nico retweetou
nico
482 posts
I feel like this is a very important post about Bun's rewrite. A lot of Rust code, as it is, is unsound. And I guess Rust being explicit about "unsafe" should make it easier to exploit, because you know where to start looking. It's crazy that it got merged without any cleanup.
Dmitry /Undefined Behavior/ Sviridkin@Nekrolm
Не знаю, какую там надежность слопотрансляция на Rust привнесет в Bun, но вот с такой отвратительной фигней, ни от каких use-after-free Rust не защитит.
Option
English
Definitely no attack surface in here. Totally Reliable™ and Secure™. Trust me, they had Claude review it. It passed the tests that Claude wrote!
English
my teaching philosophy is that existence precedes essence:
students should learn useful, practical techniques first then derive essence (fundamentals, implementations) from them
nothing more practical than spreadsheets & w/the right perspective a lot of deep CS underneath them
English
@ThePrimeagen Just as intended by the REST architecture, what a great prediction.
English
I cannot wait for hypertext to be used.
The pisi*,** will reach levels previously thought impossible
* Prompt injections per square inch (imperial of course)
** I did originally do pilb for per pound, but it's just not at funny sounding
Thariq@trq212
English
@yawaramin @relizarov @kerckhove_ts No it's not impossible, it's just tedious and requires long hours from huge-brained engineers having full understanding of one of academia's most cryptic field. They know the trade-offs of their probabilistic approximations and fine-tune them.
English
@ncs_pl @relizarov @kerckhove_ts That's just not a credible number. Compilers at their base have the job of converting a source to a target reliably. If more than 50% of the output is probabilistic,testing compilers would be impossible
English
It is so funny to watch non-compiler engineers suddenly discovering that many modern compilers are actually non-deterministic. Sweet summer children! Can’t wait them discovering how many known bugs a typical compiler has.
English
@yawaramin @relizarov @kerckhove_ts "small layer" it's probably more than 50% of a compiler codebase but I won't argue any semantics here: determinism is an overloaded term in the industry
English
@ncs_pl @relizarov @kerckhove_ts That's a small layer of non-determinism on top of a base of deterministic behaviour. LLMs are exactly the opposite.
English
@yawaramin @relizarov @kerckhove_ts Non-determinism does not however mean that some obtained results are wrong (those are compiler bugs)!
English
@yawaramin @relizarov @kerckhove_ts But you don't always have the same F' for a given F, due to optimisations passes order, lowering, etc. Too many NP algorithms in compilers.
English
@anderslie @badlogicgames I hope this day comes soon, that will teach Turing & al, a serious lesson! (sarcasm)
English
@badlogicgames but just you wait until LLMs are deterministic, bad code no longer compounds on itself, and having high quality code is automatic like llvm optimizations - when this totally happens you will look like such a fool!
English
i actually don't want this "but you don't review compiler output either" meme to die.
it's the perfect signal for being immediately able to ignore someone in this space.
solst/ICE of Astarte@IceSolst
Interesting article on treating agent output like compiler output (and why) skiplabs.io/blog/codegen_a…
English
@alienmadev @IdlePaladin @HSVSphere @samlambert @0xblacklight Companies also buy Jira and it is pure trash too
English
@IdlePaladin @HSVSphere @samlambert @0xblacklight Because gitlab doesnt really care about individual users, most enterprises use Gitlab, and once you start using Gitlab you wont be able to take Github seriously
English
feels like this should really be gitlab's moment, not sure why it's not
are they asleep at the wheel?
English
@rfleury @VisualStudio You assume someone did it, but what if it was Copilot's decision?
English
WHY DOES VISUAL STUDIO SECRETLY UPDATE THE BUILD TOOLS AND SDKS WHEN YOU ARE ACTIVELY RUNNING THE COMPILER
@VisualStudio Please fire whoever is involved
English
nico retweetou
@theonejvo No no, both the Internet and the World Wide Web were architectured to support billions if not trillions of user agents, terms they define themselves as any kind of intelligent systems (human as well as machines). Businesses not understanding the tech aren't ready...
English
The internet was architected for a different era entirely one where scale meant millions of users, not billions of automated agents running simultaneously. We're watching infrastructure bend under a load it was never designed to bear. What unfolds from here will reshape everything we thought we understood about how information moves.
なおき@Naoki_GPT
Claude Code、金稼ぎに特化させれば余裕で月50万は超えるのになあ。 うちは10個のSNSアカを自動運用でフル稼働させてアフィで稼いでもらってる。AI自動化アフィの収益性エグすぎ。ちなAI系の強者達とも話してきたけど、AI自動化アフィのアツさに気付いてる人はほぼおらん。ガチのブルーオーシャンだよ
English
@tetsuo_cpp Because he is. He single single-handedly corrupted software corporations with OOP shit
English
Why does Uncle Bob talk like a villain?
Uncle Bob Martin@unclebobmartin
Morning Bathrobe Rant. Quicksilver.
English
unpopular opinion
even without grapheneos mobile os'es (android and ios) are the most secure os'es out there.
Yes, without grapheneos apple/google are definitely sniffing on you but from an attacker's perspective any desktop os is much, much, much less secure
HSVSphere@HSVSphere
I like how people who have NO idea about security telling you to "stop using your phone" Brother, your phone may be the most secure device you have on you. Especially if it's @GrapheneOS
English
Because systems and computers are dynamic, you literally CANNOT express tons of these in static languages without emulating a dynamic language that lets you define types anywhere, ans that's very cumbersome and more error prone than just writing a tiny dynamic language that extends itself
English
Agents are good at bash. Bash is not good for agents. We should cut our losses and restart now before it is too late.
English