Data Science

  • 182 Posts
  • 278 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle

















  • The down votes from non-subscribed accounts are amusing to me. These people clearly are looking for their “all” feed to be curated in some way. Ironically, machine learning could potentially help with that, but there are many people burnt out by the hype cycle (I don’t blame them).

    Regarding the article. It looks like the advancement here is finding methods to efficiently use sets of graphs which are an order of magnitude larger than prior methods could use for training? They also seem to have used more sets of graphs than prior models across a wider set of domains. Am I reading this correctly?






  • I’ve been comparing crates on crates.io against their upstream repositories in an effect to detect (and, ultimately, help prevent) supply chain attacks like the xz backdoor1, where the code published in a package doesn’t match the code in its repository.

    The results of these comparisons for the most popular 9992 crates by download count are now available. These come with a bunch of caveats that I’ll get into below, but I hope it’s a useful starting point for discussing code provenance in the Rust ecosystem.

    No evidence of malicious activity was detected as part of this work, and approximately 83% of the current versions of these popular crates match their upstream repositories exactly.