HN user

totony

1,203 karma
Posts1
Comments899
View on HN

It has not been insulated at all, there are tons of federal immigration pathways made easier for french speaking immigrants. According to this https://www.statista.com/statistics/444906/number-of-immigra..., Ontario does seem over-represented.

I'm not saying over-immigration has no downsides, clearly it did not help our overstrained system, but to say it caused it is to willfully blind ourselves to the structural issues that lead to these issues in the first place. i.e. they will never be fixed

SELinux bypasses 2 years ago

Most distros use https://github.com/SELinuxProject/refpolicy while RHEL uses https://github.com/fedora-selinux/selinux-policy

It's also my experience that Fedora has better support for it, but Gentoo used to be good enough with hardened gentoo (they use https://gitweb.gentoo.org/proj/hardened-refpolicy.git/). Redhat and Gentoo are the only ones that officially support it afaik. I think hardened gentoo might have lost popularity since the fall of grsec, but I'm not sure how popular it is currently.

I don't think any non profit should ever refuse money. If they make money from something you disagree with, then taking that money and using it in the scope of your non-profit (which you agree with) is a moral imperative

OpenAI Tokenizer 3 years ago

The actual tokenizer often does not matter since you can add pre processors/normalizers. I assume they did it like this because capitalization matters in a lot of contexts

Having worked with the same tech, I'd assume this is pretty inexpensive both to train and run. Probably in the low 1000s (maybe even mid 100s?) to train. knn search on 35k entries is pretty simple. The most expensive is probably the cross encoder (both to train and to run). Would also be interested to know

That's a very subjective (and I assume unpopular) opinion. Western nations especially do not share you views, with popular addages being "better die on your feet than live on your knees," "I disapprove of what you say, but I will defend to the death your right to say it," etc.

Not that I think appeasement would work, but I think a chance of freedom is more important than a life of servitude for a lot of the west (most?)

Why not use a merkle tree/blockchain? Usually a meme, but seems like a good solution here: every message is a blob containing the mssage and the hash of the previous received blob. As long as order and messages are the same, the message is valid.

A bad actor could screw with you in this naive implementation though

Most popular Linux distributions generate initrds locally, and they are unsigned, thus not protected through SecureBoot (since that would require local SecureBoot key enrollment, which is generally not done), nor TPM PCRs.

You can sign initrd and check it using (signed) grub. But yes you need local key enrollment. Maybe making this easier is the solution though? Instead of relying on Microsoft to be charitable with its keys.

No rollback protection (no way to cryptographically invalidate access to TPM-bound secrets on OS updates)

Revoke the key used to sign either grub, the kernel or the initrd?

Unified Kernel Image

UKI are systemd-specific and mostly a joke AFAICT. Linux supports embedding an initrd into its efi bin. Why make a new thing?

The main object of this whole article is to make PCRs contain hashes of the current system state. Its only advantage is that it can be used to restrict some TPM access. To do that, it tries to introduce a new way to do things which adds nothing to the average user. This is mainly useful for distributions that want to have complete control on the boot process (most Linux distributions do not). A distribution can already do most (everything?) of what is suggested using rotating keys/key revocation locally, but this would introduce the possibility of forced attestation of local state. It's a plus for big organizations, but I fail to see how this improves the state of Linux for the user. At best it's an alternative to using local signing (which is already possible), at worst it's an entry into attestation of local state (DRM).

MAD is the only way. The current powers are just too weak to enforce it. Ukraine shutdown its nuclear arsenal because of russia and the us. The US should, if it had any balls or was worthy of trust, declare that any nuclear attack on ukraine will be seen as a war declaration to the US.

The situation in Ukraine only shows the world that non proliferation is a stupid gamble.

https://en.m.wikipedia.org/wiki/Ukraine_and_weapons_of_mass_...

Having lived in Montreal it's probably in the top end of the most inclusive place I have been.

The only thing i feel like parent could be referring to is the language laws, but the reasoning here is that they are necessary when surrounded by english (and has nothing to do with race). Plus language laws are barely respected already.

The only real deterrent to nuclear use is being serious about retaliations imo. I think a very strong statement such as "using nuclear weapons against whoever will be seen as a declaration of war against us" is necessary.

Countries actively avoid proliferating nuclear power because of the existing powers. Letting them be used against you is a strong signal and will weaken trust. It will become even more of an arms race.