mk89

Interesting, didn't know it was originally made in Switzerland.

However, I knew that Rheinmetall was going to/delivered the skyranger. [0]

[0]: https://en.defence-ua.com/news/rheinmetall_develops_automati...

I also wondered the same until I saw that Rheinmetall produced that type of defense system you describe (I think in 2024 or so). And I think that except for Rheinmetall, nobody gives them this type of weapon (seems other countries have something similar), but it's probably a handful of them deployed in maybe very few locations.

I don't think it's that simple to build it, otherwise they would have all done it.

Edit: it's called rheinmetall skyranger.

You're so lucky to work for a company where PMs don't vibecode and tell how easy it is to do things....!

Becoming and staying a leader in innovation sometimes requires shortcuts. You can also frame a law to make that exception specific for an industry, a field or a group so it doesn't become the norm (or time box it, if you want). You need innovation, there is no other way USA can lead in AI if you don't build these damn data centers.

Come to live in Europe and you will see how nice it is to stagnate because rule A depends on rule B, but there is an exception C that requires D....

Death by a thousand cuts.

In some MAJOR banks (not gonna say which one), the last digits of the IBAN are also used as username.

So basically people outside can lock your online account.

I am shocked by how F** dumb this was ever designed.

It's the Malaria tropica according to [0]:

> Im Zusammenhang mit den bereits bekannten sechs Fällen von Malaria tropica bei Personen, die am Flughafen Frankfurt am Main tätig sind, sind zwei Erkrankte verstorben

And a quick search says that this is the most dangerous one. Of course it had to be...

[0]:https://frankfurt.de/de-de/aktuelle-meldung/meldungen/gesund...

I think stackoverflow jobs was better than all the alternatives we ever had or have now (which are ridiculous).

If there is one thing I miss on the internet is indeed stackoverlow jobs. Crazy that it didn't work out.

LinkedIn is the Facebook of people who don't want to be on Facebook but want to post Facebook kind of stuff.

Make him do side projects, something he can explain and be proud of. Online communities, some github projects he might be interested, ...anything.

Let him contribute to something, yes for free, so that potential future coworkers can see 1) who he is, 2) what he can do, 3) how he approaches people.

I agree because there was always this "well, you don't have experience...".

Wtf of course i don't, otherwise i would not apply for a junior role!

EU is huge and hourly rates are different in many countries.

Nevertheless, the point is not the electronic toothbrush, but rather the "BIG" stuff that costs much and it's creating a lot of garbage.

A 1200 euro TV that breaks after 5 years - are you willing to buy a new one just because?

Once you have that infrastructure in place, eventually also the "smaller" things will be cheaper to replace.

I just used it on 4 texts. The 1st version was the output from my first (chatGPT) prompt. The 4th was the last prompts of "reduce, make it less AI, etc" of the same original request/output.

In all cases it was meatbag. In the 1st case gave chatGPT 0.35. The remaining ones were much lower.

EDIT: I didn't ask just to generate some text. The original prompt was very specific, which is most of the time the way I use LLMs anyways. Probably it catches better the "hey just generate this email...".

I don't understand why we keep on building right next to highways which are some of the worst things for our health. You don't need to live in the countryside for that. Just stay roughly 1km away from them and the situation is significantly better.

There is evidence of a lot of ugly diseases caused by this, without even mentioning the constant 40+ dB background noise.

> so there will be a displacement of medium to large companies by much smaller ones.

There are so many regulations EE companies follow and offer that no startup owner or worker could ever deal with. The moment your company shifts to that sort of work, you're automatically not anymore a startup (by definition).

Only if you get super smart robots that can manage a lot of bureaucracy etc. Starting from multicloud/region deployments, local regulations, accounting, taxes, laws, etc. Which is what companies like SAP (but not only them) do basically.

But if that happens we are all in a situation that we don't need companies anymore (the way we know them).

The Green Deal solves nothing.

We pollute right outside our block, give credits to companies claiming to be "green" so that we can sell hardware here that is certified, so that we can go to sleep a bit happier as human beings, because we believe we're doing the right thing.

In all this, they make tons of money, make our economy worse than it ever was with no end game.

We're measuring with the wrong targets.

Sure, SPD didn't have anything to do with it. Schröder and the Greens didn't have anything to do with it at all.

The Green party itself was literally born out of a protest against nuclear reactors in the 70's (Whyl).

CDU tried to slow down the phase out, but when Fukishima happened Merkel thought about staying in power rather than doing the right thing (= not shutting down the power plants).

I don't care about CDU, which as usual never misses a chance to disappoint, but not saying that the phase out was planned and executed by the Greens (and obviously SPD) is just factually wrong, because they initiated it all and implemented it. It wasn't just a draft, "let's see if it gets amended, etc..".

EDIT: I was talking just purely about energy and such reforms. The last 30 years have been ... to say the least... "weird" and short term.

Disabling a technology is a huge mistake, no matter what. No country did it the way it was done in Germany.

All you need to do to understand what task is more complex (for a robot to solve) is just to ask a 6-8 years old child to do it. It takes days before they "understand".

So it cannot be that simple (for the reasons you mentioned).

The uncut footage is so awesome.

Of course, you can mention all the things they can't do (what if there are stairs, what if the doors are smaller than the robot, etc) but it's mindblowing to see what they can do - and also the chat panel is really nice and makes it more interactive.

EU didn't close nuclear plants, not sure what you're talking about.

This is a choice some countries did in the past due to Chernobyl and Fukushima.

The "fatality" was performed successfully by the Greens.

OP said "Germany decided".

EU did the Green Deal, though, which is way worse than shutting down a few nuclear reactors that after all didn't produce that much energy anymore and were anyways planned to be shut down.

OP used the word "lifetime" which makes a key difference.

I don't want to be responsible for a bug in my 8 years old code, which I probably even forgot how it worked etc. I probably don't even work anymore in the same team or on the same service.

Why the hell should I be responsible and how is this sustainable?

I am not even sure if your criticism makes any sense at all anymore nowadays. AI is writing 80% of the code, if not more. It's technically not even your code anymore, although there is your name on the commit. Why should I be responsible for that 3 years from now, when I have again moved team or service etc.

Accountability ok, but you should not retire with your code.

At my company someone has introduced an internal tool that should help understand and give a "score" to design documents from teams.

Needless to say, this tool gives scores exactly like the article mentions. Same document, same LLM, same prompt, and different results. It becomes even more ridiculous once you switch to other models, or if you ask a model to review the work of another model.

I am not sure why we insist on making LLMs do the work they are not supposed to do and/or in a way they are not supposed to do.

The worst part is that people are aware of the problem but they just ignore it and consider it as "a reference number, just to have an understanding".

If it were like that, it would be less of a problem. The issue comes from the fact that eventually someone without enough knowledge will trust the output (so X points out of Y is how it is), or someone will stop challenging the output and consider it for their process - like in this unfortunate case of hiring.

At a certain point, people who don't know what they are doing give a tool that doesn't know what its doingto people who don't know what they are doing. A pure mess. And everyone has to comply and applaud. If you go against, you are against AI.

This is what I hate the most about AI. Not the tool, but the shortcuts we're willing to take to justify its existence.

If the code is unreachable is obviously not a threat, Mythos or not. Can you do this analysis for all your 200+ services, libs etc?

This is the main issue about compliance nowadays. In a fedramp scenario you would very likely have to prove that it's unreachable, and you might even risk compliance over it.

From an attacker perspective they don't know the lib version you're using, but bruteforcing / finding patterns faster than a hacker can? That's what I believe AI can do. This is why for me CVEs are a useless metric, the number and/or criticality. It's a simple security control but they are giving it so much importance. Then you "forget" to secure access to your mcp server and this leaks company info, but hey, zero CVEs, soc2 compliance check check check.

I think it's a good practice to fix as many CVEs as possible, to have a clean/updated codebase, but I am of the opinion that if someone wants, with the tools they have nowadays, they will find a way in. Of course, using a lib that has obvious security issues for input validation, for example, should be a no-go. However, we're reaching a point of ridicule (like you said above, a critical CVE but unreachable).

I am not against AI but putting automation tools is in a different category than "AGI, you only need specs and they do the work for you".

20 years ago even with automation etc you needed armies of people to make something work. It was more of a transformation of the type of work. Look at the amount of work Amazon as a company has created. It changed how people buy stuff etc, but behind the scenes there is always human workforce, to deliver, to invent the recommendation algorithms, to package the items, etc (although here there is heavy automation).

Now the idea is that we need AI so we can replace humans, so "people can spend more time on what they like to do". Which is what, searching for jobs on LinkedIn?

Not as a metric, but it basically becomes one, like with Fedramp.

You need to fix also moderate/low CVEs within a certain time frame.

So CVE count becomes relevant, because the target is zero, although it doesn't mandate "zero CVEs" but that's finally what the desired outcome is.

It's basically unrealistic to ignore that number, because it's unlikely that you have a steady 1000 CVEs (that are being continuously fixed and new ones discovered), but more like "a few exceptions".

Not sure about the downvote.

I'd like to know how a "critical CVE running in your software for 29 days" is acceptable from a security standpoint. With nowadays tooling, these AI agents can take you down in no time if they target you.

Compliance the way is done today is basically outdated, but everyone has to follow these rules to sell software basically.

This is true, but security teams often work on tooling dedicated to reduce the n. of CVEs so that a company can keep compliance. That is in fact part of compliance itself to have an automated/reliable processo to tackle CVEs...

Well you're a bit different then...

In my experience it is becoming basically ridiculous that we disallow compliance based on a number of cve, their level, etc. It's just a checkbox, but it has nothing to do with security.

Oh no, you're in for a surprise.

"Especially now" all these infosec folks "need to get CVEs fixed because compliance/SOC2, etc" and they will be even more up your a*!

Something has to change with how compliance works. It is so outdated and crazy.

Was it a better prompt? Have you tried giving the same prompt to other models?

I have found out that the mistakes of other models (which I choose first to save money) help me refine the prompt more and more, until I am fed up and pick Opus 4.8 (for example) which magically seems to get it right, but there is a lot of pre-work there...

Can you give an example of what those "toughest problems/great code" are? I don't need to know the prompt nor the output, but the general idea, what it is about.