Damus

Recent Notes

myrmepropagandist · 5w
Big software companies have always wanted to use browser history surveillance for their own purposes and I think that makes us so disgusted with the concept we don't think about how powerful it could ...
Jamey Sharp profile picture
@nprofile1q... There's so much more we could do in a purely-local fashion with browser history today, even without LLMs. Several years ago I discovered that (at least in Firefox) the browser history records referrer information that I think isn't displayed anywhere in the UI. I made a quick proof of concept WebExtension that offers a sidebar which shows you, for the current page, which pages you've visited it from, and which pages you've followed links to. I think people more clever than me could find all sorts of user-directed applications for that information. https://github.com/jameysharp/contextual-history
Alba 🌸 :v_pat: · 10w
I'm thinking perhaps the fact that it uses a dedicated WASM also explains some of its gains... because it likely gives the JIT an easier time proving more memory accesses to be in bounds. regardless ...
Jamey Sharp profile picture
@nprofile1q... I'm confused about why the wasmfft approach might make it easier for the JIT to prove bounds-checks redundant. I could see that if the wasm was specialized for different FFT sizes or something (which seems like it might be an interesting thing to try), but as far as I can tell it's the same wasm every time it's instantiated. I don't know enough about browser JIT, so I'm curious, what leads you to think separate instantiations might be helping performance in this case?

btw I love your benchmark page for this!
πŸ…°πŸ…»πŸ…ΈπŸ…²πŸ…΄ (πŸŒˆπŸ¦„) · 14w
If there was a Fedi-Dating platform... 1. what features would you find most valuable? 2. what features do you like from existing dating sites? 3. and what features do you dislike from existing dat...
Jamey Sharp profile picture
@nprofile1q... What I think is particularly interesting about a fediverse approach to dating is that I've never seen a dating site use the existing social connections between people to help. For example, I want to write public recommendations for other people ("hey, I think this person is cool and here's why you should date them"). Horrifyingly, I think the easiest way to describe what I mean is "LinkedIn for dating". (Maybe Fedi-Dating and Fedi-Hiring should be the same protocol, but with different profiles?) I think it's often easier for people who know you to talk you up than it is to promote yourself.

That said, safety is already difficult in both social networks and dating sites, so identifying the right safety features for a combination of both is particularly intimidating.
Jamey Sharp profile picture
I have a hypothesis about device drivers that I haven't quite worked out how to test yet.

First, I suspect many drivers would benefit from model checking as a particular kind of formal verification; I think that might be particularly good for eliminating hangs and race conditions, especially on cancelation and error paths. (I'd appreciate pointers to people who've done this; somebody must have tried, right?)

Second, I think the models to be checked can be split into an OS-behavior model that's generic across a whole class of devices, plus a device-behavior model that's OS-independent, as demonstrated by the Termite research project (https://trustworthy.systems/publications/nictaabstracts/Ryzhyk_WKLRSV_14.abstract). Termite 1 leaned fully into program synthesis to completely automatically generate device drivers; Termite 2 came from the observation that human judgment was still necessary for quality but that synthesis could be used as a specialized auto-complete; and I'm suggesting that even the auto-complete isn't necessary. Formal verification alone would be a huge improvement over the current state, and I think existing tooling is closer to supporting that goal on real drivers. (Maybe spin and modex can do much of this today? I also considered CBMC but I think some support for temporal logic might be important.)

Third, I bet OS-independent device models would be useful for capturing and validating beliefs formed while reverse engineering closed-source drivers. I envision tools for checking that a register trace conforms to the model, or model-checking a reverse-engineered binary.

Fourth, I hope those OS-independent models could be shared between well-established operating systems like Linux and the BSDs, while also enabling new experimental operating systems to get up to speed more quickly. I feel like the biggest barrier to building new operating systems is the lack of device drivers, but sharing C source code between different kernels is super messy because OS-specific design decisions get mixed in, the result is hard to review or maintain, and of course I'd prefer not to be limited to C. If sharing is at the level of "this is how this device works, do whatever you want with that", but it's machine-checkable that each driver matches the model, I think that might be the best possible option for sharing this knowledge and effort.

I'd love pointers to related work or just discussion of pros and cons of these thoughts!
Micah Lee · 30w
I just threw together a website visualizing this ICE contract data! You can browse through the companies and their contracts, and filter them by state https://micahflee.github.io/ice-contracts/
Jamey Sharp profile picture
@nprofile1q... Oh, I see this is from all of DHS, not just ICE, and also that it includes contracts which ended years ago. That's good to be aware of. I actually worked on part of this one contract, over a decade ago, and it was purely about improving cybersecurity for people's smartphones; it had nothing to do with immigration. https://micahflee.github.io/ice-contracts/?state=OR&modalType=contract&modalAwardId=937