bawolff

42 ms·

961.
by bawolff 9mo ago
> Amazing test suite. Lol, is that a joke. Seesh. [To be clear, i think sqlite is the hands down winner on this front, no contest. Does the Turso test suite qualify it to be used in safety critical applications? I don't think so]. T
962.
by bawolff 9mo ago
> What if this is better? If it was actually better you would probably be describing how and why you think its better instead of complaining about "negativity".
963.
by bawolff 9mo ago
Honestly, if you care about that level of concurrency, it begs the question of why are you using an in process database in the first place?
964.
by bawolff 9mo ago
I find it crazy that people would ask you in that direction. I would wonder why anyone would chose Turso over SQLite. SQLite is some of the most battle tested software in the world. Turso seems like relatively new software that is still a b
965.
by bawolff 10mo ago
Perhaps i'm dense, what is the joke here?
966.
by bawolff 10mo ago
I read the specific examples that the maintainers of each project gave. The ones the ffmpeg maintainers complained about appeared to be real bugs. In fact i dont think the ffmpeg maintainers even dispute that. The ffmpeg maintainers after a
967.
by bawolff 10mo ago
Not everything is about economics. As the romans said - you need bread and circuses to stay in power. Keeping food cheap serves an important political function. It also serves an important security function to keep food domestic because if
968.
by bawolff 10mo ago
> I’m sure AI also found real vulnerabilities on cURL. The curl maintainer published the reports and they were very clearly not security vulnerabilities in curl. > My question is why you know cURL is being “spammed” but that FFMPEG is
969.
by bawolff 10mo ago
> IANAL, but apparently hinges on how the training material is acquired That doesn't make sense. You are either transforming something or you are not. There might be other legal considerations based on how you acquired, but it doesn
970.
by bawolff 10mo ago
Because the vulnerability was published and it appeared real.
971.
by bawolff 10mo ago
> I have to imagine this ideology was developed with humans in mind. Given what a big deal RMS made over not descriminating over purpose ( https://www.gnu.org/philosophy/free-sw.html#run-the-program ) i think that is
972.
by bawolff 10mo ago
If a competent neutral party was evaluating them, i would agree. However currently these things tend to be luck of a draw.
973.
by bawolff 10mo ago
I dont think bounties make you an "expert". If you want to be deemed an expert, write blogs detailing how the exploit works. You can do that without a bounty. In many ways one of the biggest benefits of bug bounties is having a de
974.
by bawolff 10mo ago
> they can be used to chip away at open source business models by implementing paid features and providing the support There are a lot of things to be sad about AI, but this is not it. Nobody has a right to a business model, especially o
975.
by bawolff 10mo ago
Bug bounties often involve a lot of risk for submitters. Often the person reading the report doesn't know that much and misinterprets it. Often rules are unclear about what sort of reports are wanted. A pay to enter would increase that
976.
by bawolff 10mo ago
There is a difference between AI discovering real vulnerabilities (e.g. the ffmpeg situation), and AI being used to spam fake vulnerabilities
977.
by bawolff 10mo ago
It gets annoying how americans try and wash their hands of everything their government does. You live in a democracy. Freedom comes with responsibility. The average american voter is at least partially to blame.
978.
by bawolff 10mo ago
Even if it does, he still has a point. The first pebble that forms an avalanche is often symbolic. The symbol influencing others is how we get the avalanche. This move by itself doesn't do much. The question is if it will influence oth
979.
by bawolff 10mo ago
On the other hand we have had stock markets forever. Sure you couldn't directly bet on e.g. if trump would invade iran, but you could indirectly bet on it by betting on things like the price of oil. I dont think this is a new threat.
980.
by bawolff 10mo ago
I guess it depends on what you think the goal of the essay was. I always felt like the primary goal was to inspire people and a lot of the software engineering parts were more framing. To me it reads as a manifesto disguised as a software e
981.
by bawolff 10mo ago
The problem with the peace prize is it seems like its given out to people who they hope will bring peace instead of people who actually have brought peace. We don't award the chemistry one to people with a promising research program, w
982.
by bawolff 10mo ago
I suspect the fun is playing against real people and the unexpected things they do. Just because the AI can beat you does not necessarily make it fun. People still play chess despite stock fish existing.
983.
by bawolff 10mo ago
Honestly i thought the AI would do better then what is described. RCT is pretty simple when it comes to things like what to set ride price to. I think the game has a straightforward formula for how guests respond to prices.
984.
by bawolff 10mo ago
Why would you want a search UI for a rainbow table? That makes no sense.
985.
by bawolff 10mo ago
Sure. Not being hacked is good for business. Keep in mind that google is primarily a cloud business. That means that they take on a lot more of a risk, as when they are hacked its a them problem vs traditional software where its much more t
986.
by bawolff 10mo ago
Plenty of protocols used by google over the years have been deprecated. The difference being that google actually stops using insecure protocols when they are discovered to be insecure instead of trying to sweep things under the rug. Keep i
987.
by bawolff 10mo ago
The reasoning is historical precedent. If something doesn't work out the first time you try it, why would you do it again. We are talking about at least 10 pages worth of proposed reforms. Do you have a specific one you would like to d
988.
by bawolff 10mo ago
Hosting does not include software development. It does not include sysadmins. I'm not sure if it even includes data center personel (Wikipedia owns its own servers. That means you have to hire people to plug them in. Amazon isnt doing
989.
by bawolff 10mo ago
I guess we are still tarrifing solar panels though :(
990.
by bawolff 10mo ago
I can easily imagine a high end catered party costing that much. I don't think there is an upper limit on how much hosting a party costs. You can always go fancier if you have money to burn.

More ›