Most likely they just have other priorities. A lot of code is not at all performance-sensitive, or is bottlenecked by some other factor.

Very cool idea to use thinking duration (either in tokens or in wall time) as a side-channel!

Most hacks can be expressed in terms of "literally just" something.

I'd reserve "hack" for something requiring some technical skill. Or at least scripts or something written by someone with technical skill.

Kinda like how it ain't "breaking & entering" if you found the victim's diamond necklace in a plastic bin sitting at the curb.

> assume that in both cases the output values are clamped before the final typecast

Both of these assume a linear transfer function, which is rarely the case.

Basically never for 8-bit color channels.

RARBG used to be the way to go, until they shut down. I'm not aware of a good public replacement.

thepiratebay is fine they just don’t run indexes often so searches often fail for stuff just uploaded within last hour or two. Limetorrents updates indices frequently but uses ad providers that try to hijack your clicks and presses so it takes three or four clicks to get one click that isn’t hijacked. There is a bit of non overlap between those two sites.

Sounds like something that a browser like Brave was built to combat. I haven't visited the site in question but for a lot of the ad-heavy sites I do visit, I jump over to Brave to deal with the nonsense.

you can find the sqlite dump of their database

no trackers, but the hash is enough to find seeds on dht

everything pre-2023 just works

> RARBG used to be the way to go, until they shut down. I'm not aware of a good public replacement.

https://therarbg.to/

That’s not RARBG. That’s a quasi-domain squatter trying to lure people in with the name of a legendary community, but just showing the same crap results as any other public torrent aggregator and presumably loading it with ads (that I mercifully don’t see with Firefox uBlock Origin) in order to profit.

Not a rarbg without daily scene music releases.

Whatever this is, it's not RARBG.

rutracker, 1337x, nyaa are the first that come to mind.

newer? my rutracker account is an adult, I'm pretty sure.

It's marginally newer than TPB

Please don't use an LLM for the comments too

Well can't you at least appreciate how it's all in this cool and down-to-earth lowercase? Clearly there was a stylistic effort.

yes. lowercase has been my preference for several years now. interestingly enough i use to omit periods but i'm not extremely keen on them.

llm?

You know what an LLM is.

well, i've read your blog entry on ai.

So what exactly did you mean by "llm?"?

what exactly did you mean by "Please don't use an LLM for the comments too"?

The subtext is, I can tell you used an LLM to write it. You understood what I meant perfectly well, and then pretended not to know what an LLM was.

how can you tell? was i pretending not to know what an llm was or was i just asking what you mean by llm in your comment?

There are lots of ways to get root on a typical Linux developer workstation, the point is that agents shouldn't be using any of them unprompted.

This. I am running Claude in its own QEMU VM, it has git access to my project only if I explicitly unlock the ssh key for it. The other day I realized it trying to push a change, it didn't have permission, so it went looking for "workarounds" and found I had a github cli session and tried to use that, luckily the creds for that was also read scoped. But the point is, if I did not give permission and it sees I did not give permission, it should not try to find a workaround/exploit autonomously.

> I am running Claude in its own QEMU VM

How much system resources does it need to work smoothly? I was also thinking about doing something similar.

I dont think Claude itself needs much, its more like what you do with it. In my case it is doing some gradle builds and java tests with some postgres docker containers inside the vm so I gave it max 8G RAM with 4 cores and have no issues. I share my workspace folder (with virtiofs and also the user home so I can rebuild the vm from scratch and keep settings) because I like my tools on the host and my full creds are outside and I didnt want to keep syncing branches. I access it with ssh (with passt). So far no real issues.

Late edit, I wanted to clarify I do not share my user home, but the VM user home for backups, thats separate user that does not have my own users credentials etc

I wrote about this exact thing as a hypothetical a few months back: https://www.da.vidbuchanan.co.uk/blog/agent-perms.html