Posts by alwayscurious@infosec.exchange
 (DIR) Post #B5KZO1pDFr4hZXmcd6 by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Making that decision in what way?  Voting?
       
 (DIR) Post #B5KZO7u2eoVEQG5YzQ by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       It’s fine to not allow LLM-generated, or even LLM-assisted, code contributions.Rejecting valid reports of security vulnerabilities because they were generated with LLM assistance is foolish.  All it does is make life easy for criminals and cyberweapon vendors.For what it is worth, OpenBSD seems to have exactly this policy.  They reject LLM-generated code, but promptly fixed a remote DoS found by Claude Mythos Preview and confirmed by Anthropic.
       
 (DIR) Post #B5ZeoQrMDHYnt2awRk by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne For some reason I initially thought of the Frodo KEM rather than the Lord of the Rings character.
       
 (DIR) Post #B6FBRMxlnVel6rYtOK by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Can it be done?  Yes.  Is it a good idea?  Absolutely not.The cooling and power problems are absolutely solveable with enough work.  The financial problems are not solveable in the forseeable future.
       
 (DIR) Post #B6FBRNVRmIawnJJmsq by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       RE: https://eldritch.cafe/@EllisArcwolf/116131859022211863Seriously, read this post. Then read the blog post it links to.Ellis has done their research on this, and the reality is vastly more nuanced than most people realize.RT: https://eldritch.cafe/users/EllisArcwolf/statuses/116131859022211863
       
 (DIR) Post #B6Yt4fXIfHKk2UPBQm by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Unfortunately it’s often exposed over wireless links.  Another reason wired is better.
       
 (DIR) Post #B6YtminLuRt0t7v46q by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Sadly wireless can be attackable from outside the home.
       
 (DIR) Post #B6fuceDpzjwTEYXPrk by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Is it safe to assume that shims for systemd APIs needed by things like GNOME aren’t a “systemd compatibility layer” for this purpose?
       
 (DIR) Post #B6fyfBvA4f2A91GqPo by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne From my perspective, the advantages of systemd are:Proper cgroup-based service control.Dependency-based service management.Various well-specified IPC interfaces.None of those depend on systemd-as-PID-1.
       
 (DIR) Post #B6i5yZRvuKmIc9htwW by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Now I am curious what motivated this post!I don’t paint mine because I don’t trust the chemicals in nail polish.  The fact that it is considered a chemical hazard in the food service sector tells me all I need to know.
       
 (DIR) Post #B6iCJ15ZSEXTqwNcDQ by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Where was that?
       
 (DIR) Post #B6iE05iSE69AbsfeC0 by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne How long until NVK and Nova leave the proprietary drivers in the dust?
       
 (DIR) Post #B6iEF6k4h3cw8VaaTQ by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne It?
       
 (DIR) Post #B6iEU8iBeXtYaXsEvQ by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne I was not aware LLMs were paying for those projects.  Also, for some reason I thought Valve was involved.
       
 (DIR) Post #B6iGVahlGD6dbbUj7Q by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne In particular, NVK has no relation to CUDA at all.  And Nvidia wasn’t that happy about Nova being in Rust because it meant they could not backport it to outdated “enterprise” kernels easily.
       
 (DIR) Post #B6iGZRsK1yYzNZH2GG by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Are any AI workloads that Nvidia cares about using Vulkan compute?  I thought Nvidia would want to discourage Vulkan compute, as it helps their competitors.
       
 (DIR) Post #B6jTuT1YRnz1aNuA7s by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Oh, that makes sense!
       
 (DIR) Post #B6qI0xKArjZrxFf3KK by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne Yup.  Committing LLM-generated code is risky, unless the change is trivial (in which case it could be done without the LLM) or has a machine-checked proof of correctness.Using LLMs to find bugs in human-written code has been very successful, though.
       
 (DIR) Post #B7hCQCQNrXUuMe8uNE by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne I am so sorry.
       
 (DIR) Post #B7hCmDYOLRxiElO4rg by alwayscurious@infosec.exchange
       0 likes, 0 repeats
       
       @ariadne GNOME gave up and uses Fastly now.