sfink

10 ms·

91.
by sfink 4mo ago
Probably because life is not a fairy tale? I'll be heavily projecting here, but: Health issues can be immensely stressful, and what is required to provide the best logistical and diagnostic support is very different from what is requir
92.
by sfink 4mo ago
Well done. Maybe this is spoiling the effect, but for people who don't recognize it instantly: > I've seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in th
93.
by sfink 5mo ago
Outside of the city cores in the US, homes are built as castles. We have large refrigerators and freezers so that we can amortize our trips to the grocery store by maintaining our own inventory. In my family, we plan the menu a week ahead o
94.
by sfink 5mo ago
> 1. there's a trade-off between graphics/sound quality and story complexity. The better quality your voiced dialogue is - the more you have to pay for every additional line - so you tend to shorten it. Same with graphics - it&
95.
by sfink 5mo ago
> Great minds discuss ideas; average minds discuss events; small minds discuss people. Heh. It's a believable taxonomy, but it makes me suspect it could often have the corollary: Small minds create work; average minds do work;
96.
by sfink 5mo ago
More likely they're already an AI/human hybrid, and that is just an innate part of their thinking process now.
97.
by sfink 5mo ago
Ironically, I have to edit out my "what I have tried so far" when asking questions, because I'm more likely to go into a long-winded explanation of the headers that I hacked and the kernel module I installed to fake my way ar
98.
by sfink 5mo ago
Good point, and I realize that's what I did in school. When people came to me that I suspected were just looking for easy answers to avoid doing the work themselves, I'd lead them gradually through the chain of reasoning. Like, po
99.
by sfink 5mo ago
> What are the numbers on how secure is human written code? We should have something to compare AI numbers to. That's kind of what the article is about? Mythos is finding lots of security bugs in lots of human-written code. They can
100.
by sfink 5mo ago
Some numbers, however shaky, that AI-written code is secure. It could become that way, but thus far no evidence has been presented for it. The best we have right now is that you can spend $20 in tokens to write a patch and then $20K to find
101.
by sfink 5mo ago
We already have it. In fact, Python added it with this change! Not intentionally, but in a world of AI, any error message containing a suggestion of what to do to fix it is a directive to the AI to actually do that thing. Example: to build
102.
by sfink 5mo ago
The safest answer a sales person can give is "yes". The safest answer an engineer can give is "no".
103.
by sfink 5mo ago
That's a fair point, given the restrictions on Mythos and now Opus 4.7. I'm kind of comparing apples and oranges. There are two things mixed together here. There is targeted scanning that was done by both Anthropic and Mozilla emp
104.
by sfink 5mo ago
You haven't needed to in quite a while. Well, assuming you're on desktop? I guess I've never tried it on mobile. That feels like asking for trouble. I ran Zoom in my Firefox desktop browser for a while, but it tended to overh
105.
by sfink 5mo ago
> It's still a lot of work to get fixes upstreamed from outside I'm going to disagree in the specific case of Firefox. First, although it has diverged a long way from its roots, Mozilla still has the community project ideal in
106.
by sfink 5mo ago
https://firefox-source-docs.mozilla.org/js/HazardAnalysis/in... though I really ought to update that page. It's for detecting a specific situation: you grab a pointer to a GC-managed object, call something th
107.
by sfink 5mo ago
More, many more. See the bug reports linked in the post. I checked a few, and all of them had an exploit in them, and there are definitely more than 1 bugs listed. Well, depending on how you define "exploit"; some might only read
108.
by sfink 5mo ago
The best general purpose one, anyway. Specialty tools can be much better for their niches. Heck, compiler warnings are one such niche tool, and some of them are quite good.
109.
by sfink 5mo ago
The raw number of things found by Claude (Opus or Mythos) was much higher and would be more comparable to a new clang warning. I vaguely remember seeing a number early on in this process that was in the mid-thousands. The 271 is a small, va
110.
by sfink 5mo ago
The report I saw kind of seemed to be pointing at a flaw and asking "do you see it?" which is not the same thing. I felt a pretty large difference between Opus 4.6's results and Mythos's, so I would be surprised if even
111.
by sfink 5mo ago
I've been thinking about this. Static analysis tools can also be much faster and most are fully deterministic, so including them in CI can catch bugs or latent bugs before they have a chance to land. I maintain a static analysis tool u
112.
by sfink 5mo ago
> But report [1] says that "Some of these bugs showed evidence of memory corruption...", which implies that majority of these (which includes 271 bugs from Mythos) don't have evidence at all. Do I not understand something?
113.
by sfink 5mo ago
At Mozilla, everything is called a bug. It's what other systems call an "issue". So it's too late for your terminology at Mozilla. (Example: I have a bug to improve the HTML output of my static analysis tool. There is no
114.
by sfink 5mo ago
You keep saying this, when it is counter to the actual text of the article. > Yet aside from the raw corruption, these incidents also raise a larger question....What broader damage does this kind of unchecked insider trading do? That is
115.
by sfink 5mo ago
I would phrase what you're saying differently. You can pay down cognitive debt by incrementally simplifying a system, or by throwing it out and rewriting. You're just describing the standard decision between rewriting or fixing in
116.
by sfink 5mo ago
I understand pretty well why this didn't work with the government. I'm curious how this worked out at X. I have the impression that not only did he break the system into pieces, he also just threw out many of the pieces. That&#x27
117.
by sfink 5mo ago
The children have long had sticks and stones, so why is everyone so freaked out now that they're all carrying around grenade launchers? What kind of math homework has been trivial to solve with a calculator? I guess you're referri
118.
by sfink 6mo ago
I think some of it is that "union" has a different meaning in the US vs (eg) the EU. US unions are explicitly adversarial and tend to use the strategy (usually associated with capitalism!) of optimizing for short-term union benefi
119.
by sfink 6mo ago
Nit: scientists have the same reasons to do so now, the same as ever. They just have additional reasons to not do so. But even that distinction is only temporary, since we're determined to piss away any remaining research lead that dra
120.
by sfink 6mo ago
I've only recently started using Claude Code, and I tried to be paranoid. I run it in a fairly restrictive firejail. It doesn't get to read everything in ~/.config, only the subdirectories I allow, since config files often ha

More ›