[-] [email protected] 3 points 1 day ago* (last edited 16 hours ago)

Any thoughts on how to get this up and going?

Someone is going to need to pull a lot of weight in planning, organizing, and leading these meetings, presentations, and projects.

I find that unless you communicate the time and financial cost expectations to participate in groups like this, you'll get a lot of people who are marginally interested and attached to the group and it's purpose. Which may or may not be important in a successful endeavor.

What would we need to do on our first meeting together?

Discuss the questiona you've raised here.

What things would you want to learn in this course? It seems to me that many of us are already quite literate in sub-domains of what we are interested in. Maybe a teacher carousel routine could be adopted? Where we adopt a general “roadmap” curriculum, and, in an ad hoc fashion, assign people to be the instructor for the desired lesson?

This is a what I mean by someone pulling a lot of weight, a teacher carousel has a slim to none chance of working out. One person is going to need to define and implement the vast majority of the curriculum. They'll need to do a lot of research and work in advance.

10
submitted 1 day ago by [email protected] to c/[email protected]
[-] [email protected] 6 points 1 day ago

It's copies everywhere

[-] [email protected] 2 points 1 day ago

I'm hopeful that there's some progress they can share even with their primary focus on COSMIC DE. Both projects feel like a big step up for the company.

3
submitted 2 days ago by [email protected] to c/[email protected]

I think that the last time I've seen any "update" about the Virgo laptop project was over a year ago. Does anyone have more recent public information about Virgo?

[-] [email protected] 12 points 2 days ago* (last edited 1 day ago)

I've read that. Defining a supplier as someone with whom you have a direct business relationship with seems intentionally narrow in an unhelpful way that just further muddies the waters around the issue at hand. Making something generally available to others means that you're supplying others with that thing. While it's true that you may have no further obligations to those that receive your software, the person receiving the software needs to evaluate their risks around using and depending on that software regardless of the existence of a business relationship with the supplier. Hence supply chain risk evaluation is always necessary. That risk evaluation, or lack thereof, can result in a security problem. These problems can propagate widely within a software ecosystem. This is true with and without the existence of direct business relationships between suppliers and recipients of software.

The whole article can be summarized by saying if you want support services related to the software written by others, negotiate a support agreement related to that software. That has nothing to do with taking a wide or narrow interpretation of the word supplier.

[-] [email protected] 2 points 3 days ago

You might be onto something here.

[-] [email protected] 5 points 3 days ago* (last edited 3 days ago)

Developers should think about what libraries they trust, but it seems that most of the time they'll choose whatever is most convenient for handling the immediate problems they're working to solve.

[-] [email protected] 1 points 3 days ago

I'd be nice to be able to read that article with more than one sentence appearing on the screen at time.

5
submitted 3 days ago by [email protected] to c/[email protected]

cross-posted from: https://programming.dev/post/16349359

July 2, 2024

Sylvain Kerkour writes:

Rust adoption is stagnating not because it's missing some feature pushed by programming language theory enthusiasts, but because of a lack of focus on solving the practical problems that developers are facing every day.

... no company outside of AWS is making SDKs for Rust ... it has no official HTTP library.

As a result of Rust's lack of official packages, even its core infrastructure components need to import hundreds of third-party crates.

  • cargo imports over 400 crates.

  • crates.io has over 500 transitive dependencies.

...the offical libsignal (from the Signal messaging app) uses 500 third-party packages.

... what is really inside these packages. It has been found last month that among the 999 most popular packages on crates.io, the content of around 20% of these doesn't even match the content of their Git repository.

...how I would do it (there may be better ways):

A stdx (for std eXtended) under the rust-lang organization containing the most-needed packages. ... to make it secure: all packages in stdx can only import packages from std or stdx. No third-party imports. No supply-chain risks.

[stdx packages to include, among others]:

gzip, hex, http, json, net, rand

Read Rust has a HUGE supply chain security problem


Submitter's note:

I find the author's writing style immature, sensationalist, and tiresome, but they raise a number of what appear to be solid points, some of which are highlighted above.

16
submitted 3 days ago by [email protected] to c/[email protected]

July 2, 2024

Sylvain Kerkour writes:

Rust adoption is stagnating not because it's missing some feature pushed by programming language theory enthusiasts, but because of a lack of focus on solving the practical problems that developers are facing every day.

... no company outside of AWS is making SDKs for Rust ... it has no official HTTP library.

As a result of Rust's lack of official packages, even its core infrastructure components need to import hundreds of third-party crates.

  • cargo imports over 400 crates.

  • crates.io has over 500 transitive dependencies.

...the offical libsignal (from the Signal messaging app) uses 500 third-party packages.

... what is really inside these packages. It has been found last month that among the 999 most popular packages on crates.io, the content of around 20% of these doesn't even match the content of their Git repository.

...how I would do it (there may be better ways):

A stdx (for std eXtended) under the rust-lang organization containing the most-needed packages. ... to make it secure: all packages in stdx can only import packages from std or stdx. No third-party imports. No supply-chain risks.

[stdx packages to include, among others]:

gzip, hex, http, json, net, rand

Read Rust has a HUGE supply chain security problem


Submitter's note:

I find the author's writing style immature, sensationalist, and tiresome, but they raise a number of what appear to be solid points, some of which are highlighted above.

[-] [email protected] 8 points 3 days ago

Would you mind sharing some details around what you learned?

13
submitted 3 days ago by [email protected] to c/[email protected]

Jul 1, 2024

Aman Salykov writes:

This blog post is the result of my attempt to implement high-performance matrix multiplication on CPU while keeping the code simple, portable and scalable. The implementation follows the BLIS design, works for arbitrary matrix sizes, and, when fine-tuned for an AMD Ryzen 7700 (8 cores), outperforms NumPy (=OpenBLAS), achieving over 1 TFLOPS of peak performance across a wide range of matrix sizes.

By efficiently parallelizing the code with just 3 lines of OpenMP directives, it’s both scalable and easy to understand. The implementation hasn’t been tested on other CPUs, so I would appreciate feedback on its performance on your hardware. Although the code is portable and targets Intel Core and AMD Zen CPUs with FMA3 and AVX instructions (i.e., all modern Intel Core and AMD Zen CPUs), please don’t expect peak performance without fine-tuning the hyperparameters, such as the number of threads, kernel, and block sizes, unless you are running it on a Ryzen 7700(X). Additionally, on some Intel CPUs, the OpenBLAS implementation might be notably faster due to AVX-512 instructions, which were intentionally omitted here to support a broader range of processors. Throughout this tutorial, we’ll implement matrix multiplication from scratch, learning how to optimize and parallelize C code using matrix multiplication as an example.

Read Beating NumPy's matrix multiplication in 150 lines of C code

[-] [email protected] 6 points 3 days ago

I like Ladybird more than any of those alternatives.

[-] [email protected] 9 points 3 days ago

Federation issues are sneaky

[-] [email protected] 8 points 5 days ago

I'm fascinated by Raku myself.

[-] [email protected] 20 points 6 days ago

Entirely depends on the project you want to build

6
submitted 1 week ago by [email protected] to c/[email protected]
30
submitted 1 week ago by [email protected] to c/[email protected]
8
submitted 2 weeks ago* (last edited 2 weeks ago) by [email protected] to c/[email protected]
4
submitted 3 weeks ago by [email protected] to c/[email protected]
9
submitted 3 weeks ago by [email protected] to c/[email protected]

Video description:

We reproduce the GPT-2 (124M) from scratch.

This video covers the whole process:

First we build the GPT-2 network, then we optimize its training to be really fast, then we set up the training run following the GPT-2 and GPT-3 paper and their hyperparameters, then we hit run, and come back the next morning to see our results, and enjoy some amusing model generations.

Keep in mind that in some places this video builds on the knowledge from earlier videos in the Zero to Hero Playlist (see my channel). You could also see this video as building my nanoGPT repo, which by the end is about 90% similar.

51
submitted 3 weeks ago by [email protected] to c/[email protected]
9
submitted 1 month ago* (last edited 1 month ago) by [email protected] to c/[email protected]

The presenter compares some of the functionality to Leap.nvim

view more: next ›

ericjmorey

joined 1 year ago
MODERATOR OF