Anunayj

Original Post: https://www.reddit.com/r/bangalore/comments/1sqeuzd/i_made_a...

Can someone also comment on how secure the built in password in manager in Firefox is to unsophisticated malware attacks that simply copy your browser extension data and such. Compared to bitwarden which requires a password to unlock it, and as I understand stores everything encrypted on disk.

I recently experimented with running llama-3.1-8b-instruct locally on my Consumer hardware, aka my Nvidia RTX 4060 with 8GB VRAM, as I wanted to experiment with prompting pdfs with a large context which is extremely expensive with how LLMs are priced.

I was able to fit the model with decent speeds (30 tokens/seconds) and a 20k token context completely on the GPU.

For summarization, the performance of these models are decent enough. However unfortunately in my use case I felt using Gemini's Free Tier with it's multimodal capabilities and much better quality output made running local LLMs not really worth it as of right now, atleast for consumers.

Where was the off by one error? I read the article and didn't find any mention of it.

Why is low latency livestream so hard, while at the same time Cloud Gaming Tech like Nvidia Gamestream and such can have such a flawless experience?

I've used Moonlight + Nvidia Gamestream with ~40ms RTT and couldn't feel a difference in competitive shooters, so total latency must be pretty low.

Does it have something to do with the bandwidth requirements? (1 stream v/s potentially hundreds)

Was this laptop in question from Hewlett Packard (HP)? Because I swear I've seen this exact behaviour on a HP laptop.

Well there are a couple of ways one can do this!

1. Recursively lookup DNS, so domains will have to be blocked at the registrar level, since DNS is unencrypted, it can be blocked at ISP level as well.

2. Use a protocol alternative to DNS, a good mature example is GNS. It aims to replace DNS, with a built from group up, modernish protocol. Using a DHT and public-key cryptography.

3. There are "block chain" solutions to the whole domain problem, look at Handshake, ENS etc.

I wanted to play around with this! But too bad I have a Samsung Snapdragon :(

And it doesn't expose ADR/carrier phase.

Are there any observable effects of such events that I can see on everyday equipment? Something like increased Bit Flips caused by Cosmic Rays or such?

I really shouldn't be the one to doubt, considering the size we've seen computers go from and to. But is it even possible to fit all that in that size? Like as I understand optics limits a lot about how far the screen has to be, even with the use of lenses. And it wouldn't be fully passthrough if they use the Google glass like approach as I understand?

For people who might be wondering why git hasn't moved to sha256 yet, here's a lwn article on it: https://lwn.net/Articles/898522/

What is a ARPA email address? I've never heard of it. Did they look different from normal SMTP email address used today? Or was it like your email server just supported ARPA and not SMTP.

Hey atleast it wasn't a RSA key. Though for this reason I just have my public key publicly accessible (For instance github exposes all of user's public keys) and just curl it in.

The Whisper API provides timestamped subtitle files, so that's a non issue, all you have to do is extract the audio, split and upload

Ah yes, sorry I thought you meant can't we just use plaintext DNS + DNSSEC.

This made me chuckle, here's a copy of the original article [1] for anyone interested.

1. https://learn.microsoft.com/en-us/previous-versions/technet-...

Yes, however it defeats one of the main point of ECH, that is encrypting the SNI. Since the domain is leaked in plaintext DNS.

Space Exploration is frankly a pretty awesome mod, however I think you should only pick it up if you plan to invest atleast ~500 (more) hours into the game. I'm almost halfway through a run and it's been awesome. It gets more fun as it goes on.

I noticed this too! The reddit webapp on mobile was pretty much unusable before and would constantly ask me to download the app. Accidentally visited it a few days ago and was surprised it didn't happen.

So far I've only found https://nic.eu.org/ but it works, and I assume it's unlikely to go anywhere for the foreseeable future.

And it's extremely funny since most of these text to image models were container Shutterstock watermarked images, to the point it thinks humans see the world with a big shutterstock watermark across it with certain prompts.

OpenAI persuing that would likely end up setting precedent for it's own demise, I'd like to see them try.

> but after 10 guesses the pin is reset?

that does little to counter the real problem, as the chance of successfully guessing the pin on first try is still 1/1e5, which gives ~69k attempts for a 50% chance of correctly guess that pin, Which is like ~2 hr at 10 pin attempts/second. Having request throttling helps tremendously, but shouldn't be the only deterrence in place. Moreover it should be implemented in a way that it does not become a way for DoS attacks.

I am a little confused as to why a blockchain was necessary here? Since Telegram is a centralized platform, couldn't they just roll their own "usernames" which they already do.

I know alot of people cite "Security Concerns", but I suspect the problem might be simply a technical reason. I personally have been using nginx's ssl_preread module to reverse proxy my connections without SSL termination, domain fronting would break things in my situation. Having the possibility of domain fronting is just too much to consider in your software stack.

People really underestimate the full scale of this, specially today with so many sites using cloudflare without strict ssl reverse proxy connection, Cloudflare Endpoints in India are INSIDE ISP networks [1], what this means is the ISP (and therefore by extension the government) sees EVERYTHING going out of cloudflare servers over http in plaintext. Worse ISP will also modify that content so you get the "This site has been blocked in India under diretions from [...]" over https! cause that's what cloudflare saw when it did it's (insecure) http request

1. https://github.com/captn3m0/hello-cloudflare

There is none, "a potential hacker" will however go ahead and try to exploit the system.

> Also, tf.random always returns the same random numbers:

reminds of this particular xkcd [1], How someone fucks up that bad is beyond me.

1. https://xkcd.com/221/

I wonder, how does "acquiring" a open source project work? Does it mean the company acquires assets like Name, Trademark, Domain and such? Since the code itself is open source. (Sure you might be able to get rights to the owner's code)

And even after that won't the company itself have to start putting telemetry and stuff themselves since prexisting maintainers definately won't do that. It feels pretty much like a Hostile takeover than acquiring. How do they even benefit from it

To add, certain concerns still stand since the Web crypto API is extremely limited in capabilities (Example it doesn't support secp256k1).

However on the bright side performance.now() has a much worse resolution on most browsers, making timing attacks harder.