dh1011 a day ago
  • throwaway314155 a day ago

    Thanks!

    > This model has 1 file scanned as unsafe. testvl-pre76-top187-rec69.pth

    Hm, perhaps I'll wait for this to get cleared up?

    • userbinator a day ago

      I wonder if the entropy of model weights and their size causes statistical false positives to appear often?

      • throwaway314155 a day ago

        I imagine it has more to do with whether or not the file appears to have executable python code in it, as a .pth file is usually just a a pickled python object and these can be manipulated to load arbitrary python code when loaded.

    • echelon a day ago

      This is not the first time I've heard of checkpoints being used to distribute malware. In fact, I've heard this was a popular vector from shady international groups.

      I wouldn't expect this from Bilibili's Index Team, though, given how high profile they are. It's probably(?) a false positive. Though I wouldn't use it personally, just to be safe.

      The safetensors format should be used by everyone. Raw pth files and pickle files should be shunned and abandoned by the industry. It's a bad format.

[removed] a day ago
[deleted]
echelon a day ago

> Not sure it's wise to call it `AniSora` but I don't really know.

Given that OpenAI call themselves "Open", I think it's great and hilarious that we're reusing their names.

There was OpenSora from around this time last year:

https://github.com/hpcaitech/Open-Sora

And there are a lot of other products calling themselves "Sora" as well.

It's also interesting to note that OpenAI recently redirected sora.com, which used to be its own domain, to sora.chatgpt.com.

  • pests 21 hours ago

    > OpenAI recently redirected sora.com, which used to be its own domain, to sora.chatgpt.com.

    Probably to share cookies.

    • echelon 20 hours ago

      Cookies are such a mess.

      We need cross-domain cookies. Google took them away so they could further entrench their analytics and ads platform. Abuse of monopoly power.

      • Anduia 16 hours ago

        We use OAuth2 for identity.

        We use first-party cookies for session management.

        We use APIs and signed tokens (JWT) to federate across domains without leaking user data.

        The ones hurt by the death of third-party cookies are ad tech parasites who refused to innovate imho...

        • echelon 8 hours ago

          OpenAI uses all of these things and still had to move domains.

          Also: tech should be easier, not harder.

          Building this shouldn't take more than an hour, yet somehow we did this to ourselves.