2026-08-20T03:58:30Z https://yabu.me jcoglan https://yabu.me/npub1tvltu2casmw0y4wuxus29nufl3pv8lge90z3x074v7f4wan4mv4qjucx46 https://files.mastodon.social/accounts/avatars/000/027/135/original/f6eb4ceba7166eeb.jpg https://files.mastodon.social/accounts/avatars/000/027/135/original/f6eb4ceba7166eeb.jpg https://yabu.me/nevent1qqsrjlvlgmuwqa0u6whasu2uaxc0wwyx9thzyvnx3zc96f020rxmpugzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj59q8z9l somehow I only recently learned that LLMs need the whole conversation fed back to them on each prompt so their i/o cost scales as O(n^2), something that would be considered completely unacceptable in almost any other production network-accessible software 2026-07-23T08:35:04Z https://yabu.me/nevent1qqszaec79zvl92f58e7a670l8f2yuunu2wgt9hc7fpr5x9jqfnc9p5gzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5n89e00 RE: <a href="https://mastodon.social/@jcoglan/116676362605359342">https://mastodon.social/@jcoglan/116676362605359342</a><br/><br/>btw this and my previous &#34;they want the hawking radiation without the black hole&#34; bit aren&#39;t metaphors. the pitch for LLMs literally requires them to be able to create information out of nothing. it is physically impossible that they work as advertised<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note15zwajnd35pfn0al2jxvsjlh3zsxe5tphvrmav6axmcq3kxrzaqvq2np6cu" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note15zw…p6cu</a></span><br/> </div> I'm hearing the perpetual motion machine costs a lot to run? huh </blockquote> 2026-06-01T19:01:25Z https://yabu.me/nevent1qqs2p8wefkc6q5eh7l4frxgf0mc3grv69smkpa7kdwnduqgmrp3wsxqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5wv33wn In reply to <a href='/nevent1qqsvlnf35k6zqmpfslrljgekpzkutdt43yawm06rl7s6djcwp4dz6xs7u2d7p'>nevent1q…2d7p</a><br/>_________________________<br/><br/>I&#39;m hearing the perpetual motion machine costs a lot to run? huh 2026-06-01T18:53:25Z https://yabu.me/nevent1qqsvlnf35k6zqmpfslrljgekpzkutdt43yawm06rl7s6djcwp4dz6xszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5u5wypf In reply to <a href='/nevent1qqszp25l738rmf0w424gts3ukmlv7ayuyfqdfrs8r04h7vcqtq8wrvqf2233l'>nevent1q…233l</a><br/>_________________________<br/><br/>you know what else can turn poorly defined specs into poorly written programs for the cost of a software developer salary 2026-06-01T18:51:18Z https://yabu.me/nevent1qqszp25l738rmf0w424gts3ukmlv7ayuyfqdfrs8r04h7vcqtq8wrvqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5n7xrz5 if only there was a way of telling a computer what to do that didn&#39;t require paying data centre landlords four figures a month 2026-06-01T18:49:45Z https://yabu.me/nevent1qqsz49mg8wm0x552lghdqvxnyx3mx2c5ughqt7jwlq0p0dhj37jhmjgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5sq8ye8 other random thing about llm driven rewrites is people are going to find out that a passing test suite is a much looser constraint on program behaviour than they think it is<br/><br/>people feel like test suites have high specification power because they break their tests easily. but this is because the tests check for deviations from the original implementation. they don&#39;t contain nearly enough information to faithfully generate the program from scratch 2026-05-17T08:38:30Z https://yabu.me/nevent1qqsrqc9h2044h6gdaz424zhwjhk0dmtnts7skwcjmfmk878pdrwsxzszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5x0tx6l RE: <a href="https://chaosfem.tw/@Athena/116579221010443932">https://chaosfem.tw/@Athena/116579221010443932</a><br/><br/>it feels like we as an industry need to have a think about why we even bother to make anything. stuff like memory safety and correctness only matter because of the effects that software has *on people*. if we decide we don&#39;t care about those effects when it suits us then what are we doing here<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note12tpjng8cksh85aj6egw6lk2d7r7zl3vrap43hsq6a7t9ynwyxfasdtl3jn" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note12tp…l3jn</a></span><br/> </div> cited as reason to allow LLM contributions experimentally:<br/><br/>> Instead of using ethical concerns as a basis for policy, we should justify policy on the basis of how something is impacting our ability as a project to deliver a really great programming language.<br/><br/>if the orphan grinder lets us make a better programming language then FIRE THOSE BABIES UP </blockquote> 2026-05-16T09:11:21Z https://yabu.me/nevent1qqsxzlyeszxezq6ppcum43dkmr7uygvwl7h4pzwu9dh79a0h8y9u0xqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5hu4f0g In reply to <a href='/nevent1qqsfrklumgtgnarh85m25h3r96444qgq52rq58wdptfrjkv256e956qlphmcu'>nevent1q…hmcu</a><br/>_________________________<br/><br/>you can argue the evidence on deskilling effects at the individual level but I think it&#39;s beyond doubt that this is happening at an institutional level 2026-04-27T10:05:38Z https://yabu.me/nevent1qqsfrklumgtgnarh85m25h3r96444qgq52rq58wdptfrjkv256e956qzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5m47k6s RE: <a href="https://mastodon.social/@hynek/116476031032569096">https://mastodon.social/@hynek/116476031032569096</a><br/><br/>this is what I mean when I say genAI has got people deciding to act stupid on purpose. things like &#34;prompt injection&#34; are just things we previously recognised as glaring categories errors, but suddenly we can&#39;t recognise very obviously terrible ideas because they&#39;re wrapped up in the bullshit machine<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1z8f3f4n7klury5lj588znjhkt66wt9x8uz2dfh4gukrt260qcxzq4jj475" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1z8f…j475</a></span><br/> </div> “begging stochastic systems to be good boys is not a security strategy” exhibit ♾️<br/><br/>What really grinds my gears is how a whole industry chose to forget the 101 of ops security. This is not an “AI" problem, this is gross negligence by cloud providers like Raleway pretending "having evals" is an acceptable defense against catastrophic data loss & users having production tokens of any kind lying around such that an attacker (or misguided agent) can find it.<br/><br/><a href="https://archive.ph/T3LU6">https://archive.ph/T3LU6</a> </blockquote> 2026-04-27T10:04:25Z https://yabu.me/nevent1qqsvarpshym6em9a4w38eg3cutf2pgn324lm0gw35lytghpkwph8qrczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5nftpaj you know you&#39;ve been computering for too long when you can recognise what this is<br/> <img src="https://files.mastodon.social/media_attachments/files/116/419/999/607/396/144/original/fa90771ea405deb7.png"> <br/> 2026-04-17T12:16:57Z https://yabu.me/nevent1qqspfqqxnfa53x7x78jqksldatmaywhu5md6c78j8tk6w0m4wmzzdjgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj50nf5ag RE: <a href="https://neuromatch.social/@jonny/116401934993867994">https://neuromatch.social/@jonny/116401934993867994</a><br/><br/>it&#39;s fun how genAI has people going &#34;well now architecture and code review are even more important&#34; and you look at the vendors&#39; own code and it shows no evidence of either<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1wryy0emlvuweequ7yamzwdmg5y9cerd74e69p93s08ntdzqslz6svqfnum" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1wry…fnum</a></span><br/> </div> What about the ways that claude code checks for whether KAIROS is enabled? well look no further than<li>getKairosActive() / <code>STATE.kairosActive</code> / <code>context.getAppState().kairosEnabled</code></li><li><code>kairosGate</code> / <code>kairosGate.isKairosEnabled()</code></li><li><code>isKairosCronEnabled()</code></li><li><code>options.assistant?</code> (and all variants of being passed whatever the caller's interpretation of active is)</li><li><code>assistantModule.isAssistantMode()</code></li><li><code>assistantModule.isAssistantForced()</code></li><li><code>isEnvTruthy(process.env.CLAUDE_CODE_PROACTIVE))</code></li><li><code>proactiveModule.isProactiveActive()</code> / <code>isProactiveActive_SAFE_TO_CALL_ANYWHERE()</code></li><li><code>getAllowedChannels().length &gt; 0</code></li><li><em>literally whether some arbitrary chunk of input text has <code>&lt;TICK&gt;</code> in it</em></li><br/><br/>these are all orthogonal to each other. I grouped generously. I tried to filter for only the checks that were annotated as being for whether we were doing a kairos/assistant/persistant rather than whether any subfeatures of that are enabled. </blockquote> 2026-04-14T07:45:28Z https://yabu.me/nevent1qqsrkay8k7urxhhk4m0plgqefs3gaduwnq3ssgv6gngsx4vgc3x84sczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5jfjh4q RE: <a href="https://thepit.social/@peter/116376227720432462">https://thepit.social/@peter/116376227720432462</a><br/><br/>this is about where I am, it&#39;s like a ton of people decided to forget how anything works and become helpless on purpose<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1y0xn4lcn7aw74ne8sv73m3eywplqm7edavg75885vc0umnlv942s6l7vzt" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1y0x…7vzt</a></span><br/> </div> feels like the worst time to be alive if you are the kind of person who is passionate about learning to do things the right way. </blockquote> 2026-04-10T07:44:05Z https://yabu.me/nevent1qqs9ed9mka5rdvumysvskz46t4k6yt43yulhxtklst2wap5mepn668qzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5h064uv reminder that until the end of april I&#39;m offering 50% off &#34;building git&#34; using voucher code BGAPR2026 <a href="https://shop.jcoglan.com/building-git/">https://shop.jcoglan.com/building-git/</a> 2026-04-09T12:06:47Z https://yabu.me/nevent1qqsz30f6pklherjf5mtc30krjtgzsjmq7wvq48ann8cw3qzuyrkhrsgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5g7f3vy In reply to <a href='/nevent1qqsty6xy54eetuxpef2y96s9tdtz2sxx63vhm8hu7qen30rekehhxfc6fkwj5'>nevent1q…kwj5</a><br/>_________________________<br/><br/>everyone I have ever worked with is leagues better at writing code than this, what are we doing here 2026-04-02T08:44:31Z https://yabu.me/nevent1qqsty6xy54eetuxpef2y96s9tdtz2sxx63vhm8hu7qen30rekehhxfczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5tqaxsp In reply to <a href='/nevent1qqs20jrtrkgcj2k75u2g9lqpzhwtwxhvu56vq9m4jg86avp4daphftgv9fcwq'>nevent1q…fcwq</a><br/>_________________________<br/><br/>having seen this, it&#39;s not at all surprising that the software is as slow as it is, that its output is as bad as it is, or that it costs so much to run. this is not work you produce if you have thought about how anything should work for more than 5 minutes 2026-04-02T08:38:42Z https://yabu.me/nevent1qqs20jrtrkgcj2k75u2g9lqpzhwtwxhvu56vq9m4jg86avp4daphftgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5u26a4e In reply to <a href='/nevent1qqsxnynwjp039ejhgyzc380v430r8x4fzlykn5ff35caan0urc805vqmej4j8'>nevent1q…j4j8</a><br/>_________________________<br/><br/>I&#39;m actually pleased I&#39;ve spent several years very slowly writing a small program by actually learning a lot about what it needs to do and thinking about its design and painstakingly validating it. it beats the pants off putting my name on this garbage 2026-04-02T08:32:49Z https://yabu.me/nevent1qqsxnynwjp039ejhgyzc380v430r8x4fzlykn5ff35caan0urc805vqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5vp3pfs In reply to <a href='/nevent1qqst696uyzf2xxaj93qtzu5ccey9pvvpp0st4ntf6hytpyd27htlp0s4pgykn'>nevent1q…gykn</a><br/>_________________________<br/><br/>the idea that I, a pretty capable computer programmer, should pay *four years of my life* to people who make 10x as much money as me to ship the worst dreck I have ever laid eyes on, is just profoundly insulting, on top of all the other harm this shit causes 2026-04-02T08:29:16Z https://yabu.me/nevent1qqst696uyzf2xxaj93qtzu5ccey9pvvpp0st4ntf6hytpyd27htlp0szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj52xhgzt In reply to <a href='/nevent1qqstcf5kmwn5ls5adfxzxr6he2fpuvp66mllwxct79zdhlc9ad6lrxqyhe08z'>nevent1q…e08z</a><br/>_________________________<br/><br/>apologies to anyone who already read me saying this on bsky but: for the price of claude code, I could pay off my mortgage 3-4 years earlier. so as a notional labour saving device, it is competing with &#34;four years of additional uninterupted leisure time&#34;, which I would say is a pretty high bar to clear 2026-04-02T08:27:43Z https://yabu.me/nevent1qqstcf5kmwn5ls5adfxzxr6he2fpuvp66mllwxct79zdhlc9ad6lrxqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5j55mjc In reply to <a href='/nevent1qqsprf00vdx6nh60r8r29yrs0wvg3h0rtdh2ga4r3ctl4lyjy304fsg7twxke'>nevent1q…wxke</a><br/>_________________________<br/><br/>two hundred dollars per calendar month 2026-04-02T08:23:02Z https://yabu.me/nevent1qqsprf00vdx6nh60r8r29yrs0wvg3h0rtdh2ga4r3ctl4lyjy304fsgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5nl9lak RE: <a href="https://neuromatch.social/@jonny/116331940556649057">https://neuromatch.social/@jonny/116331940556649057</a><br/><br/>this whole thread is incredible but I am absolutely screaming at \u2014<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1hyjfn78k2f02ueswm8udndr9p5xup6lxuhz87p4mh0d2rx0f0l9sgq9hhy" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1hyj…9hhy</a></span><br/> </div> The prompt strings have an odd narrative/narrator structure. It sort of reminds me of Bakhtin's discussion of polyphony and narrator in Dostoevsky - there is no omniscient narrator, no author-constructed reality. narration is always embedded within the voice and subjectivity of the character. this is also literally true since the LLM is writing the code and the prompts that are then used to write code and prompts at runtime.<br/><br/>They also read a bit like a Philip K Dick story, paranoid and suspicious, constantly uncertain about the status of one's own and others identities.<br/> <img src="https://media.neuromatch.social/media_attachments/files/116/331/937/862/449/353/original/332acb18ec04e96d.png"> <br/> </blockquote> 2026-04-02T08:21:10Z https://yabu.me/nevent1qqsyqrdu222lzuuqer33m2vc7xpk8zt4dcqrp2rxqsxgjxtnq6fqawqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj54ukh2q github has been an art project to demonstrate the need for asynchronous distributed replication. thank for your attention to this matter 2026-04-01T10:00:30Z https://yabu.me/nevent1qqsxarswhvwz3x86fjyv46lzrycxu2jkl2n8mk29gndtde28efh3kuczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5xk3gtx from now until the end of april, I&#39;m running a 50% discount on my book &#34;building git&#34;, just enter voucher code BGAPR2026 <a href="https://shop.jcoglan.com/building-git/">https://shop.jcoglan.com/building-git/</a> 2026-03-27T12:02:07Z https://yabu.me/nevent1qqsgs3lpf6mgh0a20hjx74wzrpw7mes7gwzkgp8ha4sxqfkmk7wak4czypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5zzu7e9 got a fun reply yesterday that was like &#34;yeah I can&#39;t believe people are taking such a lax approach to verifying the behaviour of software especially if they use LLMs. we never would have done this when I worked at &lt;well known arms manufacturer&gt;&#34; 2026-03-15T12:00:27Z https://yabu.me/nevent1qqspx9urqyc5unnrkjeyq0gskcy2lvtw0fef6nf2vfsj8ygrrnnpzxgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5r8mhtw RE: <a href="https://lingo.lol/@thedansimonson/116156498254821672">https://lingo.lol/@thedansimonson/116156498254821672</a><br/><br/>this is also why LLMs are not &#34;another layer of abstraction&#34;. do you need to read the asm output of your compiler every time it runs? no, and having to do so would substantially reduce the value of said compiler<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1jg8ll3plc82smdvl8rs802pmvjez6aqn5azp2khndegnvmtsevjsu8ahut" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1jg8…ahut</a></span><br/> </div> RE: <a href="https://mastodon.social/@mcc/116155634003044785">https://mastodon.social/@mcc/116155634003044785</a><br/><br/>this something I don't think anyone's really talked about -- not specifically that AI systems are stochastic, but that when juxtaposed with traditional software, where data is static and object-permanent, it's something fundamentally different. <br/><br/>A lot of the marketing falls apart when you realize they're doing a rhetorical slight of hand where they act like the probabilistic text generator is just "more software."<br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1n7ez5x8u5h3lspq62m9lysm56mkxf50mjvc5yh6p3k0hpe7nfg2s3dsxgh" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1n7e…sxgh</a></span><br/> </blockquote> 2026-03-01T23:45:21Z https://yabu.me/nevent1qqsphhepq45ryh5xkqzfa30n4jkylft80y64amusnl9wlamlwms43fszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj577nfrp In reply to <a href='/nevent1qqsr3kdmj8hv7ltw69egvr88e6dsk429g0w9qgsadh7h04lwry2p37sxe69mr'>nevent1q…69mr</a><br/>_________________________<br/><br/>also alarmed to learn from this paper that lastpass is the most popular third party password manager when it has been breached multiple times and does not use authenticated encryption *whatsoever* 2026-02-26T10:47:57Z https://yabu.me/nevent1qqsr3kdmj8hv7ltw69egvr88e6dsk429g0w9qgsadh7h04lwry2p37szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5slvs3q In reply to <a href='/nevent1qqsq4m8z28s8sz6kdp2z2vdd6hqhufrz06svgq6femkxdykkaqef0rcs392vg'>nevent1q…92vg</a><br/>_________________________<br/><br/>unauthenticated aes-cbc in 2026 dog 2026-02-26T00:16:17Z https://yabu.me/nevent1qqsq4m8z28s8sz6kdp2z2vdd6hqhufrz06svgq6femkxdykkaqef0rczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5r6wyar In reply to <a href='/nevent1qqs0mqzadq5nj5px528rwsght4tl4tmwh4zdq4vlcc0zgk8mcgedvegvg6zdq'>nevent1q…6zdq</a><br/>_________________________<br/><br/>why is your password manager sending any plaintexts of any kind to anywhere, least of all the server it claims you don&#39;t need to trust because of e2ee/&#34;zero knowledge&#34;. what are we doing here 2026-02-26T00:15:00Z https://yabu.me/nevent1qqs0mqzadq5nj5px528rwsght4tl4tmwh4zdq4vlcc0zgk8mcgedvegzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj566q3av In reply to <a href='/nevent1qqsz4lvwr6cq5ugj5c6srt8vtzl3hlpxkpe0mlmxn8cjw4qs7p8n78cg7jzg0'>nevent1q…jzg0</a><br/>_________________________<br/><br/>I am just learning that bitwarden and lastpass both decrypt a field they assume is a URL (but which is not authenticated or bound to the relevant field in any way) and then send the result of this decryption TO THE SERVER<br/><br/>why yes the server can abuse this to decrypt passwords 2026-02-26T00:12:40Z https://yabu.me/nevent1qqsz4lvwr6cq5ugj5c6srt8vtzl3hlpxkpe0mlmxn8cjw4qs7p8n78czypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5k20wy2 In reply to <a href='/nevent1qqs2q7t54qj5y82g7vznlul3w0q8ahj9n74t8s5gqm8q3qnh4qhgg7g5e3srn'>nevent1q…3srn</a><br/>_________________________<br/><br/>please, my deputy, it&#39;s very confused 2026-02-26T00:09:59Z https://yabu.me/nevent1qqs2q7t54qj5y82g7vznlul3w0q8ahj9n74t8s5gqm8q3qnh4qhgg7gzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj52s2aqn In reply to <a href='/nevent1qqsfy0w9gzkyz5042vwtfg82u95kdw722s4lqjqs8fs90pvutp97ltgtkmgur'>nevent1q…mgur</a><br/>_________________________<br/><br/>incredibly loud incorrect buzzer<br/> <img src="https://files.mastodon.social/media_attachments/files/116/133/813/710/580/688/original/12ed077e73d04c3e.png"> <br/> 2026-02-25T23:16:25Z https://yabu.me/nevent1qqsfy0w9gzkyz5042vwtfg82u95kdw722s4lqjqs8fs90pvutp97ltgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5ey8chm In reply to <a href='/nevent1qqs8dvcgpv4j96hn5cywmnwfjuumx4dg6fkx9ez9q5tgk6pcqne24gqnqpj0j'>nevent1q…pj0j</a><br/>_________________________<br/><br/>my train journey is over so I will need to finish reading later but oh my<br/> <img src="https://files.mastodon.social/media_attachments/files/116/132/347/687/594/977/original/6e8889f3dbabd5f7.png"> <br/> 2026-02-25T17:03:53Z https://yabu.me/nevent1qqs8dvcgpv4j96hn5cywmnwfjuumx4dg6fkx9ez9q5tgk6pcqne24gqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5jqxam7 In reply to <a href='/nevent1qqspmjsrp83g200lj9myh75res6vrpjjlgz5fakleq7tjjq5ke2fyhqma2yjz'>nevent1q…2yjz</a><br/>_________________________<br/><br/>these are basically the security goals for escodb, c.f. <a href="https://escodb.github.io/docs/crypto/goals.html">https://escodb.github.io/docs/crypto/goals.html</a><br/> <img src="https://files.mastodon.social/media_attachments/files/116/132/215/474/952/720/original/d678d1e30366ff22.png"> <br/> 2026-02-25T16:30:51Z https://yabu.me/nevent1qqspmjsrp83g200lj9myh75res6vrpjjlgz5fakleq7tjjq5ke2fyhqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5npuapp In reply to <a href='/nevent1qqsvarhu96xysd297vslazpaqtzgl7fzsksr427gpre6px9rt2fnl8cznck8n'>nevent1q…ck8n</a><br/>_________________________<br/><br/><a href="https://brokencloudstorage.info/">https://brokencloudstorage.info/</a> was 2 years ago and I just assumed this had already been done for password managers, and general purpose storage was more complex. nope, password managers have exactly the same problems 2026-02-25T15:57:12Z https://yabu.me/nevent1qqsvarhu96xysd297vslazpaqtzgl7fzsksr427gpre6px9rt2fnl8czypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5vs4rft RE: <a href="https://furry.engineer/@soatok/116132036314035223">https://furry.engineer/@soatok/116132036314035223</a><br/><br/>it is astonishing to me that this (i.e. security under an untrusted server) is novel research to these systems. ever since I started developing vault (2012) my model has been: I want to sync my secrets with dropbox, and I do not trust dropbox either not to look at my data or to preserve its integrity. these are ideas you would get from any basic introduction to cryptography<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1szeast5eaxdx6yskmkc442m8w0xz4pqj6mwek297lc2amqnez40stknrvl" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1sze…nrvl</a></span><br/> </div> <a href="https://eprint.iacr.org/2026/058">https://eprint.iacr.org/2026/058</a> <br/><br/>Wow </blockquote> 2026-02-25T15:52:58Z https://yabu.me/nevent1qqs0zqja7tr9vpn4t5w9ej7wdg9jafhpdur9gm9ra5mqtlusrlpeerszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5nukdn2 RE: <a href="https://furry.engineer/@soatok/116092111810620052">https://furry.engineer/@soatok/116092111810620052</a><br/><br/>&#34;Two popular AES libraries, aes-js and pyaes, “helpfully” provide a default IV in their AES-CTR API&#34; nope. nope nope nope<br/><br/>this isn&#39;t a &#34;this is suboptimal&#34; problem this is a &#34;the encryption is completely pointless&#34; problem<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1r8n6dj9g5jgq85ee6kzrwqahhrkjhnnxatkgutftxkjywyfxejls47zuxs" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1r8n…zuxs</a></span><br/> </div> Oof. Big oof.<br/><br/><a href="https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/">https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/</a> </blockquote> 2026-02-18T14:37:55Z https://yabu.me/nevent1qqsxfnwwgf88c49w4uv5d5j29e9v9yfyug7ackq99yy6l0vmuyh584qzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5clwlfl &#34;no, dude, your opinion on genAI is ill informed unless you&#39;ve used &lt;literally the last genAI system I tried using&gt;&#34; (highlighting is the author&#39;s)<br/> <img src="https://files.mastodon.social/media_attachments/files/116/080/280/839/141/971/original/ab08899e315c38aa.png"> <br/> 2026-02-16T12:22:12Z https://yabu.me/nevent1qqsgtg3c3gjk4pthd79tm0xfmpx0s95glzysee7fl4hnrecdanlu3dqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5nlst50 In reply to <a href='/nevent1qqsv5ymf7p7qz6l99utvfu5ll896wv4ddst4h8axyn76drq7wh2vttc7d5dqf'>nevent1q…5dqf</a><br/>_________________________<br/><br/>this is part of my aesthetic objection to LLMs -- they&#39;re just so profoundly inelegant. they represent a staggering amount of brute force in terms of time, information and material resources to solve problems that people *and computers* can address much more efficiently. they&#39;re a kind of anti-computing 2026-01-07T11:03:30Z https://yabu.me/nevent1qqsv5ymf7p7qz6l99utvfu5ll896wv4ddst4h8axyn76drq7wh2vttczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5tyr9j0 In reply to <a href='/nevent1qqs86hcycv8m2dlaj0f4hynypuq43j5aw48a673aty0ut7hkzp006mgpmrj7x'>nevent1q…rj7x</a><br/>_________________________<br/><br/>their working processes look a lot more like constrained/guided fuzzing and look nothing like the working process of a person who is learning and *retaining* understanding the problem they&#39;re working on. they keep repeating mistakes and attempted solutions unless explicitly instructed to try something else, whereas a person can synthesize new approaches of their own accord 2026-01-07T11:00:49Z https://yabu.me/nevent1qqs86hcycv8m2dlaj0f4hynypuq43j5aw48a673aty0ut7hkzp006mgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5jul9m3 I don&#39;t even think it requires much philosophical depth to determine LLMs do not engage in what people call &#34;learning&#34;. people do not learn by ingesting all the information the world and then summoning fragments of that corpus. people generalise from small amounts of information and I&#39;ve seen no evidence an LLM can do this <a href="https://mastodon.social/@glyph/115853436488885738">https://mastodon.social/@glyph/115853436488885738</a><br/>nostr:note16gnpmpfuve4g5qegh3zuhcvhf8hny02xqwuw2vtfpzzun8eg026qxnfc9q<br/> 2026-01-07T10:59:16Z https://yabu.me/nevent1qqsqcj0je5clqzqv3lkw2m9j7kvqyr4tnfy9xw5dxt5arm99mmq9zcqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5zus95r In reply to <a href='/nevent1qqs28wnv9g2r0l83nj0axs9l9jy0ftnmfzkgfqwlpf2reyvpnyezt3s2vlqrf'>nevent1q…lqrf</a><br/>_________________________<br/><br/>so you can exploit bluetooth to hijack call control on headphones and use that to take over a whatsapp account<br/><br/>from there you hijack amazon, which offers whatsapp as an auth channel<br/><br/>great demo of why all this big tech platforms using one another as auth channels was a terrible idea 2025-12-29T21:26:15Z https://yabu.me/nevent1qqs28wnv9g2r0l83nj0axs9l9jy0ftnmfzkgfqwlpf2reyvpnyezt3szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5kdzjaa In reply to <a href='/nevent1qqsw46gg5467q4uf8l3fyamvem9etksv0n0ngun9c9qe5gf2jdqhugss76gkt'>nevent1q…6gkt</a><br/>_________________________<br/><br/>bluetooth lets you read/write arbitrary device memory?! <a href="https://www.youtube.com/watch?v=TK5Tz4Bt94Y">https://www.youtube.com/watch?v=TK5Tz4Bt94Y</a> 2025-12-29T21:06:04Z https://yabu.me/nevent1qqsw46gg5467q4uf8l3fyamvem9etksv0n0ngun9c9qe5gf2jdqhugszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5un73fx In reply to <a href='/nevent1qqsyqx8kz2ksmp4tcwwynlejrlstvzna6haas302y3dx6f3hnjyzghgu9vtzc'>nevent1q…vtzc</a><br/>_________________________<br/><br/>talk: so the bluetooth frame includes a flag to say if it&#39;s a firmware update<br/><br/>me: I see 2025-12-29T21:04:58Z https://yabu.me/nevent1qqsyqx8kz2ksmp4tcwwynlejrlstvzna6haas302y3dx6f3hnjyzghgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj54ddt9f amazing how many talks at c3, defcon et al boil down to &#34;we looked at the protocol format and it&#39;s as though nobody ever thought to do this before&#34; 2025-12-29T21:03:46Z https://yabu.me/nevent1qqsx98zxjsur6y80yv59s3afj5le2cqk4sgsp3tqgdj6hex8xt93kdszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5xvplkr shouts out to the nist cve api for having a query parameter in a format that absolutely no http library will emit, basically forcing you to hand-serialise a url 2025-12-16T14:23:09Z https://yabu.me/nevent1qqs08mhyrhcvj7kphfc0sdj0mfsfvevxaj5q3z46ujdcxek88cw8h0czypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj52gft3l In reply to <a href='/nevent1qqsgsmzgctxka5qsc76xeup9hwsutx3fh70vcepgs8tk28zva3c8hwsq8xuc3'>nevent1q…xuc3</a><br/>_________________________<br/><br/>&#34;democratise&#34; always means &#34;monopolise&#34; when these guys say it 2025-10-28T22:54:33Z https://yabu.me/nevent1qqs8sju7phtlf0j8a40hffwzsp78qwtzln0q35598alagv35mhlxlcgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj50yyf5h the thing about genAI tells is it&#39;s not about the obvious mistakes. it&#39;s the font and line art and colour palette on local shops&#39; halloween posters. it&#39;s the general nightmarish body horror of right wingers&#39; video clips. it&#39;s reading a blog post and realising it&#39;s just not conveying any information 2025-10-23T12:05:09Z https://yabu.me/nevent1qqsvsuve7s7urlf4ldye77mtdx8p00kr9qu2q8j3906rwrev6e0y58szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj50es752 ruby central has had two weeks to explain what has gone on here and all we have had is a few scraps of corporate-social-responsibility-speak that doesn&#39;t justify any of their actions or meaningfully refute any of the complaints levelled at them 2025-10-01T17:08:04Z https://yabu.me/nevent1qqswfcxhk64kn8auacnj2c5gu6q7a2zrhkj242tznkdpfklplw66elgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj59ue6g9 it is past time for the rails project and community to sever ties with dhh 2025-09-16T06:00:53Z https://yabu.me/nevent1qqswsa9skrdfqaymw4e2c67kd42h676lne026jjqn9h7kwc9qv50a6szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj59k2yj6 rust is a language in which you can borrow a cow 2025-08-24T23:05:45Z https://yabu.me/nevent1qqsp29cr9et94vn378alhfeeppsre0cdttuu8r3rp4sn80sz3d3gp2qzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj56pqysa idk what is going to stop this government&#39;s awful direction but the least that needs to happen is MPs hearing from cis people that this campaign of transphobia being waged by them and the EHRC, supposedly for our benefit, is not actually something we want, and that it is hurting our friends 2025-08-09T10:59:58Z https://yabu.me/nevent1qqstmjm7vsufrk0j69qky3s2mf5y4klmf2pl004fjekl2anrayr07ygzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5zjnqyr the median website can&#39;t keep passwords safe, and the blast radius of a site-specific password is, well, just that site. the blast radius of having your driving license or passport stolen is, quite a bit bigger than that 2025-07-29T12:40:28Z https://yabu.me/nevent1qqsfnfa8rumkejtafyxt9wueafmnsxzskfc7dxm2cw7ccgm6hff9z7szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5k8mfsp my map of blue prince has gotten so large it can only be read with a magnifying glass 2025-06-28T16:43:39Z https://yabu.me/nevent1qqsqj2lclhz9vgvc7q46659n48w8svcx3k2szymmc5c6awud3fkc5tczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj53u7s73 In reply to <a href='/nevent1qqspps0prufrm5hmrtw42dxa9kfhuddv8m36ftzxd8hffu3jzm0ltngtdl9v8'>nevent1q…l9v8</a><br/>_________________________<br/><br/>years of insisting that volunteers owe things to huge companies that aren&#39;t paying them has, empirically, not worked out, you need to try a second idea 2025-06-22T17:51:30Z https://yabu.me/nevent1qqspps0prufrm5hmrtw42dxa9kfhuddv8m36ftzxd8hffu3jzm0ltngzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5kfsxn6 we have got to stop talking about open source software this way man. someone who published work with an explicit label on it saying &#34;this comes with absolutely no warranty&#34; and is not being compensated is not part of a &#34;supply chain&#34; <a href="https://abyssdomain.expert/@filippo/114723318068853623">https://abyssdomain.expert/@filippo/114723318068853623</a> 2025-06-22T17:50:39Z https://yabu.me/nevent1qqswvjzfs49fy7072xdqxv9l8z7ed3p40wt48lm5qe4qtwsp6pcew5gzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5rj88kj In reply to <a href='/nevent1qqspmhmj3d7jx09tn2z4umks0a9hmvmplmp54e4xvuq2y599cthdutg3h82ut'>nevent1q…82ut</a><br/>_________________________<br/><br/>relying on the listener to fill in the blanks of what words mean allows openai to make extremely broad claims that they never have to back up with evidence, and which cannot meaningfully be refuted 2025-06-12T18:44:04Z https://yabu.me/nevent1qqspmhmj3d7jx09tn2z4umks0a9hmvmplmp54e4xvuq2y599cthdutgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj560hdyq In reply to <a href='/nevent1qqs96w22vl74s3h6scwrs7ztde0fp8ykal6q0wjx3scxwdvf4uxck7q9xwd8n'>nevent1q…wd8n</a><br/>_________________________<br/><br/>I&#39;m especially not obliged to do this when the lack of a definitive meaning of these words is actually part of the sales pitch. that is, the broad and fuzzy popular understanding of these words lets openai assert their product can replace anyone whose job is to think 2025-06-12T18:41:19Z https://yabu.me/nevent1qqs96w22vl74s3h6scwrs7ztde0fp8ykal6q0wjx3scxwdvf4uxck7qzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5fdlmjk In reply to <a href='/nevent1qqsq2x4w34pzakv3a4e0jsynakjcpfvzgu5ywjlw9jqe3uymhtexxtcwhyuyr'>nevent1q…yuyr</a><br/>_________________________<br/><br/>I&#39;m not actually obliged to refute a claim that doesn&#39;t mean anything on account of its terms not being defined 2025-06-12T18:25:00Z https://yabu.me/nevent1qqsq2x4w34pzakv3a4e0jsynakjcpfvzgu5ywjlw9jqe3uymhtexxtczypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5ujv5h2 In reply to <a href='/nevent1qqsf9ryzcf8qkzvdt7je3pu5s99a7s236gacpqw7n3sr7fk0a7ugt0gyyjwht'>nevent1q…jwht</a><br/>_________________________<br/><br/>I think the people making the positive claim should be obliged to defend it rather than letting everyone fill in the blanks in their definitions until their claims feel true 2025-06-12T18:24:10Z https://yabu.me/nevent1qqsgegwzpnl8ktmz2nlr88nayfsg0cld3e6dnukhqd0my5lc096c30szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj53v4xjc In reply to <a href='/nevent1qqsqa4eytl9yygt4v2ustxjrf7vye3hegp4w3u2syysymt8uxjrgtrq33dcfx'>nevent1q…dcfx</a><br/>_________________________<br/><br/>you do actually need to define words if you&#39;re going to make grandiose claims like &#34;the computer can think&#34; I&#39;m afraid 2025-06-12T18:16:30Z https://yabu.me/nevent1qqsqa4eytl9yygt4v2ustxjrf7vye3hegp4w3u2syysymt8uxjrgtrqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj567uc7v openai using the words &#34;reasoning&#34;, &#34;thinking&#34; and &#34;thoughts&#34; in their description of their own product is not evidence that it does those things 2025-06-12T18:14:31Z https://yabu.me/nevent1qqstrkj49qgt593lh4grg2j0xw7hy659ry40vu8qaavrd49ack9maeqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5u5s3l9 In reply to <a href='/nevent1qqsf2wf54mn3qutvkqmnk3u3ghtdxkyvejfwspxqv0xaqdawqltrddswdl49p'>nevent1q…l49p</a><br/>_________________________<br/><br/>and yeah there are channels where the actual makers will see more of that money than others, so choose carefully. but &#34;stop paying anybody for anything&#34; ain&#39;t it 2025-06-05T09:48:13Z https://yabu.me/nevent1qqsf2wf54mn3qutvkqmnk3u3ghtdxkyvejfwspxqv0xaqdawqltrddszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5pymf73 In reply to <a href='/nevent1qqsz0uam5zh7c72zc3fl650t3gv9sganrgy2yjuhc5ct2q2np528axqz4msxx'>nevent1q…msxx</a><br/>_________________________<br/><br/>with the world arranged as it currently is, the only people that will hurt are the people that make things. you do actually need to pay artists for their work 2025-06-05T09:47:26Z https://yabu.me/nevent1qqste5cxea35sauksr9q6s64tyzg26sezam8squjm6wp9z29j0upjxqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5wfgej2 In reply to <a href='/nevent1qqs0ztu0z5m7pxs4ce0q8kwlelh98fyjv980lcuh00es8ypgz9a6gxg6c9p2f'>nevent1q…9p2f</a><br/>_________________________<br/><br/>*however* what we are currently seeing is IP being dismantled asymmetrically in favour of the wealthy. we cannot have a situation where big tech is allowed to ignore IP while people are serving prison sentences at nintendo&#39;s behest 2025-06-05T09:08:07Z https://yabu.me/nevent1qqs0ztu0z5m7pxs4ce0q8kwlelh98fyjv980lcuh00es8ypgz9a6gxgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5n44czd thing is, I&#39;m not even opposed to dismantling IP as a concept, and I&#39;m not wild about wielding it to oppose AI, because the same argument is used to shut down the internet archive 2025-06-05T09:06:02Z https://yabu.me/nevent1qqs8tujg43t0fu208ecpyge489k4zknmrgy74ntzkmh43z46677arqqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5944m2s the issues with the ptacek article are not just questions of tone. its actual content and arguments are lousy, they&#39;re just dressed up in the sort of bluster that makes people go &#34;huh good point&#34; without thinking very hard 2025-06-04T14:53:58Z https://yabu.me/nevent1qqsxp80f5cqlw3e7485ad3xckg9e6zk3c9ls5wfgc3z8hvxsfs8cu4gzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj54kfgxp In reply to <a href='/nevent1qqs0yqs2npk7edyymv4pzle0rclld93pc2us4sesd3ut9vs7kkgj8dsxpmpkh'>nevent1q…mpkh</a><br/>_________________________<br/><br/>I&#39;m hearing &#34;what&#39;s the alternative&#34; a lot recently and if I took that attitude to very many things I would have to stop believing in anything 2025-06-03T19:25:34Z https://yabu.me/nevent1qqsw769nf03058y8gpx03r0x4qdcfh8tpn8q26e2xzdn3hc7rzeyx6qzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5r47s7n zooming out a little bit, it does feel alarming to me that a lot of people whose stated politics are progressive or socialist or both are willing to give huge tech companies an easy ride for fully seizing the means of production for everyone, no matter where you personally work 2025-06-03T19:16:04Z https://yabu.me/nevent1qqsxmj9eca4jfrxjv66u4eupnrkduf2zzmtjdxedtly3yrdgu4hx3wqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5ajc42p In reply to <a href='/nevent1qqsqvfl6f66h9rhcqeh49lf5ee8htdhzvpehd06kuaxveqvpslmh9pq4u894r'>nevent1q…894r</a><br/>_________________________<br/><br/>it&#39;s baffling people are praising this and saying it represents their position well. it is a rant, it is not persuasive writing, it is not well argued, it does not demonstrate its claims, it just bashes the author&#39;s opponents as either stupid or nefarious. it is &#34;own the libs&#34; rhetoric 2025-06-03T07:28:15Z https://yabu.me/nevent1qqsqvfl6f66h9rhcqeh49lf5ee8htdhzvpehd06kuaxveqvpslmh9pqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5dn7tfw In reply to <a href='/nevent1qqsw6c9ehrcq7xjcz2x5dkc9zmlqdln9tajfd8taj2sfaz7aalj4j8snpq0gh'>nevent1q…q0gh</a><br/>_________________________<br/><br/>if you&#39;re going to lean in to the &#34;oh wow everyone is big mad about me calling them stupid in my clickbait poorly argued blog post&#34; this makes it look *more* like you&#39;re talking in bad faith, you understand that right 2025-06-03T07:16:17Z https://yabu.me/nevent1qqsw6c9ehrcq7xjcz2x5dkc9zmlqdln9tajfd8taj2sfaz7aalj4j8szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5tr7jjn &#34;wow I can&#39;t believe my friends don&#39;t like AI, they sure are big dum dums! AI is self evidently life changing&#34;<br/><br/>so uh can you show us an example<br/><br/>&#34;no&#34;<br/><br/>alright well being berated as an idiot has made me lose respect for you <br/><br/>&#34;here come the haters and losers&#34; 2025-06-03T07:16:02Z https://yabu.me/nevent1qqsy89y7av7axx75dryyeqtp29ttj6n3ejmhlyg430s8pg47rqqna3szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5e6mw4n LLMs turn your job into mostly code review, a task everyone famously loves to do and is good at 2025-06-01T19:38:32Z https://yabu.me/nevent1qqs8xg7l6gezptpn3gytwvm9deq5rnl54j90z02qtyxze7myk8gnsjgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5gdhpkc a system that looks like github mcp should set off alarm bells even without untrusted input; I wouldn&#39;t tell an LLM agent with access to all my source code to go and scan a big corpus for instructions even if I wrote the entire corpus myself, simply b/c I do not know what effect that would have 2025-05-27T07:30:15Z https://yabu.me/nevent1qqs9vrtxwa0ahnuq50c6xvjxl7xspyrda5ys4cgchenht5z0mg3rf7szypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj57zwzp6 In reply to <a href='/nevent1qqsxxn5pgzlenq8t0clk6a76auz39phw79vuhl600u59a4xttuxuweghut4k0'>nevent1q…t4k0</a><br/>_________________________<br/><br/>you cannot have an &#34;injection attack&#34; in a system with no formal distinction between data and instructions. what you actually have is an &#34;everything is instructions&#34; model and a failure to isolate untrusted inputs from the elevated privilege of access to private information 2025-05-27T07:12:28Z https://yabu.me/nevent1qqsxxn5pgzlenq8t0clk6a76auz39phw79vuhl600u59a4xttuxuwegzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5kawtwv if I have to hear the term &#34;prompt injection&#34; one more time 2025-05-27T07:04:22Z https://yabu.me/nevent1qqswq320jn09tzmxn0ryagczxdrj9drs8fat09awr0jlq6qwxkksahszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5c50hz9 it&#39;s encouraging that the author has recognised this process in his own mind and might be able to slow its advance but good lord is this a depressing paragraph <a href="https://dcurt.is/thinking">https://dcurt.is/thinking</a><br/> <img src="https://files.mastodon.social/media_attachments/files/114/523/475/756/531/003/original/bae15d922f8def6f.png"> <br/> 2025-05-17T13:47:13Z https://yabu.me/nevent1qqsfj743n75tj7axxcq9uspwdrjnqkshmsmmv7eswugp8tdm4sc0f0czypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj59vspra this pixelfed bug really feels like a design problem at the protocol level to me; it requires way too much unearned trust to expect a network of programs that are highly decoupled and barely trust each other to enforce one another&#39;s access controls, especially on the level of individual posts 2025-03-26T09:42:28Z https://yabu.me/nevent1qqsfxndswxd46tekku32h384qps4j440g690fs2x830dht5d3ml8kcqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5adk7dp smartphones are old enough to vote and still the median app/website works by doing basic CRUD operations over HTTP instead of using replication/sync-based model that would work offline. I find this really bizarre 2025-03-03T14:55:17Z https://yabu.me/nevent1qqsgcwhkcsdfuk9xmjexsk5ruv4576fmp827hhp50s3mpkn3lxa8nkgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5d3vs9c for the whole of this month, I&#39;m offering 50% off my book &#34;building git&#34;, which teaches you a huge array of software and system engineering topics while learning how git works. use voucher code &#34;SMARCH&#34; <a href="https://shop.jcoglan.com/building-git/">https://shop.jcoglan.com/building-git/</a> 2025-03-03T12:50:07Z https://yabu.me/nevent1qqsrfff9dfpnr2fvn8r7hzhyw3mrt2vrd93gz4rpjc6lrjksy5ad5qgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5r7ryxc In reply to <a href='/nevent1qqsydguy5cxrjmjdyt3p9ayksxrypfwej65qsn643c40aul4tc3vjlsg033nn'>nevent1q…33nn</a><br/>_________________________<br/><br/>a web browser&#39;s vendor processing your input to third party websites is a fundamental breach of trust, which is also why any browser that requires that you &#34;log in&#34; to it before use is not trustworthy 2025-02-27T23:12:37Z https://yabu.me/nevent1qqsydguy5cxrjmjdyt3p9ayksxrypfwej65qsn643c40aul4tc3vjlszypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5rnqt4f In reply to <a href='/nevent1qqszjhcam4sd9320gt00ytdma93zel0a0rwg7kac8f4xlk63erpnnqqffea5h'>nevent1q…ea5h</a><br/>_________________________<br/><br/>a license grant is needed when a user sends data to another person or organisation who will process said data outside the user&#39;s direct control. the only recipient of your input to a web browser should be the target website and network services required to access said website, none of which mozilla operates 2025-02-27T23:10:57Z https://yabu.me/nevent1qqszjhcam4sd9320gt00ytdma93zel0a0rwg7kac8f4xlk63erpnnqqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj53gvtty In reply to <a href='/nevent1qqs08keqflwlue0yj2epvcw2q03jezsx4ccwcfdwx058t7zd0axxn7ca29q5m'>nevent1q…9q5m</a><br/>_________________________<br/><br/>hence my conclusion has to be: either these license clauses are redundant and should be removed, or firefox is malware 2025-02-27T23:05:56Z https://yabu.me/nevent1qqs08keqflwlue0yj2epvcw2q03jezsx4ccwcfdwx058t7zd0axxn7czypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5n64ls6 In reply to <a href='/nevent1qqs2yj2ugaphhuky3qg9gu82402jg8uvg8qeeyqpn8pa5y497llszrqgp77ey'>nevent1q…77ey</a><br/>_________________________<br/><br/>their argument would imply that open source authors require a license grant from users of their software to handle inputs to the software, which is categorically false *unless they are exfiltrating user input* which would render their work malware 2025-02-27T23:04:29Z https://yabu.me/nevent1qqs2yj2ugaphhuky3qg9gu82402jg8uvg8qeeyqpn8pa5y497llszrqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj55myxum exactly this: mozilla does not need to use the input that users enter into firefox, mozilla as a legal entity is not involved in the operation of software on your own computer. the only possible applications of this license grant are nefarious <a href="https://mastodon.social/@sarahjamielewis/114078096843471877">https://mastodon.social/@sarahjamielewis/114078096843471877</a> 2025-02-27T23:00:31Z https://yabu.me/nevent1qqstaj8jhkzpwly2wdngwav52eycrjcudqaanfx48awqdlunhnv63yqzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5r6p5l3 various people been saying this for a while but it cannot be overstated how much using ai art on your podcast/blog/slides/etc visually associates you with fascism <a href="https://newsocialist.org.uk/transmissions/ai-the-new-aesthetics-of-fascism/">https://newsocialist.org.uk/transmissions/ai-the-new-aesthetics-of-fascism/</a> 2025-02-27T22:28:02Z https://yabu.me/nevent1qqsttur2eepfyx5qjtv7s3l9zcfxvyysdu3yyync8htrlhya3qk48mgzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5y04cgz you can just treat these as additional passwords, hope my bank never asks me for these questions over the phone <a href="https://peoplemaking.games/@ben/113995472714120447">https://peoplemaking.games/@ben/113995472714120447</a> 2025-02-13T17:08:03Z https://yabu.me/nevent1qqsqms3jmck83wtyd89933jtk89npv7g0hlu5pqps8yxfg0g64rt66gzypdna03trkrdeuj4msmjpgk0387y9slary4u2yel64nex4mkwhdj5ak3xkx who called it creating a new python package manager and not reinventing the wheel 2024-10-30T20:23:49Z