choeger

6 ms·

1.
by choeger 18d ago
I read the agents used SSRF via artifactory to gain uncontrolled access to the net. Apparently their intended net access went through a tightly controlled proxy. Even that appears to be very risky, tbh. If I was to setup a sandbox for such
2.
by choeger 18d ago
There are two things I don't understand about this story. First, why does an agent get any write access to artifactory at all? Second, why is the artifactory cache not disconnected from the net? Surely you'd not feed it with new s
3.
by choeger 4mo ago
So rewriting gets cheaper and cheaper. New features fall more or less into the same category. Refinement doesn't. The question is: Will we live in the world of breathless re-implementation, new features every week, rebranding every qua
4.
by choeger 4mo ago
Who said that? It certainly helps. Poland has close trade and manufacturing ties to Germany and has rightfully developed from a "cheap" image to "quality that's still affordable" image.
5.
by choeger 4mo ago
It certainly helps to be neighbor with an economically strong but demographically weak and overly beaurocratic country that hungers for eager, competent workers.
6.
by choeger 5mo ago
Transformers are great translators. So, yeah, starting with structured output like SVG is probably the best way to start. It should be fairly trivial to fix any logic errors in the structured output, too.
7.
by choeger 5mo ago
You seem to have no idea what you're talking about. Type theory is a thing, much older than any compiler. And soundness has a meaning. > It just means type errors are checked at runtime instead of compile time. This is a fundamental
8.
by choeger 5mo ago
Dynamic typing is no typing. The point of types is to prove the absence of errors. Dynamic typing just has these errors well-structured and early, but they're still errors.
9.
by choeger 5mo ago
To me it looks like formal verification is going to be the answer. We're going to move up the ladder and write formal specs and proofs soon.
10.
by choeger 5mo ago
Clearly, there is a thing missing here: Regulations. If you have strong regulations on how you can make money, you cannot sustainably have biz antagonize user. So in that case biz just becomes a filter for users that actually are willing (a
11.
by choeger 6mo ago
It's much, much, easier to run an LLM than to use a static or dynamic analyzer correctly. At the very least, the UI has improved massively with "AI".
12.
by choeger 6mo ago
Is it? If "others with AI" deliver what you consume, it should also make it easier to deliver more than you consume because what you consume becomes cheaper. Maybe a part of the anxiety is the realization that much if what was del
13.
by choeger 7mo ago
If I am not mistaken, the verification is problematic here. It's run too late. A piece of code that satisfies a single test will most likely not be probable to adhere to the spec. Worse, the whole spec can only be correctly implement
14.
by choeger 7mo ago
That would be great, but Rust relies on compile-time monomorphization for efficiency (very much like C++, if you consider templates polymorphic functions/classes). This means that any Rust ABI would have to cater for link-time speciali
15.
by choeger 7mo ago
I am working with main/master for years now, and there's one problem you don't have with develop: Whenever you merge something into master, it kind of blocks the next release until its (non-continuous) QA is done. If your cha
16.
by choeger 7mo ago
What about device attestation? Will you be able to run banking apps and Netflix et. al.? For me the biggest concern is that while you may be able to use and run your own device, you will be locked out of most propietary services. Much like
17.
by choeger 8mo ago
The panel price doesn't matter. It's the installation and the surroundings (electrical setup, converter, battery) that determine the price nowadays.
18.
by choeger 8mo ago
> Dad in Victoria Australia just got 10.6kw fully installed and operational for $4000 AUD. ($2,700 USD) How the heck are the panels even installed and connected for that price? That's about 25 panels, IIRC. What about the installati
19.
by choeger 8mo ago
I think it's important to note that not all collisions are equally dangerous. Consider a sat on a polar orbit colliding with one on a equatorial orbit. Or two satellites on different directions. That is going to be spectacular. Otoh,
20.
by choeger 8mo ago
> but the sociological construct of race, which is what we refer to in this context, obviously exists. I doubt that something built on self-identification yields a meaningful concept of racism.
21.
by choeger 8mo ago
It starts by believing that there are distinct human races (which there are not). That alone makes most US Americans racist based on language alone. No (sane) German would nowadays speak of "Rasse" to describe someone with a diffe
22.
by choeger 9mo ago
It's the central point of the metaphor. Software is not constrained by the speed of implementation, it's constrained by the cost of maintenance and adaptation to changing requirements. If that wasn't the case, every piece o
23.
by choeger 9mo ago
You're describing maintenance of existing software or even existing deployments that's a completely different beast. I am certain cost can go down there, but that will only compete against SaaS where the marginal cost of adding an
24.
by choeger 9mo ago
Thing is: Industrialization is about repeating manufacturing steps. You don't need to repeat anything for software. Software can be copied arbitrarily for no practical cost. The idea of automation creating a massive amount of software
25.
by choeger 9mo ago
You're absolutely correct! ( ;) ) The issue is that generation of error-prone content is indeed not very valuable. It can be useful in software engineering, but I'd put it way below the infamous 10x increase in productivity. Summa
26.
by choeger 9mo ago
So maybe I am too much a layperson here, but even without any direct therapetutic effects, it is pretty remarkable to have an easily scalable mechanism to get self-replicating agents into tumors, but nowhere else, is it not?
27.
by choeger 9mo ago
The answer is type-safety. LLMs produce errors, as do humans. A language with carefully designed semantics and a well-implemented safety checker (or maybe even a proof assistant) will help express much more correct code. I've had the m
28.
by choeger 10mo ago
Just another round in the decades-long battle of who owns your device: Industry or state. It's never you, mind you, who owns your device. The perversion is that you are legally responsible for what happens with your device, but yo
29.
by choeger 10mo ago
> But I get billed $500 for that visit. That does not match your earlier statement about administrators or health insurance, though. Or does your primary care doctor work in a big hospital that takes a 400% margin?
30.
by choeger 10mo ago
Where does all that money go to, though? Is there a rich caste of doctors or pharmaceutical shareholders that don't need to work and live off these dividends? Or is the system so inefficient that most people in it aren't contribut

More ›