richmondez

It’s states they were produced which I’m taking to mean found and it’s ambigously worded so it’s unclear if the article is actually claiming it generated PoC for all of them. It doesn’t say how many if any hallucinated results were produced or how much effort was needed to fully confirm, basically down played the human involvement.

It’s great that so many bugs are being found and squashed but it’s implied LLMs are doing all the work when what they are actually doing is assisting as a tool.

I was trying to have some insightful discussion on the actual capability of LLM which is difficult when the involvement of the human element is played down amd the role of the LLM is played up to feed the hype machine. It’s hard to acknowledge the real capabilities and weaknesses when the capabilities are always over reported and the weaknesses down played or denied.

It’s great that so many bugs are getting discovered but as I say there is no reporting on what effort was needed to sift and review the LLM output or how functional or understandable any PoC were… The article doesn’t directly even state the PoC were directly produced by the LLM and reads very ambigously.

What these articles never say is how many hallucinated bugs the LLM found that either weren’t real or were actually exploitable. The LLM didn’t find these with any confidence it highlighted areas of interest that actual security researchers then needed to investigate and confirm or rule out.

On the code development front it’s even worse as now you have an unpredictable cost based on token consumption rather than the predictable cost of a salary and have no leverage to negotiate the cost.

Mate, you’ve lost the plot if you comparing you letting your AI agents run over somone elses code base and getting screwed by it being in anywhere remotely similar to that 3rd party repo raping you. The rest if us were trying to have a serious conversation.

If you have an AI agent that you’ve given away your agency to to make calls like dropping databases or wrecking your code then you kinda did though. Perhaps you didn’t knowingly introduce these gaping security holes, fool me once shame on you and all that. Are you going to change your security posture and limit the LLMs access and reduce how much you let it do your home work for you now? Otherwise it’s on you next time it fucks up.

People are pushing back against widespread abuse of LLM technology in workflows it’s a poor fit for and generates poor results for that are being built on current cost assumptions that are being massively subsidised by those pushing LLM solutions. When they flip to the “profit” stage of the plan and costs go up 5x or even 10x those workflows are going to look a lot less attractive for the poor results they generate. It’s also being used as a smoke screen for layoffs it’s not really responsible for which isn’t helping it’s image.

Except that in this case it wasn’t been used as a power tool, otherwise it wouldn’t have been able to do anything without someone getting it to. It’s more akin to someone leaving a power tool lying around with a more saying “use this as you like” and then didn’t like that somone took down their garden shed with it.

All found with some AI assistance and a lot of human expertise sifting through the hallucinations to work out the actually exploutable stuff. And the AI bug apocalypse has turned up a whole 4 bugs serious bugs so far, ooo scary. I’m still waiting to be impressed.

I’m playing them preemtively, once they come down to a couple of dollars I’ll totally pay for them for all the time I spent playing them when they were expensive.

It’s a LOCAL privilege escalation vulnerability. You need sufficient access to be able to execute arbitrary code locally on the machine. You would need a remote code execution vulnerability in an exposed service (VPN, web server, game server and so on) before an attacker could chain to this to get remote root on your system.

This disclosure has been rushed for the views and hype IMO, none of the big distros had fixes ready to go on this this morning.

Blueray bitrate is lower than even 1gbps so even full remux is downloadable at a speed you could begin to watch it the same day while later episodes continue to download. You wouldn’t need the full series downloaded up front.

Yeah I’m sure that will keep it offline.

Fertility rates have been falling across the world since the baby boom that followed WW2 in line with greater female education and labour market participation. Also people from poorer and less educated background in wealthy countries are the people who have the highest fertility rates.

I believe you are miss reading the correlation, having more children isn’t making people poorer, it’s part of a more complicated cycle of poverty that involves lower levels of education and attainment which leads to poorer income and poorer fertility planning. The strongest correlation is with female education levels.

The original code for that was leaked, most if not all replacement servers run that code, not reverse engineered code.

I wish I saw this kind of insightful point of view more often in the discourse over social media. It’s stopped being about being social once algorithmic content curation became the norm to drive engagement and advertising money which is the real evil.

At some point the argumemt that it’s to “protect the children” rather than to control and monitor what adults do will fall flat when more and more difficult to use work arounds keep getting banned that realistically only adults would employ.

Sadly being smarter doesn’t stop you being ignorant.