lrvick

35 ms·

751.
by lrvick 1y ago
Leaving it is the right choice though. The corpos will never care about you. I consume no ads, or Google software, and still do anything I want in the tech world.
752.
by lrvick 1y ago
My project has no need of Haskell, but if anyone puts in the work to make haskell compileable from only public source code my team and I will put in the work to reproduce, package, and maintain it for the community for free as we do most ot
753.
by lrvick 1y ago
TIL MicroHS. Might try packaging this soon if it is in fact bootstrappable and can be deterministically compiled.
754.
by lrvick 1y ago
GHC absolutely could be bootstrapped, but someone versed in that ecosystem would have to put in a lot of work to do it. If they ever do, my team and I will put in the work to package and maintain it in stagex.
755.
by lrvick 1y ago
Stagex can already support all of those use cases provided they are not written in Haskell or Ada, and in fact Stagex is already used heavily in production. We bootstrap everything deterministically from 180 bytes of human auditable x86 mac
756.
by lrvick 1y ago
Yes. Many efforts have started and fizzled out over the years before completion. If you know anyone that takes this on and succeeds I have a 2k cash bounty for them, and we can likely find others.
757.
by lrvick 1y ago
Here is some background on the Haskell situation: https://www.joachim-breitner.de/blog/802-More_thoughts_on_a_... Ada has had even less progress and I am not aware of any writeups. TL;DR: Ada and Haskell need to have c
758.
by lrvick 1y ago
The normalized lack of care about supply chain integrity is going pretty poorly, as any read of recent headlines indicates. Stagex has a 100% full source bootstrapping, and reproducibility requirement that at least two maintainers must prov
759.
by lrvick 1y ago
Good to know! Half the battle covered then.
760.
by lrvick 1y ago
Unlike Nix and Guix, Stagex goes much further in that it has a 100% mandate on supply chain integrity. It trusts no single maintainer or computer and disallows any binary blobs. It is thus not possible to package any software that cannot be
761.
by lrvick 1y ago
I said it has to be treated as a dead language. I did not say it actually is one. Being able to compile a compiler without binary blobs is a hard prerequisite to using that language for any application where security matters. A language can
762.
by lrvick 1y ago
Looks like a work in progress still, but exciting someone at least put some time into this in the past year. Maybe some day I can have pandoc in security focused linux distributions...
763.
by lrvick 1y ago
Yes, and that is a serious security problem because the only way to get trusted PCR values for TPM2 gated secure boot and full disk decryption applications, is with open source full source bootstrapped firmware. Coreboot is the only option,
764.
by lrvick 1y ago
Quite literally all distros today build it by downloading an existing magic binary to compile the latest sources. Even if they claim the package is reproducible, all bets are off on trust if it downloads a prebuilt binary in the build proce
765.
by lrvick 1y ago
We cannot even include it in stagex because there is still literally no way to compile it from source and thus no way to do a real reproducible build, and there is no one left that cares about the language enough to do this. Honestly it has
766.
by lrvick 1y ago
Unfortunately there is still no way to actually bootstrap haskell (or anything based on it) which makes it impossible to put anything written in Haskell near any high trust linux distribution or environment. I guess sandboxing the untrusted
767.
by lrvick 1y ago
Just remember the only truly immutable release is one signed by a key the host does not have access to, or one where you pin a hash locally at the point of consumption. Microsoft does not have strict third party code review policies interna
768.
by lrvick 1y ago
Yes, I make a decision when to be at my desk, and when I walk away I live in the real world. Turns out you do not need to be reachable or stay connected with the lives of far away people every second of every day.
769.
by lrvick 1y ago
Not had a smartphone in 5 years, and would never go back. I get lost sometimes and explore new areas, I enjoy concerts with my own eyes, I can wait to deal with work when I am back home and enjoy dinner with my family, and I am always prese
770.
by lrvick 1y ago
Not only have I been following a lot of the open models, you may find it surprising I have extensively tested some of them and coerced them to generate deterministic responses across different machines as a method to prove responses are not
771.
by lrvick 1y ago
A JR using an (open source, open weight, and locally hosted) LLM to learn a new well established well understood industry skill, I could tolerate if I can see they are clearly improving in ways I can easily validate when pairing and interac
772.
by lrvick 1y ago
When someone is able to demonstrate they are more efficient than me in my areas of research and expertise by utilizing an LLM, I will at least pay attention to their workflow and investigate ways to replicate it with FOSS tools I can host,
773.
by lrvick 1y ago
I am 25 years into my career at this point, and co-leading two companies, however I expect the same from people I work with and mentor. Vibe coders have no chance keeping up with me in doing things that have never been done before. Maybe so
774.
by lrvick 1y ago
I do not doubt that LLMs might some day be able to generate something like my work in stagex, but it would only be because someone trained one on my work and that of other people that insist on solving new problems by hand. Even then, I wou
775.
by lrvick 1y ago
Take this one for example https://codeberg.org/stagex/stagex/src/branch/main/src/compa... It took some iteration and hands on testing to get that right across multiple operating systems. Also t
776.
by lrvick 1y ago
AI would have been near useless when I was creating https://stagex.tools https://codeberg.org/stagex/stagex , for instance. Also I use VIM. Any FOSS tools with predictable deterministic behavior I can fully
777.
by lrvick 1y ago
I actually do not use any proprietary software of any kind in my work. Any tools I can not alter to my liking are not -my- tools and could be taken away from me or changed at any time.
778.
by lrvick 1y ago
No idea if it actually makes me smarter, but I have noticed I have an atypically high level of mental pain tolerance to pursue things many told me were impossible and quickly gave up on.
779.
by lrvick 1y ago
> The reality is that you will be unlikely to compete with people who use these tools effectively. If you looked me or my work up, I think you would likely feel embarrassed by this statement. I have a number of world firsts under my belt
780.
by lrvick 1y ago
Using an AI to think for me would be like going to a gym and paying a robot to lift weights for me. Like sure that is cool that is possible, but if I do not do the work myself I will not get stronger. Our brains are the same way. I also do

More ›