• 0 Posts
  • 34 Comments
Joined 5 months ago
cake
Cake day: December 10th, 2024

help-circle

  • Sure, in Firefox itself it wasn’t a severe vulnerability. It’s way worse on standalone PDF readers, though:

    In applications that embed PDF.js, the impact is potentially even worse. If no mitigations are in place (see below), this essentially gives an attacker an XSS primitive on the domain which includes the PDF viewer. Depending on the application this can lead to data leaks, malicious actions being performed in the name of a victim, or even a full account take-over. On Electron apps that do not properly sandbox JavaScript code, this vulnerability even leads to native code execution (!). We found this to be the case for at least one popular Electron app.



  • There’s no real need for pirate ai when better free alternatives exist.

    There’s plenty of open-source models, but they very much aren’t better, I’m afraid to say. Even if you have a powerful workstation GPU and can afford to run the serious 70B opensource models at low quantization, you’ll still get results significantly worse than the cutting-edge cloud models. Both because the most advanced models are proprietary, and because they are big and would require hundreds of gigabytes of VRAM to run, which you can trivially rent from a cloud service but can’t easily get in your own PC.

    The same goes for image generation - compare results from proprietary services like midjourney to the ones you can get with local models like SD3.5. I’ve seen some clever hacks in image generation workflows - for example, using image segmentation to detect a generated image’s face and hands and then a secondary model to do a second pass over these regions to make sure they are fine. But AFAIK, these are hacks that modern proprietary models don’t need, because they have gotten over those problems and just do faces and hands correctly the first time.

    This isn’t to say that running transformers locally is always a bad idea; you can get great results this way - but people saying it’s better than the nonfree ones is mostly cope.




  • The thing I said I did? Yes; here’s the processed image:

    If you mean the math in the post, I can’t read it in this picture but it’s probably just some boring body-of-rotation-related integrals, so basically the same thing as I did but breaking apart the vase’s visible shape into analytically simple parts, whereas I got the shape from the image directly.


  • This roughly checks out. I’m getting 66%, based on the methodology of cutting out the jug’s shape from the picture and numerically integrating the filled and empty volume (e.g. if a row is d pixels wide, it contributes d^2 to the volume, either filled or empty depending on whether it’s above or below the water level).


  • I wouldn’t generally require people to “compile their findings into a report”, but in this case the messages are weirdly devoid of any checkable information and then the reddit user in question mysteriously lost a laptop full of findings, so, yeah, these claims are not compelling. I don’t think the reverse engineer in question was lying, per se, but I do think they were very wrong at first by random chance, the story gained traction, and then they were too embarrassed to admit they fucked up.





  • lukewarm_ozone@lemmy.todaytoLemmy Shitpost@lemmy.worldoopsie
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    4 months ago

    Sort of true, but the algorithm that Reddit-like platforms use is transparent and simple (it’s just based on likes and dislikes, and I think you can even look up the source for the sorting modes) and hence doesn’t directly try to feed you content that’d enrage you. I can just not read the posts about Musk and Trump, since I find most takes on the former bad and don’t care much about the latter. Meanwhile, on platforms like Twitter or Tiktok you are directly fed content out of some recommendation ML model trained on user engagement.

    (There’s also subtler differences. For example, on Reddit/Lemmy/etc, if you hate a post you can dislike it, which will generally make it show up less to people. But on, say, Tumblr, not only are there no dislikes, but if you are really hate a post you can only respond to it by reposting it, therefore spreading it further among your followers! That’s an absolutely devious platform-design move that could have been invented directly by Satan himself.)