asdfasgasdgasdg

9 ms·

31.
by asdfasgasdgasdg 4mo ago
There’s trying and then there’s trying. If ASML’s output were absolutely necessary to the US or the rest of the world, and if no replacement could be made, the Netherlands would have infinite leverage and be the most powerful country in the
32.
by asdfasgasdgasdg 4mo ago
Any move like this would be simply by murdering the golden goose. ASMLs stuff is good no doubt but you don’t want to give the world the incentive to develop an alternative. If it was done once it can be done again and once it has been done
33.
by asdfasgasdgasdg 4mo ago
You sponsor every open source library you take a dependency on? I grant that if you act as a significant source of funding to a given entity, that entity is less likely to hurt you, if it knows what your interests are. Of course, this is co
34.
by asdfasgasdgasdg 4mo ago
We should know, being that we do the same thing each time we post a comment on this site.
35.
by asdfasgasdgasdg 4mo ago
For the other 90%? For his own personal reasons? It’s almost impossible to guess.
36.
by asdfasgasdgasdg 4mo ago
I don’t think there is any action Pichai can take on this that wouldn’t hurt vastly more than a few students walking out of his commencement speech. He is a man well used to people complaining about his policies. Googlers do so all the time
37.
by asdfasgasdgasdg 4mo ago
Is it? I have to assume that Pichai was informed beforehand that there would be a walkout. Around 10% if the class walking out is not that big of a deal, especially considering that ten percent was probably not likely to seek gainful employ
38.
by asdfasgasdgasdg 4mo ago
Nobody thinks a single tweet telling someone to commit suicide has a significant probability of success. It manifestly does not or else we would be an extinct species by this point. People have been convicted for using words to convince o
39.
by asdfasgasdgasdg 4mo ago
Trucks are just an illustrative point. Substitute for whatever trivial thing it is that people like and would not be willing to give up. {Beef, air travel, fast fashion, 69 degree interiors during the summer, etc.} Each one of these things
40.
by asdfasgasdgasdg 4mo ago
First we have to convince people that they will be better off if they have to pay a lot more for their toy trucks. That is the step 0 that nobody seems to know how to solve. Hollering about how the oil company CEOs are evil is not going to
41.
by asdfasgasdgasdg 4mo ago
Everything turns on intent. "This is not tested with mysql" is very different from "I'm going to go out of my way to fuck up your mysql."
42.
by asdfasgasdgasdg 4mo ago
Okay, so we agree that everyone who uses open source is at risk, regardless if of they're a contributor. But maybe we disagree about this other thing. I'm not certain that closed source/paid software is less of a risk either
43.
by asdfasgasdgasdg 4mo ago
Provided you give it access to tool calls that execute arbitrary code, sure.
44.
by asdfasgasdgasdg 4mo ago
Yes but they still make choices that reveal their preferences.
45.
by asdfasgasdgasdg 4mo ago
Sorry, I just don’t think this is a tenable or realistic way to approach dependencies in this day and age. If it works for you then I’m happy for you tho.
46.
by asdfasgasdgasdg 4mo ago
I think it is extremely rare to vet every single line of one's dependencies. Especially lines that are intentionally hidden from the terminal using escape sequences. Do you review the diffs of all projects you depend on to check for th
47.
by asdfasgasdgasdg 4mo ago
"the underlying root cause of most supply chain attacks in this era seems to be expecting something of value in exchange of nothing." I do not think that someone's status as a contributor to open source mediates their safety
48.
by asdfasgasdgasdg 4mo ago
If there's demand for it and package repositories are willing to tolerate this sort of stochastically harmful package in their repos, I think it would be a potential way to solve this sort of problem!
49.
by asdfasgasdgasdg 4mo ago
"I wouldn't consider lib deleting itself as malware" At least according to the prompt, the library was attempting to delete not just itself, but all tests that depend on it. I do think if the prompt was solely scoped to remov
50.
by asdfasgasdgasdg 4mo ago
I actually do not think that this is fundamentally much more risky than the basic type of supply chain attack that already exists in code form. You actually have a lot less exposure, because when you give people the ability to run code on y
51.
by asdfasgasdgasdg 4mo ago
"it's just text on stdout" There is an intent to cause harm and a reasonable expectation of achieving that intent. And at least if the github issues are to be believe, a successful actuation of the intent in at least a few ca
52.
by asdfasgasdgasdg 4mo ago
A supply chain attack by another name. This time perpetrated by the original author of the code, which is relatively unusual, not attempting to benefit directly in any economic fashion, which is also unusual, and targetting an idiosyncratic
53.
by asdfasgasdgasdg 4mo ago
I don't have any preconceptions about specific content I want to see. I'd just think that so many hours of such cool adventures would have greater variety. It made me wonder if your AI really did such a good job of indexing it. It
54.
by asdfasgasdgasdg 4mo ago
I feel like such prompt injections are really just another variant of the supply chain attack. Instead of selecting for bitcoin afficionados, this one hits AI fans. This will be fashionable for a little while but if AI continues to gain min
55.
by asdfasgasdgasdg 4mo ago
Cool build but the example videos you provide at the end are . . . not what I would hope for when thinking about the highlights of 2000+ videos of biking? For example the dog barking video only has one scene repeated two or three times and
56.
by asdfasgasdgasdg 4mo ago
I wish it were the case that class warfare would be sufficient to solve the climate problem. But I don’t really see any alignment between economic class and ecological consciousness where I live. Are all the poor and middle class folks walk
57.
by asdfasgasdgasdg 4mo ago
Gasoline is heavily taxed as well, far in excess of the subsidies it receives compared to typical consumer goods. Jet fuel itself has almost no tax net of its subsidies, however passenger aviation is also heavily taxed compared to most cons
58.
by asdfasgasdgasdg 4mo ago
Use Gemini 3.5 flash on the $20 a month plan and be satisfied with only being 3x as productive as you’d be on your own.
59.
by asdfasgasdgasdg 4mo ago
Fable’s been out for like a day and this site seems more recent.
60.
by asdfasgasdgasdg 4mo ago
You don't even have to merge stuff from a human. I've been contributing a bluetooth driver to a certain embedded project which I use. I put a lot of work into it. The fellas have not merged it yet -- they have limited attention an

More ›