That was a long read. Just be happy that you never had to deal with Trigraphs.
https://learn.microsoft.com/en-us/cpp/c-language/trigraphs?v...
Readit NewsDeleted Comment
Randor commented on WorstFit: Unveiling Hidden Transformers in Windows ANSI blog.orange.tw/posts/2025... · Posted by u/notmine1337
Randor commented on How is my Browser blocking RWX execution? rwxstoned.github.io/2025-... · Posted by u/lucasRW
I'm the engineer who spearheaded adding the blocking technique outlined by OP. Security vendors are some of the worst offenders when it comes to injecting buggy DLLs into processes.
A brilliant idea, maybe all software should block DLL without English names. Could even incorporate the new technique into the operating system.
Randor commented on How is my Browser blocking RWX execution? rwxstoned.github.io/2025-... · Posted by u/lucasRW
Anyone naming their DLL with random hex digits is definitely up to no good.
It's a very common security technique to avoid being targeted by malware. I believe even the Microsoft KSLDriver drops randomly named DLL and device drivers along with creating a randomly named system service. Uses 8 hex characters.
Several third-party vendors use the same technique, mostly security vendors.
Randor commented on How is my Browser blocking RWX execution? rwxstoned.github.io/2025-... · Posted by u/lucasRW
Looks like firefox: https://searchfox.org/mozilla-central/source/toolkit/xre/dll...
(via https://searchfox.org/mozilla-central/source/toolkit/xre/dll... )
I'd assumed it would be Edge since the author was crawling through decompiled output and worrying about litigiousness, but the above code in a BaseThreadInitThunk() interceptor matches what the author is describing.
Some horrible code in there too:
https://searchfox.org/mozilla-central/source/toolkit/xre/dll...
Indiscriminate blocking of any DLL in the world with 12/6 hex digit filenames.
Randor commented on Moonshine, the new state of the art for speech to text petewarden.com/2024/10/21... · Posted by u/freediver
Having played with the GB sized Whisper models, I'm amazed to learn the 80MB version is actually useful for anything.
I was aiming for an agent-like experience, and found the accuracy drop below what I'd consider useful levels even above the 1GB mark.
Perhaps for shorter, few word sentences like "lights on"?
Looks like Moonshine is competing against the Whisper-tiny model. There isn't any information in the paper to see how it compares to the larger whisper-large-v3.
I suspect these are just rebadged generic soda cans but there is something oddly dystopian about a company drink.
No, if I remember correctly it was a local beverage company. It wasn't unusual for Microsoft to back local businesses. I remember a very talented Indian software engineer that left Microsoft and purchased 3 "food trucks" and decided to serve food instead, true story. He parked his truck outside building 88 for a few years.
How does the liked article relate to BitNet at all? It's about the “addition is all you need” paper which AFAIK is unrelated.
Yeah, I get what you're saying but both are challenging the current MatMul methods. The L-Mul paper claims "a power savings of 95%" and that is the thread topic. Bitnet proves that at least 70% is possible by getting rid of MatMul.
I'm not an AI person, in any technical sense. The savings being claimed, and I assume verified, are on ARM and x86 chips. The piece doesn't mention swapping mult to add, and a 1-bit LLM is, well, a 1-bit LLM.
Also,
> Additionally, it reduces energy consumption by 55.4% to 70.0%
With humility, I don't know what that means. It seems like some dubious math with percentages.
> I don't know what that means. It seems like some dubious math with percentages.
I would start by downloading a 1.58 model such as: https://huggingface.co/HF1BitLLM/Llama3-8B-1.58-100B-tokens
Run the non-quantized version of the model on your 3090/4090 gpu and observe the power draw. Then load the 1.58 model and observe the power usage. Sure, the numbers have a wide range because there are many gpu/npu to make the comparison.
If the attacker's doing this to thousands of accounts - which I'm sure they are - they're going to be stealing accounts for free just by guessing.
I wrote up a security report and submitted it and they said that I hadn't sufficiently mathematically demonstrated that this is a security vulnerability. So your only option is to get spammed and hope your account doesn't get stolen, I guess.