• 0 Posts
  • 64 Comments
Joined 3 years ago
cake
Cake day: July 4th, 2023

help-circle

  • In my experience, the ones who tell you unprompted that they’re vegan are usually relatively new to the diet and are more likely to be treating it as a short term fad diet than the more dedicated ethical vegans.

    I’ve known people 10+ years vegan and they’re super healthy and active. So its really just that the fortifications in the US food system are targeted at non-vegans so you need to be more intentional about your diet as a vegan in the US.


















  • It’s not unknown if it’s effective…

    someone from Mozilla put their name on a blog post saying they fixes 22 vulnerabilities and an upcoming patch fixes 200+

    https://blog.mozilla.org/en/privacy-security/ai-security-zero-day-vulnerabilities/

    This isn’t anthropic, they have no incentive to lie about how good the product is. They’re committing limited development resources to these fixes so would want them to be real problems.

    It’s also definitely more than 0, the original mythos post disclosed a OpenBSD vulnerability that was patched and they disclosed more as hashes for unpatched vulnerabilities, basically signatures of either descriptions or exploit implementations, so when they fix and disclose the plain text ones we know the original post was telling the truth. The signatures are difficult to forge.

    We also have a ton of 3rd party researchers looking at this stuff if they did forge those signatures and I haven’t seen any whistleblowers with access to the model saying it garbage. If you have any sources let me know, I would be interested in reading that.

    My point is not to white knight for anthropic. They’re flaunting IP rights and driving up energy prices for personal profit, but that when you take a position and say something it should be for actual reasons, not just “I hate this company”


  • I understand why people are bandwagoning on Antropic, they’re certainly not a blameless company with negative societal, environmental, and economic impacts of the product they’re pushing.

    This article is kind of dumb though, structurally, the headline and introductory paragraph are completely different issues. And the nothingburger framing is a straw man.

    I don’t think anyone who has had access to the models and been able to write about it has claimed that it is better at humans at finding bugs, but most articles I’ve read from those people have said it is valuable because expert security researchers are a finite resource, they can only do so much manual poring over of large code bases and honestly that sounds like mind numbing work.

    The value is not that its better than human security researchers, but that it doesn’t sleep and you can just spawn a bunch of them to look for stuff so a researcher is only reviewing and guiding agents instead of getting bogged down in the nitty gritty of scanning code bases.

    The mozilla article a few days ago put it well, if it becomes easier to find bugs that generally benefits criminal elements who have a larger profit incentive to find a single zero-day over security researchers where it doesn’t matter how many zero-days they find, it only takes one to have a major incident.

    I think the idea of responsible disclosure here is a good one if somewhat poorly executed with the model leak, and I don’t understand why its being mocked other than that people just see the letters AI and start hurling tomatoes. There’s plenty of targets in the IP theft and vibe coded garbage areas of AI, its counterproductive to attack them for doing the right thing.