brookst

15 ms·

391.
by brookst 3mo ago
The vuln is supposedly in the cursor IDE, not an LLM-mediated iteraction
392.
by brookst 3mo ago
On windows I guess? On Linux and MacOS you'd need to run ./git to execute a malicious binary in the cloned repo.
393.
by brookst 3mo ago
Different layers, different risks. You do not expect an agent-level app to run untrusted binaries. You expect prompt injection, etc. And I don't at all agree that a malicious executable landing in some directory is already game over. P
394.
by brookst 3mo ago
All of your points apply to performers who may not sell out, so scalpers take risk, you may buy more, speculators may soak up what would go unused. But consider Ms. Swift. All of her shows sell out, period. Face value tickets are maybe $400
395.
by brookst 3mo ago
Yeah. “Rent-seeking” is just a fancy rhetorical term for “people doing things I don’t like with money”. Subscriptions are rent-seeking. Loans are rent-seeking. Spending millions in capital to buy a building and renting apartments for thousa
396.
by brookst 3mo ago
You really think it has zero benefit whatsoever? Nothing malicious will be caught?
397.
by brookst 3mo ago
What’s normal? An auction would be the obvious solution, and I guess you could argue it effectively is an auction, just with initial sales that pretend to be a race and are actually sold to speculators who then run the auction.
398.
by brookst 3mo ago
So is all demand-based pricing rent-seeking? Like selling gold or a house or any other scarce good for more than you paid?
399.
by brookst 3mo ago
How do performers benefit from scalping?
400.
by brookst 3mo ago
Eh, not convinced. Certainly what works for you works for you. But the idea that “outsourcing” to experts is somehow detrimental is one of the modern tropes I can’t stand. And I’m not sure I believe there’s a material difference between e.g
401.
by brookst 3mo ago
Yes? And users from each other? If you’re so far into the “I buy it, nobody can tell me what to do with it” camp that you think it’s unethical for companies to try to stop cheating in multiplayer games… well, we don’t have much in common.
402.
by brookst 3mo ago
There is a certain amount of irony in your comment that I hope you appreciate.
403.
by brookst 3mo ago
Save us from the reasoning / sentience / consciousness / thinking semantic quicksand. Babbage’s Analytical Engine didn’t actually analyze anything, and terminology hadn’t gotten any more clear-cut since.
404.
by brookst 3mo ago
> There's a reason why modern "secure boot" originated on gaming consoles and TV boxes. Yes, because hardware is sold at or below cost, and giving away a general purpose computer without reaping the long term upside is a r
405.
by brookst 3mo ago
Oh sure, full agreement. In fact given how mid Gemini has been in cloud, this may turn out to be critical strategy to avoid losing cloud to Anthropic / OpenAI / DeepSeek / whoever, and local to Apple (doesn’t seem likely now,
406.
by brookst 3mo ago
Honest question: is there anyone truly good at security who never made a potentially-disastrous dogfooding mistake while learning? Not to decent mistakes or amateur brain surgery, but there has to be some level of risk tolerance among tinke
407.
by brookst 3mo ago
The fact that an egregious case happened once, decades ago, is probably not sufficient grounding to act like every bit of equally trivial “hacking” always results in massively disproportionate law enforcement response. Sucks it happened. Bu
408.
by brookst 3mo ago
For hosts, but not pages on the site. But I think the other explanations take care of pages: cloudflare hints, chrome reporting addresses visited, etc.
409.
by brookst 3mo ago
Google has the benefit of billions of devices in the wild that they control. Anthropic really doesn’t have distribution for local models, makes sense they’re not playing in that space.
410.
by brookst 3mo ago
It’s all tradeoffs. Secure boot sucks for enthusiasts but wow would the phone security / root kit scene be a nightmare without it.
411.
by brookst 3mo ago
Yeah, fair points. Thanks!
412.
by brookst 3mo ago
I’ll charitable assume you really just don’t understand. Look at it this way: suppose someone says “OMG this morning a massive, free floating fusion reactor appeared in the sky; pouring terawatts of power into the earth’s atmosphere! We hav
413.
by brookst 3mo ago
Yeah, well, my not-yet-written language has zero segfault issues raised, so it’s clearly superior to both Zig and Rust. I really need to get around to writing it because obviously it’s a much better design.
414.
by brookst 3mo ago
that's what Bezos was saying at Amazon during the dot com bubble?
415.
by brookst 3mo ago
all money moves in circles, it's just a question of number of stops. think about stuff like pork barrel funding for aerospace, which props up jobs, which generates funding for political campaigns that perpetuate pork barrel funding.
416.
by brookst 3mo ago
This is not remotely new. When I worked at Intel ~20 years ago, Intel Capital invested in startups that would buy Intel hardware. Some of them succeeded, some did not. But "invest in companies that may grow your own TAM" is an anc
417.
by brookst 3mo ago
Renters insurance is primarily protecting the landlord. If you cause a flood, if a guest slips and falls and sues you, etc. Your building would be fine if you found a renter’s insurance that didn’t cover your own goods (which would cost lik
418.
by brookst 3mo ago
I swear this is getting so common. “Well I’d be fine with eugenics and sterilization of the poor, but the website uses em-dashes a lot so I think it’s just awful AI slop”.
419.
by brookst 3mo ago
Illuminating a solar farm for 24 hour power generation?
420.
by brookst 3mo ago
Ah, just reductive thinking then? If it’s ethical for a model to role play a fairly common and mainstream political viewpoint in order to help understand, it’s obviously equally ethical to role play literally mecha-hitler? I was hoping for

More ›