evan

239 posts

evan banner
evan

evan

@evandotsh

infra @qomrocom • scalable real-time systems & networking • prev @discord

France Katılım Nisan 2020
119 Takip Edilen47 Takipçiler
Mitchell Hashimoto
Mitchell Hashimoto@mitchellh·
I'm someone who still really likes tab complete models (though I use them far less than before, sure). It struck me today that local models are probably good enough nowadays for this. Surely folks are doing this but I can't find great resources. Anyone have any? M4 Max + Neovim.
English
60
20
1.2K
138K
GRM
GRM@grm_off·
C'est sans doute un des plus grands risques de violation de la vie privée des 20 dernières années et d’une menace directe pour la sécurité nationale européenne. La Commission européenne veut obligee Google à livrer chaque jour, via une API, les données ultra-détaillées de nos recherches : 👉 requêtes complètes, horodatages, localisations approximatives, clics, vues et séquences entières de sessions… sur des centaines de millions d’Européens. Santé, orientation sexuelle, opinions politiques, problèmes financiers, secrets les plus intimes : ces données sont parmi les plus sensibles qui existent. Évidemment, elle promet "l'anonymisation" 🙃 Les conséquences pourraient être terribles : ⚠️ Fuites massives de données personnelles ⚠️ Surveillance généralisée sans aucun consentement ⚠️ Cyber-attaques facilitées ⚠️ Risque réel d’accès par des services de renseignement étrangers via des tiers peu sécurisés Au nom de la "concurrence", on sacrifie nos libertés fondamentales et notre souveraineté numérique. ⏳ Il reste très peu de temps : la consultation publique ferme le 1er mai 2026. Partagez massivement, taguez vos eurodéputés et dites NON à cette bombe à retardement. Nos données, nos libertés. Plus de données partagées, moins de sécurité.
GRM tweet media
Français
260
3.7K
5.9K
230.1K
evan
evan@evandotsh·
Ce message mélange des inquiétudes légitimes avec des affirmations largement inexactes. La proposition DMA sur le partage de données de recherche ne consiste pas à transmettre des historiques individuels de recherche avec identifiants personnels. L’objectif est l’accès à des données agrégées et anonymisées, comme des signaux de classement ou des tendances de requêtes, afin de réduire l’avantage structurel des “gatekeepers”. La Commission est tenue par le RGPD, ce qui impose des contraintes strictes sur l’anonymisation, la minimisation des données et la protection contre la réidentification. Ce point est précisément au coeur de la consultation. On peut débattre des risques de sécurité ou de concurrence, mais parler de “surveillance massive des recherches personnelles” ne correspond pas au contenu réel du texte actuel.
GRM@grm_off

C'est sans doute un des plus grands risques de violation de la vie privée des 20 dernières années et d’une menace directe pour la sécurité nationale européenne. La Commission européenne veut obligee Google à livrer chaque jour, via une API, les données ultra-détaillées de nos recherches : 👉 requêtes complètes, horodatages, localisations approximatives, clics, vues et séquences entières de sessions… sur des centaines de millions d’Européens. Santé, orientation sexuelle, opinions politiques, problèmes financiers, secrets les plus intimes : ces données sont parmi les plus sensibles qui existent. Évidemment, elle promet "l'anonymisation" 🙃 Les conséquences pourraient être terribles : ⚠️ Fuites massives de données personnelles ⚠️ Surveillance généralisée sans aucun consentement ⚠️ Cyber-attaques facilitées ⚠️ Risque réel d’accès par des services de renseignement étrangers via des tiers peu sécurisés Au nom de la "concurrence", on sacrifie nos libertés fondamentales et notre souveraineté numérique. ⏳ Il reste très peu de temps : la consultation publique ferme le 1er mai 2026. Partagez massivement, taguez vos eurodéputés et dites NON à cette bombe à retardement. Nos données, nos libertés. Plus de données partagées, moins de sécurité.

Français
0
0
0
54
Brian Basson
Brian Basson@BassonBrain·
🇧🇷 Brazil: “Starlink Farm” uses dozens of antennas in the Amazon, and redistributes the signal via fiber! A video attributed to the “viajandocomoluiz” profile on Instagram drew attention by showing dozens of @Starlink antennas installed in Tabatinga, Amazonas, on the border with Peru, to capture satellite internet and redistribute the connection via fiber optic to residents of the region.
English
164
407
3K
452.6K
evan
evan@evandotsh·
@saeed_vz what’s the navbar on the left for?
English
1
0
0
939
Saeed Vaziry ⚡
Saeed Vaziry ⚡@saeed_vz·
Muxy is a lightweight Terminal app for Mac built with Libghostty which has the essential features to not leave the terminal ⚡🚀
Saeed Vaziry ⚡ tweet media
English
18
22
310
29.6K
Dm
Dm@devdjm·
@evandotsh @confusedqubit What I’ve read, nested virtualization is inferior performance wise compared to non nested ones.
English
1
0
0
31
Shivansh Vij
Shivansh Vij@confusedqubit·
AI sandboxes on spot instances will become the de-facto standard by the end of 2026 - once you can run a sandbox at a 70% discount, no one can really compete with you. The sandbox wars will be decided on price, as so many things are
English
9
4
43
5.1K
evan
evan@evandotsh·
@confusedqubit @devdjm agreed it sucks, gvisor in EKS is pretty good too and doesn’t need nested virtualization
English
0
0
1
80
evan
evan@evandotsh·
@softgreenshark @techspence This is not correct, the weight are open source, the training data is not. The threat model here is chinese company training coding models that would write backdoored code.
English
0
0
0
14
thesoftestshark
thesoftestshark@softgreenshark·
@techspence They are open source so everyone (incl qualified security researchers) can take a look under the hood. I am much more worried about supply chain attacks or API based agents
English
1
0
0
119
spencer
spencer@techspence·
Are we cool using local models developed by Chinese companies or am I over thinking the threat model here?
English
90
2
136
78K
Dm
Dm@devdjm·
@confusedqubit spot makes sense economically, but how do you solve the /dev/kvm problem for Firecracker-style sandboxes on spot VMs?
English
1
0
0
112
evan
evan@evandotsh·
feels like everyone is picking up firecracker, free AWS startup credits and opening a sandbox startup these days.
English
0
0
0
41
evan retweetledi
Mehdi (e/λ)
Mehdi (e/λ)@BetterCallMedhi·
I just finished reading palantir’s manifesto & I need you to understand what you’re actually looking at because this is the MOST important document the tech world has produced this year most people came away thinking «wow what a thoughtful essay about patriotism and technology »…I came away thinking this is the most elegant justification for corporate capture of the state apparatus ever written & I want to walk you through why krp opens with «silicon valley owes a moral debt to the country that made its rise possible » & frames the entire document as a call to civic duty, but read between the lines and what he’s actually saying is that the engineering elite should be embedded inside the defense and intelligence apparatus of the nation, he’s describing exactly what palantir has already done and dressing it up as patriotism «the question is not whether AI weapons will be built, it is who will build them and for what purpose »sounds like a warning but it’s actually a sales pitch, he’s telling every gov on earth that the choice is binary either you buy from us or your adversaries will build it without you, this is the oldest arms dealer rhetoric in history wrapped in SV vocabulary « hard power in this century will be built on software »is the key sentence of the entire manifesto because this is where karp reveals the real thesis, he’s saying whoever controls the software layer of national defense controls the nation itself & if you’ve been following my threads you know that palantir’s gotham and foundry platforms are already plugged into the intelligence feeds the satellite data, financial transactions & communications of dozens of govts worldwide through a single ontological knowledge graph that creates a technological dependency so deep that migrating away would mean rebuilding the entire institutional memory of the organization from scratch this is vendor lockin at the scale of nation states and I’m personally convinced it was designed this way from the beginning «we should applaud those who attempt to build where the market has failed to act » is karp defending palantir’s expansion into every domain the gov used to handle itself, policing immigration, military targeting intelligence analysis public health, everywhere the state retreats palantir advances and what was once a government function becomes a private service that the government can no longer perform without plantir’s permission and here’s what I think makes it even more concerning, these systems are increasingly autonomous meaning the AI layer is making targeting recommendations threat assessments & resource allocation decisions that humans inside gov are rubber stamping without fully understanding the underlying logic a bureaucrat inside the pentagon / DGSI sees a recommendation from the system & approves it because the system has been right 97% of the time and questioning it would require technical expertise that no one in the room has, this is algorithmic governance wearing the mask of human decision making «the atomic age is ending, a new era of deterrence built on ai is set to begin »is the MOST chilling sentence in the document because karp is explicitly saying that ai based deterrence will replace nuclear deterrence as the organizing principle of global power, and whoever builds that ai deterrence layer owns the 21st century the same way whoever built the bomb owned the 20th & he’s telling you plainly that palantir intends to be that builder «national service should be a universal duty » & « we should only fight the next war if everyone shares in the risk »sounds noble until you realize that he is proposing a system where citizens serve the state & the state is operationally dependent on palantir, the public bears the risk and palantir captures the value, soldiers fight wars planned by algorithms they can’t audit built by a company they can’t vote out
Palantir@PalantirTech

Because we get asked a lot. The Technological Republic, in brief. 1. Silicon Valley owes a moral debt to the country that made its rise possible. The engineering elite of Silicon Valley has an affirmative obligation to participate in the defense of the nation. 2. We must rebel against the tyranny of the apps. Is the iPhone our greatest creative if not crowning achievement as a civilization? The object has changed our lives, but it may also now be limiting and constraining our sense of the possible. 3. Free email is not enough. The decadence of a culture or civilization, and indeed its ruling class, will be forgiven only if that culture is capable of delivering economic growth and security for the public. 4. The limits of soft power, of soaring rhetoric alone, have been exposed. The ability of free and democratic societies to prevail requires something more than moral appeal. It requires hard power, and hard power in this century will be built on software. 5. The question is not whether A.I. weapons will be built; it is who will build them and for what purpose. Our adversaries will not pause to indulge in theatrical debates about the merits of developing technologies with critical military and national security applications. They will proceed. 6. National service should be a universal duty. We should, as a society, seriously consider moving away from an all-volunteer force and only fight the next war if everyone shares in the risk and the cost. 7. If a U.S. Marine asks for a better rifle, we should build it; and the same goes for software. We should as a country be capable of continuing a debate about the appropriateness of military action abroad while remaining unflinching in our commitment to those we have asked to step into harm’s way. 8. Public servants need not be our priests. Any business that compensated its employees in the way that the federal government compensates public servants would struggle to survive. 9. We should show far more grace towards those who have subjected themselves to public life. The eradication of any space for forgiveness—a jettisoning of any tolerance for the complexities and contradictions of the human psyche—may leave us with a cast of characters at the helm we will grow to regret. 10. The psychologization of modern politics is leading us astray. Those who look to the political arena to nourish their soul and sense of self, who rely too heavily on their internal life finding expression in people they may never meet, will be left disappointed. 11. Our society has grown too eager to hasten, and is often gleeful at, the demise of its enemies. The vanquishing of an opponent is a moment to pause, not rejoice. 12. The atomic age is ending. One age of deterrence, the atomic age, is ending, and a new era of deterrence built on A.I. is set to begin. 13. No other country in the history of the world has advanced progressive values more than this one. The United States is far from perfect. But it is easy to forget how much more opportunity exists in this country for those who are not hereditary elites than in any other nation on the planet. 14. American power has made possible an extraordinarily long peace. Too many have forgotten or perhaps take for granted that nearly a century of some version of peace has prevailed in the world without a great power military conflict. At least three generations — billions of people and their children and now grandchildren — have never known a world war. 15. The postwar neutering of Germany and Japan must be undone. The defanging of Germany was an overcorrection for which Europe is now paying a heavy price. A similar and highly theatrical commitment to Japanese pacifism will, if maintained, also threaten to shift the balance of power in Asia. 16. We should applaud those who attempt to build where the market has failed to act. The culture almost snickers at Musk’s interest in grand narrative, as if billionaires ought to simply stay in their lane of enriching themselves . . . . Any curiosity or genuine interest in the value of what he has created is essentially dismissed, or perhaps lurks from beneath a thinly veiled scorn. 17. Silicon Valley must play a role in addressing violent crime. Many politicians across the United States have essentially shrugged when it comes to violent crime, abandoning any serious efforts to address the problem or take on any risk with their constituencies or donors in coming up with solutions and experiments in what should be a desperate bid to save lives. 18. The ruthless exposure of the private lives of public figures drives far too much talent away from government service. The public arena—and the shallow and petty assaults against those who dare to do something other than enrich themselves—has become so unforgiving that the republic is left with a significant roster of ineffectual, empty vessels whose ambition one would forgive if there were any genuine belief structure lurking within. 19. The caution in public life that we unwittingly encourage is corrosive. Those who say nothing wrong often say nothing much at all. 20. The pervasive intolerance of religious belief in certain circles must be resisted. The elite’s intolerance of religious belief is perhaps one of the most telling signs that its political project constitutes a less open intellectual movement than many within it would claim. 21. Some cultures have produced vital advances; others remain dysfunctional and regressive. All cultures are now equal. Criticism and value judgments are forbidden. Yet this new dogma glosses over the fact that certain cultures and indeed subcultures . . . have produced wonders. Others have proven middling, and worse, regressive and harmful. 22. We must resist the shallow temptation of a vacant and hollow pluralism. We, in America and more broadly the West, have for the past half century resisted defining national cultures in the name of inclusivity. But inclusion into what? Excerpts from the #1 New York Times Bestseller The Technological Republic: Hard Power, Soft Belief, and the Future of the West, by Alexander C. Karp & Nicholas W. Zamiska techrepublicbook.com

English
275
2.4K
8.8K
1M
evan retweetledi
Konsti Wohlwend
Konsti Wohlwend@konstiwohlwend·
re: Vercel hack This should be our wakeup call to get rid of API keys, just like we "got rid" of passwords with OAuth & passkeys There's a fix. Of course there's a fix! It's called OIDC Federation, it works beautifully, but it still hasn't replaced API keys in the mainstream. In short, your infra (Vercel, AWS, etc.) generates short-lived JWTs. You then tell your services (database, AI provider, etc.) to trust those JWTs instead of the API keys. No static secrets required. These JWTs have a lifetime of <1h, and rotate automatically. Simpler + safer Is it time?
Aiden@WallisDev

Once again, say it with me As an industry, we need to move on from static secrets I’ve been going insane saying this shit for years, there are literally replacements in production today

English
54
51
1.1K
179.2K
evan
evan@evandotsh·
@charmcli @sudobunni could you please enable github security advisories on the wish repo?
English
1
0
0
35
evan
evan@evandotsh·
@meowkoteeq where’s the // WHERES THE // ANNA
English
1
0
18
6.4K
anna
anna@meowkoteeq·
my proposal for IPv8 (hope it's not too late): MAKE IT AI FIRST. it doesn't matter how long an IP address is and how reliable the DNS infrastructure is, if a program can just request in natural language "hey send this packet to that social network server". the LLM under the hood, having all the user context, can infer what social network this is about and how to route the packet efficiently. no DNS needed either
English
65
72
1.9K
101.4K
evan
evan@evandotsh·
@HabbSpoc @eciotti Ça ne marche pas comme ça, les voitures avec ALPR scannent les plaques et vérifie si tu as payé le stationnement à la fin de la journée
Français
0
0
1
1.3K
🤡
🤡@HabbSpoc·
@eciotti En vrai, c’est juste logique, le temps d’aller à la borne payer le stationnement, si ta la sulfateuse à PV qui passe entre temps t’es foutu alors que tu payes 1min après
Français
2
0
8
13.4K
Eric Ciotti
Eric Ciotti@eciotti·
J’ai décidé d’instaurer 15 minutes de tolérance systématique avant toute verbalisation au parcmètre à Nice, aux côtés de Laurent Merengone, Adjoint à la circulation et au stationnement. Trop de Niçois étaient sanctionnés dès les premières minutes de dépassement. Cette mesure, appliquée dès aujourd’hui, rétablit du bon sens et apporte une souplesse concrète au quotidien.
Eric Ciotti tweet mediaEric Ciotti tweet media
Français
237
729
6.7K
393.4K
𝗭𝗲𝗻 𝗠𝗮𝗴𝗻𝗲𝘁𝘀
Grateful Minimax M2.7 weights are out, but their 6hr-before-release license edit makes the model nearly unusable. A lame non-commercial limitation so broadly defined that you're essentially only allowed to use it for projects given out for free, else need to be granted permission from @MiniMax_AI.
𝗭𝗲𝗻 𝗠𝗮𝗴𝗻𝗲𝘁𝘀 tweet media
MiniMax (official)@MiniMax_AI

We're delighted to announce that MiniMax M2.7 is now officially open source. With SOTA performance in SWE-Pro (56.22%) and Terminal Bench 2 (57.0%). You can find it on Hugging Face now. Enjoy!🤗 huggingface:huggingface.co/MiniMaxAI/Mini… Blog: minimax.io/news/minimax-m… MiniMax API: platform.minimax.io

English
22
31
285
79.2K
evan
evan@evandotsh·
@shivam_nerd Does this support BYOK in the same way the CLI does? Can I use my copilot sub using a proxy with it?
English
0
0
0
46