tbrockman

Amazon, I would like to second this offer.

LLVM is bounded by what its IR can express, and what it can express is constrained by what is portable and what it can prove. There is a reason `ffmpeg`, OpenSSL, OpenBLAS, glibc's string routines, LuaJIT's interpreter, etc. all still leverage hand-written assembly.

As for the editor, even if it isn't necessarily optimal assembly (I have no clue), a reduced feature set and relying on OS APIs instead of frameworks will still probably result in something which feels faster than Electron programs like VSCode.

I agree! Just to be clear, by "security critical" I mean the tier where you'd also refuse shared VMs. I'm not convinced most people have workloads and threat models that actually need the isolation they say they want, nor a fully considered notion of what their preferred primitive buys them (per your footnote, and any number of other issues I'm completely unaware of). But I like and appreciate Workers, and am grateful to be paying less because Cloudflare bin-packed more.

But those same things (and more), in the majority case of completely benign workloads, are significantly better for resource utilization and performance.

I don't think their model is "run everything in V8 isolates as the only isolation primitive", I believe it's closer to "run things with V8 isolates as the floor, dynamically trading efficiency for security in response to runtime (and I'd also assume static) analysis". They also add restrictions to make it more difficult/expensive for code to exploit side-channels (ex. changing the resolution and behavior of `performance.now ` and `Date.now` , no multithreading, no SharedArrayBuffer , etc.). Code attempting to exploit side-channels usually has a fingerprint. If you can classify it well enough, and the cost of a false positive is paying for the process isolation you'd otherwise have paid for everything all the time, you probably end up with healthier margins.

I don't disagree that there are real issues, but I don't think that Cloudflare necessarily misrepresents them (though they do perhaps fall quite a bit short of saying "don't run security critical workloads on our platform"). If you can accept the risk though, you get cheap compute with someone else managing all the infrastructure. If you can't, you probably shouldn't be using Workers (and maybe not even cloud compute in general).

Sources:

* https://gruss.cc/files/scalableisolation.pdf

* https://arxiv.org/html/2110.04751v1

* https://arxiv.org/pdf/2608.17043

* https://blog.cloudflare.com/revisiting-spectre-attacks-on-wo...

No first hand cluster experience myself, but quite well if your workload could deal with its limitations. Noteworthy examples:

* Breaking SSL (finding MD5 collisions): https://hackaday.com/2008/12/30/25c3-hackers-completely-brea...

* Analyzing high definition satellite imagery for 1/10th the cost: https://en.wikipedia.org/wiki/PlayStation_3_cluster#:~:text=...

It's not using the File System Access API, on Firefox it uses <input type="file"> for file-picking, and the save just downloads it. It's not synchronizing anything with your filesystem.

You can, however, design rings that can have their comparatively cheap batteries replaced, and be transparent about the expected life span of your $500+ ring that requires a subscription and whose warranty specifically excludes the battery (https://support.ouraring.com/hc/en-us/articles/360025439534-...).

In isolation, yes, that does seem like it would have been the better decision for Claude Code, but it also would have severely diminished the value of their Bun/oven.sh acquisition.

Claude Code isn't the only user of Bun (it's probably not even the only user of it internally at Anthropic), and this way they get to keep the Javascript runtime (and other tooling) that their coding models may one day, if not already, prefer to use when given the opportunity. For those kind of apps, you'll probably also eventually find that--what do you know!--Anthropic also has their own cloud offering (instead of Bun being the one to build one) that specializes in running and managing those applications for you. Even if all they get is a community of developers that choose to use Bun over other options, that gives them power and seats at tables they wouldn't have if they just rewrote Claude Code in Rust.

That'd be my best guess, anyhow.

Even accepting your premise your options are still either:

1) Don't participate (and accept the consequences)

2) Participate (and accept potential disappointment/failure, with the benefit of having tried)

If you view 2) as fruitless unless your desired outcome is likely, you miss the potential value in the pursuit itself: working with like-minded people, building community, developing new skills, taking agency in your own life, and whatever else might come up along the way.

I don't begrudge anyone for choosing 1) (as long as they own their decision and don't force it on others), but 2) still seems like the aspirational choice I'd want to make if I could.

Even granting your numbers, you're measuring the wrong thing. Wilderness acreage and emissions trends are not ecosystem health.

Citing a wilderness figure for developed countries is misleading. Most of it is ecologically vacant--second-growth and tree plantations sans apex predators, large herbivores, intact soil biota, etc. Tree cover is not a functioning ecosystem. Developed countries have exported their ecological destruction: the beef, soy, palm oil, and minerals driving habitat loss in the tropics get consumed in the same places where the domestic "wilderness" figures look great.

The Living Planet Index (actual wild vertebrate populations) is down 73% on average since 1970. North American bird populations are down ~3 billion over the same period. Terrestrial insect biomass shows steep decline in studied regions. None of that shows up in "how much undeveloped land exists" or "how many solar panels got installed."

China's solar buildout is great news for climate, but climate is one driver among several. Habitat fragmentation, pollution, and overfishing don't get solved by the energy transition. You can decarbonize the entire grid and still preside over a mass extinction.

Or generate tiny filler messages every hour until you come back to it.

I, too, rely on your web of trust, please don't ever break my heart Jeff!

It makes sense they'd be harder to find, I imagine there are more opportunities to make money by selling your soul than by offering honest review, and people with large investments have large incentives to dilute signal in their favor.

It's sad that so many platforms let it happen, but it makes sense when the users aren't the ones paying the bills. I'm immensely grateful for those that resist though, and if I were a religious person I would nominate them for sainthood or reincarnation or at least a plaque on a nice park bench somewhere.

Do you have any legal experience, evidence, or case history to support your perspective? You assert that the statement "Our findings reveal major technology companies simply ignore globally defined opt-out signals, raising the spectre of industrial-scale non-compliance with California requirements" is untrue -- how do you know? Do you think everything found in the discovery process would agree? Do you think a company with a history of privacy violations would actually go through with a lawsuit where they'd have to definitively prove they don't? What about proving malice, that webXray knew their statements were false or acted with reckless disregard for their truth? What about the risk of filing a suit where California's anti-SLAPP statue would probably apply?

I wish I'd heard about it when it was first published, it is super cool! Especially the timeline, given that it predates things like ts_zip/LLMZip (which is why I figured someone had already worked on something in the area), while being fundamentally the same mechanism. Makes sense why compression ended up being a more compelling use case though.

Thank you very much for saying that, it's taken me many iterations to create something I generally assumed few others than me would ever enjoy haha.

I believe you may have missed my initial note at the top (you are correct in that it is nonsense).

The concern for my brain is valid though, my thoughts and dreams now only materialize as Markdown task lists.

Whether you disagree with whether it truly aligns with their stated values, in their partnership with Palantir (making Claude available within their AI platform) they requested consistent restrictions:

> “[We will] tailor use restrictions to the mission and legal authorities of a government entity” based on factors such as “the extent of the agency’s willingness to engage in ongoing dialogue,” Anthropic says in its terms. The terms, it notes, do not apply to AI systems it considers to “substantially increase the risk of catastrophic misuse,” show “low-level autonomous capabilities,” or that can be used for disinformation campaigns, the design or deployment of weapons, censorship, domestic surveillance, and malicious cyber operations.

Source: https://techcrunch.com/2024/11/07/anthropic-teams-up-with-pa...

What law do you believe supports your perspective?

Anyone else having issues exporting their data from ChatGPT? I started my export in the morning, still have yet to receive an email for the download. Wanted to make sure my deleted account was included in the beans when they count them on Monday.

Happy to keep my underutilized subscription as long as they keep fighting ('-')7

Interested to hear you cite some examples!

I believe the recommendation would be to use https://reticulum.network/manual/using.html#using-blackhole-... in such scenarios.

Cool project, great work!

Forgive the uninformed questions, but given that `workerd` (https://github.com/cloudflare/workerd) is "open-source" (in terms of the runtime itself, less so the deployment model), is the main distinction here that OpenWorkers provides a complete environment? Any notable differences between the respective runtimes themselves? Is the intention to ever provide a managed offering for scalability/enterprise features, or primarily focus on enabling self-hosting for DIYers?

There's nothing that compels you to "purity spiral" other than attempting to appease cynics who insist that all decisions must be completely binary and consistent, with no room for nuance or practicality, and that anything else is virtue signaling (which is somehow less defensible than enabling harm in the first place).

Reducing harm where feasible is still meaningful, and certainly better than no attempt at all.

Oh, I don't, I was being very sarcastic, but I appreciate that your response was so measured under the assumption that I was serious, haha.

Please don't try to spread the idea that it "does not work", it's incorrect and discourages one of the most effective non-violent mechanisms consumers have for driving change in market economies. It may not necessarily be sufficient (coordinated boycotts, for instance, are much more effective than individual decisions), it may not always be an option (particularly when there aren't viable alternatives), it may not work immediately, there may not be enough people who "vote" a certain way, and there may be insufficient information to make informed decisions--but consumers absolutely decide which products and companies live and die, and every single dollar you spend allocates power.

Valve is a "flat" organization, where your compensation is determined based on peer review.

Rockstar, and owner Take-Two (largely owned by institutional investors--well known for their historical championing of workers rights and fondness of unions), both seem to have your typical corporate hierarchies, where executives are fairly and correctly compensated for being more productive than over 200 software engineers combined.

It seems like there are a lot of people who are desperate for reality to conform to their cynicism, out of fear that they (and their world view) are part of the problem.

For whatever reason, for some it's more gratifying to see others fail to prosper if it confirms their beliefs than it is to watch others succeed and have their beliefs challenged (even if it's to their own detriment).

In many cases, I imagine those who would see themselves as "good" use their world view as a way of absolving themselves of guilt for their actions. If I believe that there was never enough for most to lead dignified lives and that society rewards only self-interest, I don't have to regret taking more than necessary, and I can justify my apathy to the suffering of others. "It is the way of things," I can think to myself, "anything else would be foolish and naive." In this way I can find satisfaction even in inequality, comforted by its inevitability--and my own cleverness in understanding it.

Yeah, I’m actually fairly sympathetic to your perspective, that’s why I said “in isolation”. I might think it’s possible to balance use in a way that’s not as detrimental to myself personally or others (self-hosted models, judicious use, etc.), but I definitely don’t disagree that it seems likely to do more harm than good currently.

If you have sufficient knowledge in the subject matter you're questioning ChatGPT about, you can fairly reliably discern complete bullshit from something plausibly true that warrants additional investigation (which I'd say is more useful than your typical horoscope). In isolation it seems worth the gamble to me, so long as you don't view it as much more than consulting the tea leaves.