Posts by juliancalaby@social.treehouse.systems
(DIR) Post #ASp7hP20jnWRC3weRs by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
Belated #introduction:I'm Julian Calaby, I'm a Melbourne based web developer. My professional life is management, PHP, React and AWS. Outside work, I'm into machine knitting, sewing, Lego, electronics, and I love dogs. I'm currently migrating my home servers into some local cloud stuff ("fog"?) the hard way.
(DIR) Post #B4B6ToO7QxPAk3MRO4 by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne I've started cutting off cold callers spiels by asking them where they got my number from.The most recent one was all "uh .. LinkedIn", then hung up on me when I said "this number isn't on LinkedIn".
(DIR) Post #B500a8EzqNTvO9gGiO by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne Best math teacher I ever had gave us a blank sheet of paper and asked us to divide 1 by every number between 1 and 50, then when we were done, showed us all the patterns we could see in all the decimals we got.
(DIR) Post #B500w3GP1v6IK3n55E by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne I initially followed you because you were the admin here and I felt that would be useful, I stayed because everything you post is interesting and worth reading.
(DIR) Post #B7WuuP2H89UzrL9n6W by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
RE: https://social.treehouse.systems/@ariadne/116769651521628628But ... surely ... surely some decent static analysis could find the same issues, on someone's normal, everyday computer, without burning 5000 tonnes of energy to do so. Right? RIGHT???The thing I don't understand about "AI security analysis" or "AI code review" is that in my experience 90%+ of issues in code are either:1. Variable can be ether A or B and the code assumes it's A and breaks if it is B.2. If you go on this very specific path through this code, we "allocate" something and don't "deallocate" that thing before we drop references to it.Both of which can be found with a decent static analysis tool, and we have been doing that for decades. (And a lot of modern programming languages will find these issues during compilation)So what value is an AI code analysis tool actually adding here?How is "Hey Claude find me a security vulnerability in this code" better than "static_analysis --level max"?(And I get that a lot of security issues cannot be found using static analysis, and I'd suggest that the next step here is content- and code-aware fuzzing, which are, again, tools that already exist.)#ai #techRT: https://social.treehouse.systems/users/ariadne/statuses/116769651521628628
(DIR) Post #B7XXSnRmfk7vfqupjk by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne I'd be shocked if you didn't. You're sane.This wasn't supposed to be a reply, this was just me bitching about people sending LLMs to do static analysis tools' jobs.
(DIR) Post #B7mJYvoWf19wvILTTk by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne And this is why "smart" appliances have their own WiFi network in my house and need to be given special privileges to talk to anything outside of that network.
(DIR) Post #B89pu9dAuqojHoXdbs by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne If I had Coccinelle for PHP I'd be a much happier programmer.
(DIR) Post #B8YlfEaiL9lojNkZw8 by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne This really sounds like a situation where someone like, say, the Linux Foundation, should step in and provide a pathway for maintainers like yourself to have functionally free access to these models for this precise reason, yet...
(DIR) Post #B8ahqIK7UEfTmzPJ7w by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne I'm shocked they're doing something that sensible. I was seriously expecting them to leave maintainers hung out to dry. That suggestion was supposed to be a joke.
(DIR) Post #B8mYAH7mT16Jc0K6Qy by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne @grahamperrin I feel much the same way. Someone said the ideal career in tech is a cabin in the woods. I'm finding it's call is louder every day.
(DIR) Post #B9KIX0Mai1NfCgw2rI by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne 64GB of DDR4 server RAM cost me nearly $1000AUD earlier this year. I'm still mad.
(DIR) Post #BA59pt01xGe1wpddpI by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne Yes and no.There is no other view of Paris like it and if you're anything like me you could lose hours just looking at the elevators. The first level is pretty cool, but you want to go to the top and so does everyone else.Queues are very annoying, obviously, but I believe we went there first thing in the morning and they weren't that bad.When we were there (many years ago) there was a tourist deal available that included a couple of museum visits, entry to the Eiffel Tower, a week of metro transit and a river cruise to see it at night. If that's still a thing, I'd recommend doing that, particularly the river cruise.
(DIR) Post #BAGVcDdsnDQBOQidI8 by juliancalaby@social.treehouse.systems
0 likes, 0 repeats
@ariadne There's a group a couple of suburbs away who have basically halted the construction of a power line to a new datacentre, and I feel that is better usage of everyone's efforts than burning down existing ones.(They've also organised with other people in the path of these power lines to keep them from being constructed which is just beautiful.)