DBRX: A new open LLM https://www.databricks.com/blog/introducing-dbrx-new-state-art-open-llm
Doom Captcha (2021) https://vivirenremoto.github.io/doomcaptcha/
vivirenremoto.github.io
DOOM Captcha
Backdoor in upstream xz/liblzma leading to SSH server compromise https://www.openwall.com/lists/oss-security/2024/03/29/4
Towards 1-bit Machine Learning Models https://mobiusml.github.io/1bit_blog/
mobiusml.github.io
1-bit Quantization
A support blog for the release of 1-bit Aana model.
Garbage collection for systems programmers (2023) https://bitbashing.io/gc-for-systems-programmers.html
Bit Bashing
Garbage Collection for Systems Programmers
Yet another programming blog. Thoughts on software and related misadventures.
About the Tailscale.com outage on March 7, 2024 https://tailscale.com/blog/tls-outage-20240307
Tailscale
About the Tailscale.com outage on March 7, 2024
On March 7, 2024, tailscale.com was unavailable for approximately 90 minutes due to an expired TLS certificate. We were able to identify and address the issue quickly, and the downtime was mostly limited to our marketing materials and documentation; stillβ¦
XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable." https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
Bluesky Social
Filippo Valsorda (@filippo.abyssdomain.expert)
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It'sβ¦
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It'sβ¦
An unusual 7400-series chip implemented with a gate array https://www.righto.com/2024/03/idt-gate-array.html
Righto
Inside an unusual 7400-series chip implemented with a gate array
When I look inside a chip from the popular 7400 series, I know what to expect: a fairly simple die, implemented in a straightforward, cost-e...
Timeline of the xz open source attack https://research.swtch.com/xz-timeline
CityGaussian: Real-time high-quality large-scale scene rendering with Gaussians https://dekuliutesla.github.io/citygs/
dekuliutesla.github.io
CityGaussian: Real-time High-quality Large-Scale Scene Rendering with Gaussians
CityGaussians realize high-quality and real-time rendering of large-scale scenes across vastly different scales.
Subroutine calls in the ancient world, before computers had stacks or heaps https://devblogs.microsoft.com/oldnewthing/20240401-00/?p=109599
Microsoft News
Subroutine calls in the ancient world, before computers had stacks or heaps
A lot of computing got done even before we had stacks and heaps.
Improvements to static analysis in GCC 14 https://developers.redhat.com/articles/2024/04/03/improvements-static-analysis-gcc-14-compiler
Red Hat Developer
Improvements to static analysis in the GCC 14 compiler | Red Hat Developer
I work at Red Hat on GCC, the GNU Compiler Collection. For the last five releases of GCC, I've been working on -fanalyzer, a static analysis pass that tries to identify various problems at