HN user

hleszek

592 karma
Posts5
Comments104
View on HN
OpenWarp 3 months ago

Please mention and support llama.cpp directly instead of ollama.

Why not try to find a successor instead of archiving the repo and forbidding the use of the name? I'm sure with a 3.8k stars repo you'll find competent people willing to continue the work.

Thanks! I works. I modified my ~/.tmux.conf file to be like this:

# Activate mouse mode

set -g mouse on

# Enter copy mode and scroll up with PageUp

bind-key -n Pageup copy-mode -u

# Scroll down with PageDown; if at the bottom, it will exit copy mode automatically

bind-key -T copy-mode-vi Pagedown send-keys -X page-down

bind-key -T copy-mode-vi Pageup send-keys -X page-up

I love tmux but one thing which really annoys me is the fact that I cannot use the mouse wheel or the scroll back to see the previous content. I know there are shortcuts to go forward and back but I always forget them and they are not easily accessible on my keyboard and cumbersome.

That's much better, thanks. According to the Bitwarden blog post: https://bitwarden.com/blog/security-through-transparency-eth... which contains its full cryptography report at the end, all the issues have been fixed except a few which are considered part of the design (see below), so if I understand correctly you have nothing to worry about if you don't use organizations and use a strong password.

Issue 5: Organisation Key Injection (Medium)

When users interact with organizations, a trust relationship is established through the exchange of cryptographic keys. A malicious server could add users to arbitrary organizations by encrypting an organization symmetric key under the user's public key and including it in sync responses. The client would silently accept the new organization membership. Alternatively, when a user creates an organization, the malicious server could substitute the newly created organization's keys with attacker-controlled keys during the post-creation sync.

Issue 7: Disable KDF Bruteforce Protection (Low)

Bitwarden uses Password-Based Key Derivation Functions (PBKDF2 or Argon2id) to derive the master key from the user's master password. The iteration count – currently defaulting to 600,000 for PBKDF2 – provides brute-force resistance. The researchers identified that KDF settings are stored on the server without authentication, allowing a malicious server to reduce the iteration count and receive a master key hash that is faster to brute-force.

Issue 9: Malleable Vault Format and Unencrypted Metadata (Low)

The researchers identified that while individual fields are encrypted, metadata about field positions and item structure is not integrity-protected, potentially allowing field reordering or item manipulation

Issue 10: Access Violation in Organisation Collections (Low)

Organization collections enable shared access to vault items among organization members. By design, the organization symmetric key is shared with all organization members, allowing them to access collection contents to which they have specifically been granted access

Why not allow the user to provide the seed used for the generation. That way at least we can detect if the model has changed if the same prompt with the same seed suddenly gives a new answer (assuming they don't cache answers), you could compare different providers which supposedly use the same model, and if the model is open-weight you could even compare yourself on your own hardware or on rented gpus.

Vim 9.2 5 months ago

Why would they do that? When I started learning VIM more than 20 years ago, one of the main reason was that it (or vi) was already present and installed in every possible Linux system.

This is still so relevant now:

This Orwellian preoccupation with the minutiae of 'historical proof' is typical of the political sectarian who is always quoting what has been said and done in the past to prove a point to someone on the other side who is always quoting something to the opposite effect that has been said and done. As any politician knows, no evidence of any kind is ever required. It is only necessary to make a statement - any statement - forcefully enough to have an audience believe it. No one will check the lie against the facts, and, if they do, they will disbelieve the facts.

You have to learn to manage up as much as down. In other words convince your boss that what you're doing is the right thing to do. Might not work in all situations of course but if they respect you and you had time to show your value, they might surprise you by going your way.

For some reason the VibeVoice model from Microsoft (which is also able to clone voices and is also very good) has been deleted from GitHub 10 days ago even tough it was released under a MIT license. But this post shows that the cat is out of the bag for some time already now (post is from 2021) and we have to live with this technology.