__bjoernd

But US labs have been doing it right, while Chinese labs are only distilling from their superior products, right?

... but even if, likely distilled from models that distilled by just illegally grabbing all the content they could get.

That's quite naive. We're looking at 50 years of legacy software running Unix/Linux environments. If the attacker with an LLM finds one in minutes it might take you hours to even comprehend the finding. Guess what the attacker with the LLM will do in that time?

This assumes all the open models are just a result of distilling Anthropic models. Which remains to be proven.

And if they are, the point remains that Anthropic has a brittle product advantage that users and investors should be cautious about.

If you want to claim the fame of being the first with an exploit, responsible disclosure only gets in the way. Same as the CF2 author.

DirtyFrag and CooyFail2 are two exploits of the same bug.

This one is a level less severe.

That, and they flag pretty much any random patch with a CVE these days, making it harder for distro maintainers to keep up.

For this specific "bug" they took care to not mention any security angle in the commit message, making it extremely hard for an outsider to even realize this was a critical patch. I assume this was because they wanted to push the fix without breaking embargo.

If they get enough time to build a website with a fancy logo instead, one might however question where their priorities are.

How is Proton a US-controlled company?

I'm pretty sure Ukraine were taking the Russian preparations as what they were. And they had plans to counter them. Proven by the fact that Putin's 3 days war has now surpassed the Russian involvement in WWII.

No one forces you to be that guy :)

Over here in Germany, professors' job is "research and teaching". According to the internet, the author's university is a publicly funded university as well. I can see how AI can make you faster on the research side, but you give up 100% of the teaching/developing people part.

As a tax payer, I am very concerned if the people I fund with my taxes to do a job unilaterally declare they are no longer going to do the half of it.

> Here is something that gets lost in all the excitement about AI productivity: most software engineers became engineers because they love writing code.

This resonates somewhat, but for a different reason. My mental model is that there are two kinds of developers, the craftsmen and the artists.

The artist considers the act of writing code their actual fulfillment. They thrive on beautifully written code. They are often attached to their code to a point where they will be hurt if someone criticizes (or even deletes) it.

The craftsman understands that code exists to serve a purpose and that is to make someone's life easier. This can be a totally non-technical customer/user that now can get their work done better. It could be another developer that benefits from using a library we wrote.

The artist hates LLMs as it takes away their work and replaces their works of beauty with generic, templatized code.

The craftsman acknowledges that LLMs are another tool in the toolbelt and using them will make them create more benefits for their customers.

Sounds a bit like what Claude Plan Mode or Amazon's Kiro were built for. I agree it's a useful flow, but you can also overdo it.

But you're a main project contributor. What about everyone else?

So essentially like AWS' European setup?

The EU sovereign partition is run by a German entity and only EU residents have access.

Same as AWS with their German subsidiary.

AWS is subject to CLOUD the same way European providers like OVH, Hetzner, or Stack it are. All of these companies operate in the US.

How are SEL4 and Genode going for you in your day-to-day compute usage?

> as they're profiting from selling the patchset

Profiting from selling their patchset is not the whole story, though. grsec was public and free for a long time and there were many effects at play preventing the kernel from adopting it.

Oh, that snow backdrop really hits hard while talking about other people's UI failures...

German internet nerd.

Professionally he's running a successful code/security consultancy [2]. This pays his bills, so that nerd-wise he is running his own web server and content management system where everything is self-written, inclusive of his own libC implementation with a focus on bare minimum requirements. [1] He's been around in the German IT community for decades and was earlier involved in Chaos Computer Club (CCC) where he still used to attend their annual congress, which is kind of the "meet and greet" of the German IT community.

His self-hosted blog was/is very popular/controversial. He is pretty opinionated on nearly everything and he's not taking hostages when he criticizes someone. So the "woke" people don't like him, the nazis don't like him, the corpo guys don't like him. And he pretty much doesn't care.

Earlier this year he apparently suffered some critical health condition and went quiet without notice for more than 6 months, I believe.

[1] https://en.wikipedia.org/wiki/Dietlibc [2] https://www.codeblau.de

Glad he's alive and healthy again.

I appreciate the learning guidance.

Sticking with your analogy -- your townsfolk getting energy for free. As rational people they must include the possibility of free service being over at any time in their planning and act accordingly. Otherwise they're just freeloading.

Am I getting this right - someone has been providing things for free for a long time and now people are complaining that they are relying on getting things for free and the "someone" cannot just change this?

I'm German and in my 45 years of being so have never been required to send a fax. Snail mail yes, but never a fax.

If they can put Twitter links into their article, one would think they can also add links to the website they're writing about.

Thanks OP for adding it here!

Are you seriously asking why individuals are supposed to take responsibility for themselves?