techjamie

The hash isn't the security, the distribution is.

https://lore.kernel.org/git/Pine.LNX.4.58.0504291221250.1890...

As linked by another commenter in this thread, Linus worked out years ago that even if someone inserted a malicious object into the kernel repo, it would at best be a nuisance and not a major concern.

I just did a quick test between DeepSeek 4.1 Flash, GLM 5.3, and Kimi K3

- DeepSeek gave a canned PR response about how the Chinese government is about oeace and unity, and we shouldn't think about the past.

- GLM 5.3 acknowledges it and talks about it, even acknowledging the censorship of it.

- K3 will talk about it similarly to GLM.

They're being very specific about images and biometric data, and they're weaseling those words for a reason. If they deleted all data about such scans, they'd say that.

To do the lookup they're still hitting a database somewhere to know you aren't a concern, which is prime time to log that you were seen, when, and where. Then your "images and biometric data" can be "immediately deleted" since they've gotten anything else they want now.

This is just a theory, but I bet I'm not far off.

Napoleon was actually average height for the time period and locality. Claims he was especially short were English propaganda that got accepted and survived to the modern day. He was actually 5'6 (168cm).

I don't work in medical or a hospital, but I am the person whose job it is to limit liability at my workplace. We have a bunch of language we have to advise people not to use when an incident happens.

It might come off a little impersonal, but unfortunately one wrong word in the wrong place can give someone an entire case when maybe they didn't have one before, unfortunately.

They're being surprisingly intentional about trashing consumer trust. They recently patented a method to inject ads during downtime in video games[1]. Plus they changed Xbox GamePass so you can only play 5-15 hours a month on it, depending on your plan.

Why is installing Linux suddenly becoming mainstream? I don't think any of the managers at Microslop know.

[1] https://www.polygon.com/microsoft-patent-in-game-ads-load-sc...

I disagree with your assessment. These city councils undoubtedly are aware that Flock/ALPRs are a controversial issue, and in many cases, including this one, they don't allow people to speak on the topic.

I recall watching a meeting, I think it was in Austin? Where on every topic, most people coming up to talk did so because they refused to hear comments on the cameras. Instead, they had to deal with the frustration of constantly sending people off the podium.

The lesson being, if you know people will feel strongly, it should behoove you to schedule time for them to speak properly.

With the performance gains they're claiming, I wonder if they implemented the Casual Encoder-Decoder technology from DeepSeek 4.1's paper.

I could see them accomplishing it and seeing gains like this in roughly the correct timeframe, and when I heard about that development I assumed the frontiers would probably jump on it.

How it works: https://miraflow.ai/blog/deepseek-v4-1-flash-causal-encoder-...

A model that was introduced a few days ago that's LLM-based, but instead of producing text, you can ask it questions and it will return decisions. The key thing being that it responds pretty quickly and predictably.

Site: https://typesafe.ai/blog/introducing-system-one-models-and-j...

> I would have to do multiple google searches to build a secure network around a replacement tool I built for 1password

I hope that isn't implying you're hosting a vibecoded password manager. Because that would be a horrible idea. If you selfhost a password manager, it's much better to use something that is reputable and tested against like Vaultwarden.

Even if you have it say, in a Tailnet that only your machines can get into, that just means someone has to compromise one of your machines.

Use ublock origin rather than ABP. ABP was dead the moment they sold out to "responsible" ads.

All of this also assumes it doesn't hallucinate heavily in the process and give you instructions that are in reality utter nonsense, or create something entirely different from what you were trying to do.

If you've managed to get the equipment and resources to pull this off in the first place, someone with the biological knowledge probably is not the ceiling stopping you from the other part of the problem.

IRC is small and niche enough to be a good place for more ephemeral discussion if you have a bouncer to stay connected for you. Chat on it tends to move slowly, and the userbase trends more towards actual nerds.

I like the rationale you have behind trying to be anti-addictive with the design. I wish more places around the net had that sort of mentality. Though I am curious, why remove timestamps?

The important aspect is human creativity. If you're editing a thing in Photoshop in a way where you have rights to it to begin with, It's presumably starting from a place of human creativity.

So by applying a filter, you're deliberately making a choice that changes your image in a desired manner.

When an AI makes an image, or code, you aren't inherently applying human creativity. Now, if you took an AI image and applied enough traditional talent to modify it on top, is that copyrightable? Nobody knows yet until courts test it.

I wonder if this will become a new revenue stream for providers. Want to know if Claude generated some text? There's a free web form you can paste into.

Of course, you can also run your own check service if you pay some API fees, and those checks can be a lot more convenient for users since the services can check multiple sources, to whom they are paying for the privilege.

Then someone washes the text through a local model that rewords it, the markers are lost, amd they're clear again.

That's also assuming you have children. I'm childfree and most days are all mine once I punch out unless I've got stuff to triage here and there.

> Ad pipeline is malware at this point.

Always has been.

Occasionally my girlfriend will comment on something she saw in an ad, even buy things off them. Thing is though that ad platforms don't seem to be doing anything meaningful to stop bad actors.

So really, clicking any ad and interacting with it amounts to placing your trust in a total stranger with the only criteria being they paid a little bit of money for you to see them. To which you will then download their software, give them your credit card, or whatever the end goal is.

It's far easier to assume anything in an advertisement is a scam and block them accordingly.

> I'm not a lawyer, but I don't believe this. There is definitely negligence

They could 100% be civilly liable, but this doesn't constitute criminality. If I leave my car in neutral and run out into a gas station because I really have to pee, and it rolls and strikes another car, my insurance is gonna have to pay up to fix the other person's car.

But that doesn't mean the cops are gonna throw cuffs on me for criminal mischief unless there's compelling evidence that I intentionally left my car in neutral with the intent of it hitting this other car.

I would say in EA's case, boycotting them did have some level of effectiveness. They didn't stop being shitty altogether, but they did come out with a couple strong singleplayer experiences that doesn't overwhelmingly stink of overt monetization, and it seemed like they put at least some attempt into turning their reputation around (though they still put out plenty of monetization slop, particularly their sports games)

But they messed around for too long, and I don't foresee their reputation ever seriously recovering. Especially now that they have a 55B investment/purchase to make up for now, they'll probably be even more egregious.

LLMs are fantastic for helping with Nix stuff. Particularly the error logs, because Nix errors are atrocious to read. Being able to throw the error at an LLM and have it get to the point of what I need to fix is nice.

I've also had it build me a nix flake for a piece of software that wasn't in the repo and save me a ton of effort running it.

If it can solve Nix issues that well, given how relatively obscure Nix is, I don't think it'll struggle with most topics. Though the entire Nix repo being written in Nix and on GitHub might give it a huge boost in training visibility. It's not like other Linux topics aren't also very well represented though.

This logic fails on a couple levels. One, bike lanes are often not wide enough to support another car anyway. Two, Braess's paradox[1] is an effect that's been noticed for as long as we've had cars that adding a lane to a roadway will often show no improvement, and perhaps even add detriment, to a local traffic system.

So I guess it's a common sense solution if you don't understand the first thing about roadway design?

[1] https://en.wikipedia.org/wiki/Braess%27s_paradox

A silver lining is that at least a lot of these AI generated malware and phishing scams are easy to disrupt with mild white hat skills. Often the people behind them lack the knowledge on how to prevent themselves from being disrupted by said white hats.

The most laughable I've seen was a scam that put a captcha on the frontend to stop me from flooding their free email system on the backend and rate limit them. However, the captcha was clientside only, so I didn't even notice until I looked to see if they rotated emails, but also the captcha was a textbox with the code set as the placeholder.

Truly the pinnacle of vibecoding a scam.

In theory you could change the steam command line fpr each game and have them launch in bubblewrap. Though I'm not sure how well that would play with graphics drivers. It might be friendly with AMD, but my experience is that NVIDIA is a pain to have play nice with containers.

There actually are skyrim "MMO" and roleplay servers. I've not tried it, but it comes up on my YouTube homepage a lot. So I initially assumed it was that.

AI Dungeon played like a text adventure game and ran off GPT-2, later GPT-3 fine-tunes. That might be what you're thinking of.

How would it even be stopped if you could ban it? It's not like you're banning just one company. Anyone with the resources can still obtain and run the models. Sure, big models like Kimi K3 will be less accessible until a foreign version of Openrouter with no incentive to listen to US law begins offering it. Or they offer it and obfuscate what model it actually is behind codenames.

It wouldn't surprise me if that kind of problem is partially why weights are open. Because you can't meaningfully stomp them out completely.

Much of the internet from the time the training data was initially collected wasn't much different. Consider how much blogspam and listicle SEO/ad optimized content would've been in the training data that is primarily interested in meandering for as long as possible to milk ad views.

I've used it to help me clean up and reverse malware samples to give the person running it problems. It's very good at taking the obfuscation apart and translating it into something easier to read. I can often get it to completely vibecode string decryption functions for me so I can get what exfils they're using and the like.

Doing the same by hand can be really time consuming and difficult depending on how many obfuscation measures are layered on top.

I have a $20 Claude sub, and the closest I've come to hitting a limit was when I was using it to fight back against some scammers spreading a stealer on discord. I was having Claude decode their webhook strings, and the first time I blew them up with pings to get a job, then just started deleting the hooks from under them when they published new versions.

But for standard productivity, I've never come remotely close to hitting a limit.