Sylra

joined 1 month ago
[–] Sylra@lemmy.cafe 6 points 1 day ago (2 children)

"spiritual, but not religious"

then explain in more detail

[–] Sylra@lemmy.cafe 8 points 2 days ago

Openpilot, made by comma.ai, is an open-source driving assistant that adds smart features like adaptive cruise control and lane centering to over 325 car models, including Toyotas, Hyundais, Hondas, and more. It works with comma.ai's hardware (the device you install in your car) and uses cameras and sensors to help your car drive itself part of the way. Makes daily driving a bit easier and more relaxed.

 

Openpilot 0.10.1 introduces the North Nevada Model, featuring major improvements to the World Model architecture. The system now infers 6 degree of freedom ego localization directly from images, removing the need for external localization inputs. This reduces over-constrained data and opens the door for future self-generated imagery.

To support this change, the autoencoder Compressor was upgraded with masked image modeling, switched from CNN to Vision Transformer architecture, and the World Model itself was scaled from 500 million to 1 billion parameters. All models now train on a much larger dataset of 2.5 million segments, up from 437,000, covering more vehicles, countries, and driving scenarios.

The UI has been completely rewritten, moving from Qt/Weston to Python with raylib. This reduces code complexity by about 10,000 lines, cuts boot time by 4 seconds, lowers GPU usage, and simplifies development.

Finally, the Driver Monitoring Model's training infrastructure has been streamlined with dynamic data streaming, though the model’s functionality remains unchanged.

[–] Sylra@lemmy.cafe 2 points 2 days ago

You're right to bring that up. There was and still is some concern about Ventoy using a lot of precompiled binary files (called "blobs") in its source code, rather than building everything from source during release. This makes it harder to verify that the binaries are safe and haven't been tampered with, especially after incidents like the XZ Utils backdoor in 2024.

The developer acknowledges this and has started listing all the blobs with their sources and checksums here:
https://github.com/ventoy/Ventoy/blob/master/BLOB_List.md
This file was created in response to issue #3224, which was opened specifically to address concerns about these blobs. It includes descriptions, where each blob came from, and SHA256 hashes so users can check them manually. However, it doesn’t include automated build scripts, so verification still depends on manual effort.

The discussion started in early 2024 in issue #2795:
https://github.com/ventoy/Ventoy/issues/2795

And as of May 2025, the maintainer proposed a plan to improve transparency by using GitHub CI to build the blobs from source in separate repositories:
https://github.com/ventoy/Ventoy/issues/3224

No major malicious activity has been found, but the lack of full reproducible builds means some trust is required. If you're security-conscious, it's worth verifying the hashes yourself or considering alternatives. The project remains open source and widely used, but this issue hasn't been fully resolved yet.