Coldmooon

Sandbox Escape in [email protected]

Summary

There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException() which can be used to escape the sandbox and run arbitrary code in host context.

Proof of Concept

Some remarks on Large Language Models

Yoav Goldberg, January 2023

Audience: I assume you heard of ChatGPT, maybe played with it a little, and was impressed by it (or tried very hard not to be). And that you also heard that it is "a large language model". And maybe that it "solved natural language understanding". Here is a short personal perspective of my thoughts of this (and similar) models, and where we stand with respect to language understanding.

Intro

Around 2014-2017, right within the rise of neural-network based methods for NLP, I was giving a semi-academic-semi-popsci lecture, revolving around the story that achieving perfect language modeling is equivalent to being as intelligent as a human. Somewhere around the same time I was also asked in an academic panel "what would you do if you were given infinite compute and no need to worry about labor costs" to which I cockily responded "I would train a really huge language model, just to show that it doesn't solve everything!". We

Install Video Dummy Package

sudo apt-get install xserver-xorg-video-dummy

Create Default X Windows Configuration File

Create / Edit xorg.conf file Rename file if already exists for backup

Project Title

One Paragraph of project description goes here

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.

	#!/bin/bash

	set -euo pipefail

	# Definition of colors for terminal output
	readonly RED_COLOR="\e[31m"
	readonly GREEN_COLOR="\e[32m"
	readonly YELLOW_COLOR="\e[33m"
	readonly BLUE_COLOR="\e[34m"
	readonly MAGENTA_COLOR="\e[35m"

	# Ubuntu
	dmesg
	sudo dmesg --clear

	sudo cat /var/log/kern.log \| grep usb
	sudo rm -rf /var/log/kern*
	#old log files
	sudo zcat /var/log/kern.log.2.gz \| grep usb

	sudo cat /var/log/syslog \| grep usb

	#!/bin/bash
	# This gist is a step by step instructions to build and install OpenCV from source on ubuntu 18.04 LTS
	# note: The easy and quick way to install is
	# sudo pip3 install opencv-python
	# sudo pip3 install opencv-contrib-python
	# But this easy pypi installation can’t open video files on GNU/Linux distribution or on mac OS X system.
	# And on some system opencv binaries provided packages are not compiled.
	# Therefor we have no way rather than build it from source.

	# Example:
	# $ python argparse_dict_argument.py --env a=b --env aa=bb
	# Namespace(env={'a': 'b', 'aa': 'bb'})

	import argparse

	parser = argparse.ArgumentParser()
	parser.add_argument('--env', action = type('', (argparse.Action, ), dict(__call__ = lambda a, p, n, v, o: getattr(n, a.dest).update(dict([v.split('=')])))), default = {}) # anonymously subclassing argparse.Action
	print(parser.parse_args())

	Download Google Drive files with WGET

	Example Google Drive download link:

	https://docs.google.com/open?id=[ID]
	To download the file with WGET you need to use this link:

	https://googledrive.com/host/[ID]

	Example WGET command:

	import caffe_pb2 as proto
	import leveldb
	import sys

	db = leveldb.LevelDB('./cifar_test',block_size=40 * (2 << 20) )

	import struct

	def unpickle(file):
	import cPickle