

How many vulnerabilities would’ve been found if we had spent several million dollars on human security researchers though?


How many vulnerabilities would’ve been found if we had spent several million dollars on human security researchers though?


Culture is our most important invention as a species. So important, in fact, that we’ve evolved to make it essential to our individual health and collective capacity to function. To deny someone access to interact with culture on the basis of their lack of wealth is cruel and anti-human.
Likewise, developing something like an LLM, which spews thoughtless pollution into the only shared infosphere we have, and displaces individuals’ ability to connect to each other to develop culture… that is an existential threat to the human race and should be opposed vehemently.
Culture is our most important invention as a species. So important, in fact, that we’ve evolved to make it essential to our individual health and collective capacity to function. To deny someone access to interact with culture on the basis of their lack of wealth is cruel and anti-human.
Likewise, developing something like an LLM, which spews thoughtless pollution into the only shared infosphere we have, and displaces individuals’ ability to connect to each other to develop culture… that is an existential threat to the human race and should be opposed vehemently.


Perpetual loop of “bounty encourages bad reports”, “canceled bounty”, “bug reports improve”, “bounty comes back”, “bounty encourages bad reports”…


Some people genuinely have a problem with it.
But I’m convinced that the majority of it is just: It’s embarrassing (and therefore costs social capital) to defend it.
So therefore: If you attach it to something else you want to attack, you just gave yourself a strategic advantage.


“If you’re thinking without writing, you only think you’re thinking.”


A lot of it probably isn’t legal, but who’s gonna prosecute them?


I agree with Prime on most things, but I think he’s getting this one wrong.
There are more options than just “light-hearted satire” and “earnest business idea”.
The FOSDEM talk is silly, and reads like a skit, but it has a gravely serious undertone.
The security guy has posted on Twitter “I still can’t believe he hooked it up to Stripe lol”.
Meanwhile the LinkedIn of the other guy describes him as a “researcher of political economy of FOSS” at Rochester Institute of Technology, and he runs a non-profit about FOSS for humanitarian aid.
He’s also been very active replying to people talking about the conference talk or the Malus site, asking whether they think this should be legal and what we can do to protect the future of open source.
I think these are people who take this threat very seriously, and are willing to expose themselves to litigation in order to force the issue into courts.


I avoid the potential presence of ads.
I recall seeing some research that suggested “ignoring” ads makes you more susceptible to their content. I couldn’t find it after a couple searches though.


No, it was giant radioactive ants.
But now I am actually not sure if what I saw was Them! or Matinee (which features a film that very well may be based on Them!)


Saw “Them!” when I was like 6. That was pretty bad.
And then Starship Troopers when I was like 10. That one really got me.
Huh. Never thought about how they’re both bug movies.
Ever is an extremely long time.
Probably not for technical reasons, but for IP reasons: https://news.ycombinator.com/item?id=46554890


One box
To be clear, the best case scenario here is a Chrome vs Chromium scenario, because they want the ability to slip in some proprietary components into their official build in order to play nicely with their paid services.
Seems fair to me, and I understand why that’s a substantial effort if they’re still at basically a PoC stage.
Edit: And for the record, I am much happier paying With Reach (Kagi) with my dollars than I ever was paying Google with my data, so I’m very much in favor of this model. Still, some neckbeards only wanna use software from orgs who are in it “for the love of the game”.


I feel ya. But the pendulum will probably swing back the other way soon and we’ll have a ton of companies hiring to undo/replace slop code. That’s how it has been for previous coding fads, anyway.


I’ve got some skepticism alarms going off on this one.
What exactly does “basically reverse engineered some assembly” mean here? Decompiled to C?
And what do you mean by “remake in assembly”? Like, literally writing assembly by hand? Or compiling C source?
I’m not a lawyer, but my guess is that binary-to-binary translation isn’t enough to strip the license, even if you’re making a pit stop in a higher-level language.
When yall gonna arrest Sam Altman?