• 2 Posts
  • 157 Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle




  • I’m mostly interested in how will they handle giving the info to apps. If it’d let me to block or fake the request depending on what I currently need (just prompt me every time an app asks, and let me choose the bracket), I’m good.

    Tbh, most sites that are slowly getting targeted by age verification laws are things I’m kind of addicted to and have been trying to drop for a long time. A “scan your face or id” dialog would be a good reminder to finally cold turkey it. It’s one of the things I hate more than however much I need their platforms.


  • I mostly work in gamedev where they aren’t that much feasible so I don’t have much real experience working with them and I might be wrong but from when I looked into it a while back, it’s basically just a docker container that you specify in a .devcontainer file (at least for VSCode, but other IDEs probably have something similar) and when you need to develop, compile or run your code, it runs it in the container. It also doesn’t have to run locally on your machine, if you can run docker somewhere else (i.e on a more powerful shared server).

    I can see several advantages (but I never really tested it in practice, so I’m mostly guessing) - containers are usually quick to start, you have the same and stable and replicable dev/build environment for all devs (since you just commit .devcontainers), so there aren’t some hidden dependencies and “works on my machine” shouldn’t happen too often. It also helps you keep your OS clean, so you don’t end up with 5 versions of python, 3 JDKs and 20gb of random NPM packages installed in your OS after 5 years of development - which is the most important advantage for me.



  • Managing centralized security and device management correctly on multiple OSes must be a nightmare. From EDRs to app and device provisioning.

    You should do dev work in devcontainers anyway.

    Not that it’s an excuse or that I’m happy with that, but I can totally understand why companies do that, and tbh I’d rather see a properly secured than have the option to run Linux.

    But I’m biased, because I used to do Red Teamings, and the things I’ve seen…






  • Hmm, I wonder how well would formal verification work with LLMs. I’m not really a fan of vibe coding, but the little I know about formal verification, it could very well work as a way how to prove your vibe-coded slop isn’t shit.

    I’ve looked into formal verification once few years ago, but it’s too much math and thinking for me to grasp. If I remember it right, I guess the problem would be that you’d (or, LLM would, in this case) have to correctly describe the code in the formal verification language, and it would have to match 1:1 with the code, which is a point of failure? So we’d be back to square one, but instead of having to verify every single line of code, you’d have to check the proof. But maybe I’m wrong.


  • The scary part is the mental state he was able to get into with only a randomly generated text. If you haven’t already seen it, I highly recommend the Down the Rabbit Hole video about it, although it’s pretty heartbreaking. So much wasted talent.

    There’s people like him who are similarly psychotic, but couldn’t usually get to the point where they could access a tool that would trigger them. Personalized chatbots were mostly a niche non-tech savy person doesn’t really get to that easily.

    Now, it’s everywhere. A lot of people will loose their sanity over this.


  • I wouldn’t be surprised if something like that popped up very soon. Probably is in the works on someone’s drive already.

    I remember hearing an arugment against AI coding that if it’s so good, why aren’t there apps popping up left and right? Which was true at the time.

    Now? In the past month, I’ve seen a pretty in-depth Murloc-tamagotchi addon in WoW (that kills your FPS), a whole open-source custom World of Warcraft client, an E2E Tor-based messenger (that signs messages with 128b CBC key), a game engine based on a lost Standart Model of physics that was mentioned by Tesla, but lost to time, that someone reverse engineered (which had very TempleOS vibes, as far as the authors mental state goes), a Matrix protocol on Cloudfare microservices (that skipped message signature verification), and I could go on.

    Open-source is going to become a hell to navigate. I was already anxious about using FOSS tools due to malicious typosquatting clones, supply chain attacks and general security of using someone’s FOSS code on my PC. Now, add vibe coded shit to the mix, and finding a good FOSS projects and tools will be hell :(






  • As far as I know, Cloudfare is the only registrar that offers you wholesale price, as in the price asked by the tld owners. So, you a registrar can’t go lower, because that’s what they pay for it.

    But, a lot of registrars will give you first year at a heavy discount (so, at a loss), just so they can ramp up the price to wholesale + a lot extra. I got my domain for like 5$, and they then asked for 40$ for renewal, while wholesale is around 25$.

    So, I just transfered to Cloudfare for the renewal. Tbh I don’t remember if it was the first or second year, and what are the transfer rules, but I think it should be possible to just buy a first year at heavy discount with i.e Namecheap or something, and immediately transfer to Cloudfare for the first renewal at wholesale price.