Readit News logoReadit News
Arech commented on We hid backdoors in ~40MB binaries and asked AI + Ghidra to find them   quesma.com/blog/introduci... · Posted by u/jakozaur
folex · 21 days ago
> The executables in our benchmark often have hundreds or thousands of functions — while the backdoors are tiny, often just a dozen lines buried deep within. Finding them requires strategic thinking: identifying critical paths like network parsers or user input handlers and ignoring the noise.

Perhaps it would make sense to provide LLMs with some strategy guides written in .md files.

Arech · 21 days ago
That's what I thought of too. Given their task formulation (they basically said - "check these binaries with these tools at your disposal" - and that's it!) their results are already super impressive. With a proper guidance and professional oversight it's a tremendous force multiplier.
Arech commented on What Every Experimenter Must Know About Randomization   spawn-queue.acm.org/doi/p... · Posted by u/underscoreF
Arech · 21 days ago
Thanks, this is a very interesting topic.

What I personally would like to see is some kind of quantization of how the biases that the author talks about (such as insufficient seed volume of a PRNG) affects computed p-values. Specifically, why there must no "cancellation of errors" happen? So far, IIUC, the author only shows theoretical possibility of errors, but what's more interesting is a real effect. When it all boils down to a p-value being less than a certain threshold (choosing which is another pita), it might not matter whether a true p-value is within, say, 2^-16 from the computed.

Arech commented on 2025 was a disaster for Windows 11   windowscentral.com/micros... · Posted by u/speckx
awesan · 2 months ago
I installed Linux (an arch-based distro) last month. There have been some minor issues but nothing worse than what I experienced regularly on Windows recently. My computer feels fast again and when things randomly break I can at least get to the root cause and fix it myself.

I used to quite like Windows, but it has gotten worse every patch day for years now. The pain of learning a new system is not so bad and at least I own my computer now.

Arech · 2 months ago
I had been Windows user since Windows3.1. More than 3 decades straight. After a few years of working with Linux, installed Debian on home PC about a year ago and couldn't be more happier since then.
Arech commented on Linux gamers on Steam cross over the 3% mark   gamingonlinux.com/2025/11... · Posted by u/haunter
Dedime · 4 months ago
I wouldn't say it's perfect quite yet. I just installed Debian on my Framework, and my microphone isn't working. Debugging it for the last 30 minutes has gotten me nowhere, and half the answers on the internet don't apply to my distro. Until basic issues like this go away or have easy solutions, it's hard to recommend it to anyone.
Arech · 4 months ago
Is it a normal mic, or bluetooth? I think, Trixie have some regressions in bluetooth stack of Cinnamon - it worked nicely in Bookworm, but I had weird issues on Trixie that just disappeared once I switched to KDE (didn't try Gnome).
Arech commented on Addictive-like behavioural traits in pet dogs with extreme motivation for toys   nature.com/articles/s4159... · Posted by u/wallflower
kjkjadksj · 5 months ago
A lot of good work is published in scientific reports.
Arech · 5 months ago
and sometimes a total unbelievable junk...
Arech commented on Addictive-like behavioural traits in pet dogs with extreme motivation for toys   nature.com/articles/s4159... · Posted by u/wallflower
Arech · 5 months ago
My dog (Briard) isn't just addicted to play fetch with balls.. Since he knows that when another dog enters the dog park, the ball will be removed/hidden from him (to prevent the dogs clashing trying to get the ball), he becomes hostile to the dog entering the park, actively trying to prevent them from doing so! This happens only if we started to play with balls. If not, he'll be totally friendly... What an ass!
Arech commented on Linus Torvalds and the Supposedly "Garbage Code"   giodicanio.com/2025/08/27... · Posted by u/todsacerdoti
Arech · 5 months ago
Your don't need noexcept on it, complier sees it on its own without a potential noexcept overhead... Other than that - agree.
Arech commented on Optimizing Your Debian 13 Desktop   teejeetech.com/2025/08/14... · Posted by u/jandeboevrie
Milpotel · 7 months ago
The not optimising, that's making it insecure and bloated.
Arech · 7 months ago
Exactly this.
Arech commented on F-Droid build servers can't build modern Android apps due to outdated CPUs    · Posted by u/nativeforks
sparkie · 7 months ago
OTOH, if software wants to take advantage of modern features, it becomes hell to maintain if you have to have flags for every possible feature supported by CPUID. It's also unreasonable to expect maintainers to package dozens of builds for software that is unlikely to be used.

There's some guidelines[1][2] for developers to follow for a reasonable set of features, where they only need to manage ~4 variants. In this proposal the lowest set of features include SSE4.1, which is basically includes nearly any x86_64 CPU from the past 15 years. In theory we could use a modern CPU to compile the 4 variants and ship them all in a FatELF, so we only need to distribute one set of binaries. This of course would be completely impractical if we had to support every possible CPU's distinct features, and the binaries would be huge.

[1]:https://lists.llvm.org/pipermail/llvm-dev/2020-July/143289.h...

[2]:https://en.wikipedia.org/wiki/X86-64#Microarchitecture_level...

Arech · 7 months ago
In most cases (and this was the case of Mozilla I referred to) it's only a matter of compiling code that already have all support necessary. They are using some upstream component that works perfectly fine on my architecture. They just decided to drop it, because they could.

u/Arech

KarmaCake day364October 26, 2019View Original