for an 'easy' low dependency setup i found it pleasant you can map vulkan render target to the directfb in linux. then suck events for IO right from the kernel.

that way you can avoid even X :') (not always handy but fun).

nice writeup, really love all the traces are included and stepped through, real thorough and nice example of how to investigate things rather than just the results. thanks.

Id wonder if they are badly putting together the logic from good instructions or that the prompting was missing pieces and it followed correctly but provided some broken code due to missing requirements / details.

You can have the things debug and create code etc. without sharing the existing code base but its obviously less utility from the model then.

basically its just a choice / risk assessment.

Do you think model owners want to steal your specific idea and beat you to market? its not very likely, how you weight that risk should inform how much info u input to model

I remember workin for a US vendor, we had some proxies in china for our customers there to proxy auto updates because the US vendors servers got filtered on their border often leading to broken updates.

I would assume similar context. With GPU its easy for the mind to wander towards data espionage, but the same holds for CPU and _usually_ its more benign / normal business stuff going on.

(not saying it doesnt happen ofc, but most businesses just wanna do business)

Grok or not its the capabilities that cause the verdict not the brand of AI or chat features...

With that title suddenly its less surprising. US doesnt care for human lives, only profits.

Their own people getting unhealthy and dying from things that should shore up defenses is peak USA Irony.

Im not against Americans (human persons!) dw, but this kind of stuff, tell me that is not (stereo)typical?!

Kinda makes u wonder if the people living there can now be considered collateral damage -_-

code execution js code execution, if reached through some bug or executing code that was not intended to be executed its bad, even if the mechanism is kind of obvious and trivial, it still can lead to unexpected code to be launched.

the repo also notes low quality of some POC like ones you noted.

its correct to be a bit wary and i wouldnt call it some crazy 0day dropping account or anything, but bugs/vulns are bugs an vulns and simply because you are not impressed by their complexity, it does not reduce them entirely. just makes em lil less scary.

the ghidra one, it reminds of things like unquoted service paths in windows services. its a silly thing and clearly its bad but it still happens and gets companies pwned :'). a lot of companies use ghidra actively and if you imagine what kind, you'd hope they will not allow the overwriting of those swift binaries ;p. some pentester bound to have a laugh.

also on comments on the page someone comment there might be some problematic aspects of running on old hardware. someone replies its actually fine for 'going online'.

would absolutely not recommend it. a lot of old systems let u flash firmware from the OS, and a lot of old hardware has sever bugs there. Trivial to reach and exploit. Windows 11 might be more modern (so its definitely better than using windows XP!) but if there is a problem it will be much more severe on old hw than new ones and also there will eb security features simply not worlking on old hw even with new OS.

So as a hobby project super fun but id actually recommend the opposite and say for anything but online its fine

China has Money and Smart people. (and very effective corporate / nationstate espionage) so they can most certainly reproduce advanced machines.

They might not have incentive yet to do it because it will not make them popular, and potentially output products would be banned on US/EU. They play a long game and want US and EU consumers to ask tehir governments to please allow the chinese products.. so their market share is safe and stable.

I think once there is enough incentive for them they would do it. They simply do not want to do it currently.

guess its why we fight the world views of our parents only later in life to understand why they smile at that :)

In my country it went up to 35 degrees. Its happened before a lot during my life, such heatwaves. It happened more often when i was a kid. then a bunch of years not (maybe like 20) and now it happen again.

The difference i see is that a lot of people now get issues.

Lots of drownings (they stopped making swimming classes mandatory and dont teach about open water hazards anymore), lots of heatstroke. people plainly not drinking enough and thinking its ok to lay in the sun all day and be active in the sun all day.

I remember always getting warnings, at school,.at home, even just parents of other kids lookin after kids in the street etc.

Im not saying climate change is not a thing, but in any case its not normal that if its 35-40 degrees in a modern country a lot of people die..There is no reason for it other than lack of education and neglect. social neglect and personal neglect.

it sound harsh, but look at nations where it is usually this hot. people deal with heat. Its know what to do and people simply ignore it, think 'they can handle it' and then die.other deaths are social neglect. people not taking care of old or young people. not caring for eachother.

They will try to sue so many people you'd almost forget they are complaining people have copied their copies.

What are they suing for? Copycopyright?

Dont worry though, the rest of the entire world gets access to better chinese models :-), once they get a taste for those the US has lost their little trade game and the future truly belongs to China.

Its almost like they are serving it up on a silver platter.

ofc they are not, they are just betting all in their models will be better, which is unlikely. (just look at the chinese law and all the names atop of advanced AI papers...)

Not all devices support it, so choose wisely.

I got really anxious and depressed from big corporate. I work at an innovation NGO now and its night and day. its still tech, trying to push boundaries, but there is none of the stress or anxiousness. lovely environment with ppl who chose lower pay to try n do something "good". the good/bad doesnt really matter. its just different environment , less pressure and weird politics etc. because ppl aint chasing bonusses. ofc, mileage may vary, every organization is different.

Anyway, working with humans can be really nice change, if ur willing to take a hit on the pay, im sure in tech you learn enough skills to be useful somewhere in an organization and get to a place of learning to grow there in a different domain.

This is the downside of isolation machines and their upside.

Hard to make a completely isolated machine for all workflows and keep all data at all times inaccessible for exploits. But because each user has their own ways its more potential that 'your particular way of breaking the model' is not known or exploitable (yet).

A lot of holes you open are one-time actions from within a restricted domain.

in qubes you have cross domains tools from domain0 for this, which is very hard to reach (but not impossible).

And then supplychain is also hard. Qubes have canaries, but i think most ISO people copy into their dom0 and spinnVMs off of are not doing such rigorous things. (depends what u use ofc).