Email.

Comment · 1 year ago
Well, somebody must validate data on top level. So that's fine to have packages like `is-number`/`is-arrayish` etc.
Comment · 1 year ago
Good idea. Probably nowadays this would not work due to changes in chrome extension API? They have limit a network interception API.
Comment · 1 year ago
Current incident confirms that we can't trust to authors of DuckDB, because they can't evade a trivial phishing attack.

Tomorrow they will do it again, and attackers will replace binary files that users download with this random script. Or this script will steal crypto/etc.

To make attack vector difficult for hackers, it's preferable to download any software as packages. On linux it looks like `apt install python3`.

The benefits is

1. Repositories are immutable, so attacker can't replace binary for specific version, even if they will hack all infrastructure of DuckDB. Remote script may be replaced anytime to run any code

2. Some repositories have strict review process, so there are external reviewers who will require to pass security processes to upload new version

Comment · 1 year ago
Just for context. DuckDB team is consistently ignores any security practices.

The single one method how to install DuckDB on laptop is to run

`curl https://install.duckdb.org | sh`

I've requested to deliver CLI as standard package, they have ignored it. Here is the thread https://github.com/duckdb/duckdb/issues/17091

As you can see that it isn't single slip due to "human factor", but DuckDB management consistently puts users at risk.

Comment · 1 year ago
Is there any real games with LLM dialogues?

Recently I've tried Baldur's Gate 3, gameplay looks nice, but options in dialogues written by 12 y.o. kid. It would be nice to talk via LLM that would have the described character personality.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton