Post B6nbIdDFh6zqRlgYym by phnt@fluffytail.org
(DIR) More posts by phnt@fluffytail.org
(DIR) Post #B6nWAce7PxzUbNc6wy by feld@friedcheese.us
0 likes, 0 repeats
> qemu has an fpu bug and can't run some games> I thought about opening a PR but they have a no AI policy, soI guess we'll be keeping the fixes to ourselves now
(DIR) Post #B6nWAcpoiTLfBf5SBU by lain@lain.com
0 likes, 0 repeats
@feld it's really hard to find a good reason to upstream fixes by now. you can always easily take any of their changes, and don't have to fight to get your changes integrated. either way, age of the personal software is here.
(DIR) Post #B6nWSd7oNMqlIe5aAi by hj@shigusegubu.club
0 likes, 0 repeats
@feld just lie
(DIR) Post #B6nXrssH3awtL6QZ3A by pingviini@pleroma.shunderdo.me
0 likes, 0 repeats
@lain @feld FWIW they watered down their no-ai policy literally just yesterday. But submitting AI-generated natural language descriptions of bugs and possible fixes in AI-generated pseudo code in lieu of directly applicable patches is a) kind of funny and b) does not really increase the required effort on the part of the reporter, so why not do that
(DIR) Post #B6nXrt5kFViy0sjK2y by lain@lain.com
0 likes, 0 repeats
@pingviini @feld it's literally a one line fix, but i have a day job, a wife, a social network and a whole bunch of other stuff that i can fill my day with that's much more appealing than to navigate how i can tell the qemu maintainers that there's an issue i found and fixed without someone throwing the book at me.
(DIR) Post #B6nYaSzc8B8m6H7SEK by pingviini@pleroma.shunderdo.me
1 likes, 0 repeats
@lain @feld Perfectly valid, especially when the party throwing the book at you is IBM in a Red Hat suit.
(DIR) Post #B6nZXLBApD9Yx6bDzk by feld@friedcheese.us
1 likes, 0 repeats
@lain > age of the personal software is here.it was already here if you had enough motivation. If my memory is correct about the person involved:There's a private variant of FreeBSD which I've seen referred to (perhaps only on IRC?) as BruceBSD. Bruce Simpson is a long time developer and has made massive changes to the kernel that were never upstreamed. :)
(DIR) Post #B6nZcjbzPf3oAziMAC by lain@lain.com
0 likes, 0 repeats
@feld yeah, but i think it's coming for regular people. a non-programmer will be able to have their own software stack.
(DIR) Post #B6nbHk48jI1lPa00dk by phnt@fluffytail.org
1 likes, 0 repeats
@lain @feld >it's really hard to find a good reason to upstream fixes by nowAnd it's only getting worse. I couldn't get a <20 lines of mostly CMake that made an optional dependency actually optional merged into upstream for reason "we don't do that."
(DIR) Post #B6nbId3gGhL9y5Cv3o by 7666@comp.lain.la
0 likes, 0 repeats
@lain @feld >non-programmer will be able to have their own software stackCVE hunters be eating good!
(DIR) Post #B6nbIdDFh6zqRlgYym by phnt@fluffytail.org
1 likes, 0 repeats
@7666 @feld @lain Who cares when the software runs on your system anyway. Good luck exploiting my ls clone or whatever.
(DIR) Post #B6ncSKIayDPadXN5vc by 7666@comp.lain.la
0 likes, 0 repeats
@phnt @feld @lain Nah it's about footguns, hallucinations, "do at all costs" thinking, etc. When you write some giant stack of slop to help you do X and it ends up doing something unexpected, the possibilities are endless."Write me software to share these pictures with Grandma""Okay, just open these ports on your router!"Not everyone is smart enough to understand the implications of what they are trying to do, and AI will generally not stop you because argumentative agents don't sell well. It's a fast track to fucking up.
(DIR) Post #B6ncSKYtzaSJS707LU by feld@friedcheese.us
0 likes, 0 repeats
@7666 @phnt @lain so we shouldn't embrace technological progress because someone somewhere might hold it wrong?
(DIR) Post #B6ncSKmNBVEO7tIsLI by 7666@comp.lain.la
0 likes, 0 repeats
@feld @phnt @lain I'm saying people don't read the safety labels and end up chainsawing their arm off because they don't know better.Think about all the accountants who made giant Excel macros that are totally unmaintainable. Think about all the customer service departments that made Access DBs off a shared drive that ran into scaling issues. Think of all the software devs who thought it was a good idea to store CVVs.It's not that technological progress should be stopped, it's that people who don't know better won't stop and someone will pay the price.
(DIR) Post #B6ncSKyQSgs8jGwV84 by feld@friedcheese.us
1 likes, 0 repeats
@7666 @phnt @lain > Think about all the accountants who made giant Excel macros that are totally unmaintainable. Think about all the customer service departments that made Access DBs off a shared drive that ran into scaling issues.both of these are 100% fine. The business operated and was successful. Perfect is the enemy of good. Prematurely optimizing especially in tech is one way to guarantee your business fails. You should always use what is cheap and works for as long as possible and then address the issue when the time is right.> Think of all the software devs who thought it was a good idea to store CVVs.Let's roll back the clock to when this was really popular. The issue was recurring billing. The only way to charge the card was to keep the CVV. We had to wait for the credit card companies to solve this problem for us. At least as far as I'm aware, when the CVV was invented they didn't provide any mechanism to keep billing the same card without keeping the CVV on file.
(DIR) Post #B6ndfBJnlqygVEd5do by 7666@comp.lain.la
0 likes, 0 repeats
@feld @phnt @lain >both of these are 100% fine.Only if you're not the guy who has to clean it up when it should have been in a bloody SQL DB in the first place. Technical debt should be burned with a flamethrower at all times. The endless pursuit of scale without discipline is what gets people into these messes and it will be cheaper in labor cost every time to just think it through prior.>The only way to charge the card was to keep the CVV.Recurring "card not present" transactions never required the CVV as far as I'm aware, and at no time was it allowed, even to solve a business problem, because it defeated the purpose of what CVV was trying to do (stop stolen cards). In almost all cases it was better to find a payment provider and iframe their shit in unless you were a bespoke payment processor, or find a tokenizer service which yes, they did exist back then. But again, this proves my point that the "do it at all costs" mentality is a *human* flaw. We can't help ourselves, when handed a hammer, to treat everything as a nail.
(DIR) Post #B6ndfBa6nE1PJoG73g by sun@shitposter.world
2 likes, 0 repeats
@7666 @phnt @feld @lain you're never supposed to store CVV or CVV2, many intermediate vendors though didn't have any recurring transaction apis so yes a lot of people would break the rules and store it which was a major no-no. there used to be a loophole in the spec that you could "store the cvv long enough to execute a transaction" which meant like, in memory or something until it finished, but online vendors interpreted as "store it in the database so I can charge them 3 months later" don't ask me how I know. but they closed the loophole. cvv literally means "the card is present" if it's not present, you're breaking the rules.
(DIR) Post #B6ne0vkKLf9aZrPJ8S by 7666@comp.lain.la
1 likes, 0 repeats
@sun @phnt @feld @lain Yeah and you get the business types going "is it really so bad? we need monies!" and I'd rather those people shot on sight because they are asking for PCI and legal penalties in the seven figures.
(DIR) Post #B6ne7sQ17Q04HgDfoe by sun@shitposter.world
1 likes, 0 repeats
@7666 @phnt @feld @lain yep been there lol. all of it. we straight up had the money people say "you're telling me that transactions with the cvv code included are cheaper to execute? just store the cvv2 code" you fucking asshole, the reason that's cheaper is they're giving you a discount for giving them greater assurance your transaction isn't fake
(DIR) Post #B6nei0Z0JU9pyDeToW by feld@friedcheese.us
1 likes, 0 repeats
@sun @7666 @phnt @lain I once had to write a perl script that was run inline of the apache logging to replace credit card numbers in the logs with a salted hash so at least we could search for transactions by the full card number. It was super dumb but hey it worked. I can't remember why those logs were important anyway but apparently they were
(DIR) Post #B6nekDrroreJoOWyjg by lain@lain.com
0 likes, 0 repeats
@feld @7666 @phnt @sun either way, SOTA llms are all super security conscious and will scold you if you ever save secret data
(DIR) Post #B6nevdAQ67ZpSfeHJI by feld@friedcheese.us
2 likes, 0 repeats
@lain @7666 @phnt @sun idk if I can trust this, someone on Bluesky got a lot of re-skeets from saying the exact opposite :jerkbag:
(DIR) Post #B6nf1exEMjFck4M1g0 by sun@shitposter.world
4 likes, 0 repeats
@feld @7666 @phnt @lain in around 2005-2006 I wrote an entire pci-compliant company-wide card store for a big nonprofit, i wrote a great system that completely isolated cards from the calling program but still let the calling program do repeat transactions etc. my boss called it "too elegant" and requested a bunch of simplifications. years later the guy in charge of infrastructure architecture for the company comes to me and bitches about the design we're stuck with and says "it should have done x, y and z". and I told him "open the Word design document and go into the history and roll it back to version 1 from three years ago, there, it's designed."
(DIR) Post #B6nf2mfFBaSKwYTeMK by 7666@comp.lain.la
1 likes, 0 repeats
@lain @phnt @feld @sun I had opus 4.7 try to sneak a sudo apt-get on me.Basic regex detection on potential secrets just ain't enough if the models are designed to be helpful at all costs.
(DIR) Post #B6ngZycTrB6vX6ZmSG by gabriel@mstdn.starnix.network
1 likes, 0 repeats
@sun This kind of story is why I worry that the slop machines are what we deserve until we actually start (collectively, rather than as rare exceptions) giving a damn.But that's a problem way bigger than technology. @7666 @phnt @feld @lain
(DIR) Post #B6ngie0pqKfUE96JTE by sun@shitposter.world
2 likes, 1 repeats
@gabriel @7666 @phnt @feld @lain that is why to some extent I'm not as terrified conceptually by AI, because we already live in slop world, we have forever. of course quantity is its own quality and AI enables extreme slop proliferation at a previously unimaginable scale and that is a problem. but please don't pretend everything was okay and AI showed up and ruined everything lol
(DIR) Post #B6ngjfl6ps7HvuEeqO by 7666@comp.lain.la
1 likes, 0 repeats
@gabriel @sun @phnt @feld @lain Yeah I said something some time ago about AI magnifying our worst tendencies (and later leading to something about the most concrete realization of the acceleratonist viewpoint but we can ignore that teehee), those just don't go away. that's been the core point of my argument. There are absolutely people who will be 5x as capable as others because they see a tool and figure out how it works before applying it and it works well for them. Others will just punch it full throttle and complain when they wrap themselves around a tree.
(DIR) Post #B6nhdY54ZMKkKwDVsu by jae@bsd.cafe
1 likes, 0 repeats
@sun @7666@comp.lain.la @phnt @feld @lain @gabriel cosigned. reminds me of when anyone and their cousin got internet access. some people should be given aptitude tests before spinning the footgunprior to ai the world was a mess, hasn't really changed. the ai rush is just one more thing to think about, but i don't think it's something to crash about as most people end up doing.
(DIR) Post #B6nhgy8GAQqk0DL3Hk by lain@lain.com
0 likes, 0 repeats
@jae @sun @phnt @feld @gabriel smh elitists. i'm a man of the people. retards have rights too
(DIR) Post #B6nhkopkgH3SK1W97Q by sun@shitposter.world
0 likes, 0 repeats
@lain @phnt @feld @jae @gabriel just keep instagram and facebook as the tard corral
(DIR) Post #B6nhr7smloo58ewadE by lain@lain.com
0 likes, 0 repeats
@sun @phnt @feld @jae @gabriel we already have the fediverse for that
(DIR) Post #B6nhroPAfnfT1GQ2wS by pernia@cum.salon
0 likes, 0 repeats
@hj @feld been sayin ts. They can't tell, and if you know it works and take care to test then no one will have issues.
(DIR) Post #B6nhroeljo91ndiVFo by hj@shigusegubu.club
0 likes, 0 repeats
@pernia @feld gotta have that ai clout i guess
(DIR) Post #B6nhtapu5oPZW1lwsi by sun@shitposter.world
1 likes, 1 repeats
@lain @phnt @feld @jae @gabriel no, fedi is the schizo corral
(DIR) Post #B6ni29nnyPFAHHsGpc by feld@friedcheese.us
1 likes, 0 repeats
@sun @7666 @phnt @lain @gabriel if you want rigorous engineering practices stick to academia. Even critical infrastructure and code that keeps people alive is full of garbage.
(DIR) Post #B6ni2AL7yVtlwdSsls by jeffcliff@shitposter.world
0 likes, 0 repeats
@lain @feld because it improves the world and you've already done the hard work(making the change). Do you return shopping carts to their spot or do you just leave them in the middle of the parking lot?(that said "upstream" should never include github)
(DIR) Post #B6niELsCv3y1BrkSeW by sun@shitposter.world
1 likes, 0 repeats
@feld @7666 @phnt @lain @gabriel no, you need to write extremely elegant and hand-written carefully constructed code or you're making slop. then, run it on your pick of one of the three popular operating systems that are all based on 1980s codebases and have test suites with trillions of edge case tests
(DIR) Post #B6niLYgdg5JSxQm2BE by 7666@comp.lain.la
1 likes, 0 repeats
@feld @phnt @lain @gabriel @sun psstit doesn't have to begarbage companies and garbage people beget garbage. don't surround yourself with garbage
(DIR) Post #B6niLYsKyafdXiFNPk by sun@shitposter.world
2 likes, 0 repeats
@7666 @phnt @feld @lain @gabriel to a large extent that is why I started building FRUTE VM, it was an attempt to explore the best versions of everything because no current system is the best of anything, to large extent they are all the worst of everything but pushed as far as possible.
(DIR) Post #B6niZFyO3GyEyKbhDM by 7666@comp.lain.la
1 likes, 0 repeats
@sun @phnt @feld @lain @gabriel The fun part is that making actually decent things is well within reach now. You don't technically have to be some L7 mega engineer anymore to make big things work well, but to get there you do need to understand good design, good principles, concept of scope creep, fundamentals, discipline, lifecycle management, etc.
(DIR) Post #B6nj1ODwy5fqfdIkbI by sun@shitposter.world
2 likes, 0 repeats
@7666 @phnt @feld @lain @gabriel even on small things its gotten so good. people want to shit all over llms but they made it possible for me to finally grok several concepts like capability-based operating system because before you needed either a mentor or academic track that gave you full time to read SEL4/Genode source code for a month.
(DIR) Post #B6nj3ARv9YD2WogSeG by moth_ball@shitposter.world
1 likes, 0 repeats
@sun @lain @feld @gabriel @jae @phnt I'm tempted to argue that the schizo corral is elsewhere but I've seen enough to know we're not quite free of the menace