parliament32

> We don't need weekly 1:1s to check on feelings

Hard agree. One-on-ones are one of the silliest fads in our industry lately. Why would you wait until a weekly scheduled meeting to bring something up? Your manager's job is to be available to you when you need something, not just once a week. And if they want to know how you're feeling.. they should ask, putting it on an agenda feels very disingenuous.

Me and my direct manager (a C-level) tried weekly 1:1s for a full year and ended up giving up on it because it was clearly unproductive cargo-culting.

> it's an entire lifestyle

You might be overthinking this, although I understand how it can appear that way for someone on the outside looking in. Your local gym probably costs less than your Netflix subscription, if you don't already have a free gym in your apartment building. You don't really need anything else other than looking up some routines on reddit.

No, all the issues are symptoms of trying to slop-code a functional product. Anthropic has admitted they dogfood heavily, and issues like [1] from the article could only be caused by a text generator.. I refuse to believe Anthropic employees are that stupid.

[1] https://youtu.be/J8O9LLpJNrg?t=1201

> Going to the gym... artificial replacements for human activity that is missing

Compared to what? Even the ancient Greeks and Romans spent a significant amount of time in gymnasiums. Or are you comparing modern times to cavemen?

I think it's because the general public figured out they'll die in their 50s if they don't. Modern life is too easy -- a substantial portion of the population spends their white-collar lives flying a desk, "socializing" via sitting around eating and drinking, hiring people to do their landscaping and housework.. hell, you don't even need to walk to get food anymore, both restaurant meals and groceries are delivered. Sure, you might get out to a hike every weekend but that's simply not enough. For health it's pretty much a non-negotiable to go do some strenuous activity every other day, and going to the gym is the path of least resistance to getting that done.

This piece might be a record for how quick it took me to smell the AI-tone and close the tab.. one paragraph! I'm sure it's an interesting bug but I can't stomach reading any more slop.

Sounds like a good use case for that new Copilot button you see on newer keyboards.

Because it would break all setuid binaries? Same reason the Linux kernel doesn't set no_new_privs (https://docs.kernel.org/userspace-api/no_new_privs.html) by default.

As an operator you are responsible for configuring your environment correctly. I would recommend starting here: https://kubernetes.io/docs/concepts/security/

allowPrivilegeEscalation is unrelated to user namespaces. Many vendors do not yet have kernel patches available, but yes that'll eventually be the proper fix.

The k8s remediation is setting allowPrivilegeEscalation to false, which you should have already been doing if you follow the in-tree Pod Security Standards at the Restricted profile.

Note that in kubernetes, setting `allowPrivilegeEscalation` to false (which you should be doing already, it's in the Pod Security Standards Restricted profile) mitigates this.

So... systemd is AGI now?

To be fair, it feels like the DNS service has been the most reliable part of our Azure infra. Never really had issues with it, whether with traffic or API calls.

A whopping 100km per month for the low price of $199.99!*

* with a quota of 138 meters per hour, overage charges may apply

Why would a text generator ever be conscious? Was this really worth writing a paper about?

I narrowly avoided tonsil removal as a child and I'm glad I did, it sounds like the science rotated around to them having a rather important immune function after all.

I suspect the next round of backpedalling will be around the current wisdom teeth removal fad.

I remember unpacking their builds a while ago out of curiosity, and it was based on LFS with a few spec files borrowed from Photon and Fedora. I wonder if switching the base to actual Fedora will increase bloat, it's super lightweight right now.

> Labs are routinely sent to third-party companies

Labs are real businesses that do real things, and would have actual impact for a breach. Meanwhile any idiot can vibe-code a thin shim between a microphone and ChatGPT in a weekend, promise they're HIPAA-compliant, and start selling. Medical professionals have no obligation to do any diligence, and there's no reason for them to not just buy whoever-is-cheapest. They're not even close to the same thing.

HIPAA enforces nothing other than a pinky-swear-promise of compliance. There are hundreds, if not thousands, of middlemen who sell SaaS like this to medical professionals. If one suffers a breach then shuts down, your doctor will just switch to the next one in line with no consequences because "they promised they were compliant". Meanwhile all your medical details will end up in a public dataset forevermore.

Good, I'm glad. Now find a way to do it in-house. Shipping our conversation to some random-ass fly-by-night SaaS who pinky-swear-promises they're HIPAA-compliant is a non-starter for a medical professional I'd actually want to give money to.

Secrets in a mount or in env is "acceptable" but still pretty amateur-hour. Typically you want the application to have to make a request out to a token exchange endpoint of some sort (using its own identity to authenticate), then keep that secret only in-memory for as long as it's used.

The token exchange endpoint is what assesses risk and decides whether it should grant the secret or not. Think "container X is requesting another secret for service Y, but it didn't restart recently, and the last secret I gave it is not close to expiry yet, hmm".

To be clear, I'm talking about subscription pricing. API pricing for Anthropic is probably at-cost.

I dare you to run CC on API pricing and see how much your usage actually costs.

(We did this internally at work, that's where my "few orders of magnitude" comment above comes from)

Self-hosted models are the one true path.

Sure it is. They're well aware their product is a money furnace and they'd have to charge users a few orders of magnitude more just to break even, which is obviously not an option. So all that's left is.. convince users to burn tokens harder, so graphs go up, so they can bamboozle more investors into keeping the ship afloat for a bit longer.

> AI-powered tools may be used to assist with editing and workflow

I'm glad they're declaring outright that they're (as we suspected for a while now) a slop factory. Onto the blacklist they go..

If you retire in 30 years, and invest that $50k in the S&P500, you'll end up with about $872k (given the S&P makes about 10% annually[1]). The difference is, in the non-registered scenario, you only pay 50% of the marginal tax rate, because it's capital gains. In the RRSP, you pay full tax on all investment earnings (because it's considered "income" at the time of the withdraw). Your tax bracket might be better at retirement, but will it be 50% better? That's the big question for me (not even considering the value of a liquid vs illiquid investment, but that's more of a personal planning problem).

[1] https://www.investopedia.com/ask/answers/042415/what-average...

Not sure if there's a US equivalent, but in Canada, "having the pretax money to grow before paying taxes on it" is a worse deal. In an RRSP/401k you pay full tax on any investment earnings. Meanwhile a normal non-registered investment account is classified as "capital gains" and only taxed at 50% of your marginal tax rate.

At the end of the day though, I'm sure it boils down to having both instead of trying to minmax it. Being able to liquidate a portion of your investments to, say, purchase a house is probably a good idea, which you can't do if you've been putting everything you have into a retirement account.

Very cool. I'm Canadian (which is why I mentioned RRSPs above), and I don't think an equivalent exists for us. Our alternatives to an RRSP (which is equivalent to your 401k) basically boil down to:

TFSA: you pay standard income tax up front, but no income tax on investment earnings. Annual contribution room is added. You can withdraw anytime and get the contribution room back.

FHSA: you do not pay income tax up front, you do not pay income tax on investment earnings. But you can only withdraw for a first home purchase (or convert into RRSP), and there's yearly and lifetime limits on contributions.

Non-registered investment account: you pay standard income tax up front. Investment earnings as capital gains are 50% of standard income tax. Withdraw anytime, no limits obviously.

With RRSPs: you do not pay income tax up front, but you pay standard income tax when you withdraw, and pay standard income tax on investment earnings (no capital gains rate). You cannot withdraw until retirement age.

Those are effectively your only four options here. When they're broken down that way.. does it make more sense?

Yeah exactly. This is what makes RRSPs/401ks the absolute worst place to park your money. You are locking away your funds, and deferring taxes to 1) the stage in your life you probably want to pay the least tax possible, and 2) a time when the tax rate will probably be higher than it is now (after all, tax rates pretty much exclusively go up).

If your employer offers a match, you should absolutely contribute up to the maximum match (it's free money after all), but not a penny more IMO. There are much, much better vehicles for parking your money than retirement funds.

I see you've never had to manage multiple products coming out of less-than-good development teams. FIPS mode is a godsend.