tetha

6 ms·

1.
by tetha 9d ago
> It is precisely about showing that you can still propagate backdoored code if the compromised binary in your seed is NOT the compiler. But that seems like quibbling about semantics. Thompson says that if a compromised binary generates
2.
by tetha 10d ago
> Skills have some instructions but are primarily informed repo specific instructions and keep their context away from the rest of the repo to keep things sanitised for me. Skills and agents in the Claude world can also be extended and e
3.
by tetha 17d ago
This becomes fun if you start to prioritize security work on CVEs rated higher, not affecting you, over security work on CVEs rated lower and affecting you. Or prioritizing chasing CVEs currently not affecting you over architectural work im
4.
by tetha 19d ago
I agree this is a scope or focus thing. Different tools for different things. If you are already maintaining a tool chain, a supply chain and skills in an SPA framework for multiple customer-facing, client-driven projects, I don't thin
5.
by tetha 1mo ago
I'm right with you. My dad was a farmer and taught me: First deal with the irregular, annoying parts on the outside. Create rectangles with a long side and turning space on each shorter side. Then deal with each rectangle by going back
6.
by tetha 1mo ago
> People are, in heavy LLM systems, realising that the most valuable commodity is engineers knowing WTF is going on, and that loss of understanding of your codebase is the #1 blocker to actually getting things done. Any senior engineer k
7.
by tetha 2mo ago
In our case, "testing" as an environment has the goal to be a fully integrated setup of the entire service landscape. Each team is responsible for the uptime of their service, just like in production. The teams are running automat
8.
by tetha 2mo ago
This is one of the unintuitive parts when you get into operations: If you go to lower layers in the stack, production expands towards dev: To the product developers and operators, customer-facing systems are production. To us in infra-opera
9.
by tetha 2mo ago
In my experience, business software has narrow and predictable use cases. Note taking: You need to add, delete and update notes and the real meat of the product is usually in the note organization. Even SAP has use cases simple in nature: A
10.
by tetha 2mo ago
Back when we were working in the office, this was honestly a preferred pair programming setup for us. Two people, and each just had their keyboard and mouse. Interestingly enough, it seemed that the inputs from multiple mice onto the same c
11.
by tetha 2mo ago
Yeah I wanted to see if they special cased Wacken. One campground later, 85% done.
12.
by tetha 2mo ago
You jest, but companies have sent people home fully paid, because power or internet were down and would be down for an extended period of time. Technically a small number could have kept working on white-boarding design topics, but without
13.
by tetha 2mo ago
Some of my deepest architectural work honestly happened... in a hammock on the balcony, while alternating between staring at a cloud, the sun, and two magpies building a nest in the birch tree while yelling at me occasionally. Then I came b
14.
by tetha 2mo ago
I am not 100% familiar with this theory, but I'm fairly sure there is an important difference: The monopoly of violence current police forces are granted did not exist in this particular way. If a lawless man robbed from a village, any
15.
by tetha 2mo ago
> If a driver does get involved in a crash after a single mile, it's very likely that they are not safer than the average driver. It could of course be extraordinarily bad luck, but that's unlikely. This is not that simple. Eme
16.
by tetha 2mo ago
I think the "But this is not intelligence because it is known math" is not a correct argument. It is unknown how the overall higher intelligence of humans works. What I do notice however is that LLMs are becoming capable of doing
17.
by tetha 2mo ago
But how do you conclude then that they are less safe? They are neither proven to be more, less, or equally safe. So any statement of "more injuries" is as unfounded as "less injuries" or "just as many injuries"
18.
by tetha 2mo ago
This is why the idea of being "Vogelfrei" or "lawless" was honestly a terrifying concept in the middle ages. They are neither bound by law, nor protected by law. A lawless man can be struck down with force without persec
19.
by tetha 2mo ago
Agreed. The much better question is: Are we locking ourselves out of a feature, or do we just leave a gap for a rare case? At work we agreed that some use cases are very niche. These have guards in place to log an alerted-upon marker + retu
20.
by tetha 2mo ago
It reminded me of an old meme. Please don't follow the following instructions and stop reading if you cannot. It was just a popup: "Hello. This is virus from Albania. Due to poor technology in country, I cannot harm your computer
21.
by tetha 2mo ago
> They thought climate change was the next war-level crisis, and worked towards that. Did we though? At least in Germany a bunch of anti-climate-change projects and changes have been and are being canceled and we're going back to co
22.
by tetha 2mo ago
And interestingly, a few good people at work are learning faster with the LLMs at hand. To a degree, it looks like LLMs help them overcome the blank page anxiety and help them with the grunt work of, well, actually writing code, which actua
23.
by tetha 2mo ago
Own hardware has a weird scaling curve. It does not make sense for a lot of time and scaling. You need 3+ people maintaining it, you have upfront costs in the hundreds of thousands of euros on the very lower end. If you don't utilize t
24.
by tetha 3mo ago
That didn't prevent Anna Rudolf being accused that she hid a supercomputer in her lip balm box made of tin sheet metal in 2007 and cheated with it in the bathroom. Some parts of the chess community are very ridiculous.
25.
by tetha 3mo ago
You are correct, there is no strong indication of active suicide. However, it certainly put him into a state of mind of neglect, not caring anymore and not taking care of himself and most importantly, no way out. The words "I cannot pl
26.
by tetha 3mo ago
But it did not take 2 threads within the same application to interact in a bad way on data the system controlled to cause this problem. This reads more like an overly broad transition in a deterministic state machine. The fix was to split u
27.
by tetha 3mo ago
Both certainly do. My own hypothesis on why this isn't a more widespread problem is the speed, or lack thereof, of these ecosystems. By the time a package hits debian stable, it's usually been under scrutiny for a year or more.
28.
by tetha 3mo ago
The terms I've learned to use is rather: Happiness, and Stressors. If you need your car to earn money, and you don't have the money or other resources to repair it if it breaks - that's a huge uncertainty and a huge source of
29.
by tetha 3mo ago
I watched a talk by her about this, and this post is missing half of the equation, which is really important: Having a wrong abstraction means you end up with a class/function/module with a huge amount of configurations through bo
30.
by tetha 3mo ago
The world needs more confusing positivity. "You are beautiful and wonderful - keep going! (unlike this systems security)"

More ›