thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

0-vortex

# Clone llama.cpp
git clone https://github.com/ggerganov/llama.cpp.git
cd llama.cpp

# Build it
LLAMA_METAL=1 make

# Download model
export MODEL=llama-2-13b-chat.ggmlv3.q4_0.bin
wget "https://huggingface.co/TheBloke/Llama-2-13B-chat-GGML/resolve/main/${MODEL}"

adrienbrault

# Clone llama.cpp
git clone https://github.com/ggerganov/llama.cpp.git
cd llama.cpp

# Build it
make clean
LLAMA_METAL=1 make

# Download model
export MODEL=llama-2-13b-chat.ggmlv3.q4_0.bin

altryne

['absl-py==1.4.0',
 'affine==2.4.0',
 'aiohttp==3.8.1',
 'aiosignal==1.3.1',
 'analytics-python==1.4.post1',
 'anyio==3.7.1',
 'anytree==2.8.0',
 'argcomplete==1.10.3',
 'argon2-cffi-bindings==21.2.0',
 'argon2-cffi==21.3.0',

vfarcic

# Source: https://gist.github.com/vfarcic/78c1d2a87baf31512b87a2254194b11c

###############################################################
# How To Create A Complete Internal Developer Platform (IDP)? #
# https://youtu.be/Rg98GoEHBd4                                #
###############################################################

# Additional Info:
# - DevOps MUST Build Internal Developer Platform (IDP): https://youtu.be/j5i00z3QXyU
# - How To Create A "Proper" CLI With Shell And Charm Gum: https://youtu.be/U8zCHA-9VLA

Hellisotherpeople

You probably don't know how to do Prompt Engineering

(This post could also be titled "Features missing from most LLM front-ends that should exist")

Apologies for the snarky title, but there has been a huge amount of discussion around so called "Prompt Engineering" these past few months on all kinds of platforms. Much of it is coming from individuals who are peddling around an awful lot of "Prompting" and very little "Engineering".

Most of these discussions are little more than users finding that writing more creative and complicated prompts can help them solve a task that a more simple prompt was unable to help with. I claim this is not Prompt Engineering. This is not to say that crafting good prompts is not a difficult task, but it does not involve doing any kind of sophisticated modifications to general "template" of a prompt.

Others, who I think do deserve to call themselves "Prompt Engineers" (and an awful lot more than that), have been writing about and utilizing the rich new eco-system

sapphi-red

Terms

• times
  • start up time: the time from "the command is executed" to the time "load event is triggered in browser".
  • root HMR time: the time from "the root file is changed" to the time "that file is executed in browser".
  • leaf HMR time: the time from "the leaf file is changed" to the time "that file is executed in browser".
• cold/hot start
  • cold start: the dependency optimization cache is deleted before each run
  • hot start: the dependency optimization cache exists by each run

Summary

twratl

NOTE: these instructions are for Mac/Linux - Windows users can perhaps adapt this as required.

Step 1: Create Executable Script

Create an executable script called aws-ssh-proxy in a location in your path (or add a new location to your path).

#!/usr/bin/env bash

set -o nounset

nateraw

"""
Built on top of this gist by @karpathy:
https://gist.github.com/karpathy/00103b0037c5aaea32fe1da1af553355

stable diffusion dreaming over text prompts
creates hypnotic moving videos by smoothly walking randomly through the sample space

example way to run this script:
$ python stable_diffusion_walk.py --prompts "['blueberry spaghetti', 'strawberry spaghetti']" --seeds 243,523 --name berry_good_spaghetti

ajcwebdev

Outline

• Introduction and Other Resources
• Install Developer Applications
• Configure CLI
  • Install Homebrew and Brew Packages
  • Install Volta and Node Packages
  • Authenticate CLIs
  • Configure Git
• Common Workflows