slow5ort
1.8K posts

slow5ort
@slow5ort
Distributed systems and other stuff - Occasionally bad philosophy https://t.co/dJk6ESDzdG
Layer 8 rollup เข้าร่วม Ekim 2022
701 กำลังติดตาม242 ผู้ติดตาม
slow5ort รีทวีตแล้ว
slow5ort รีทวีตแล้ว

STEM academia serves two closely intertwined purposes: the production of high quality science and the production of human capital. These two purposes feed into each other. The obvious direction is that we develop human capital by paying people to produce science.
What is perhaps less obvious is that the very fact that human labor is used to produce science has historically been an important input to its quality. The goal of science is not simply to produce papers, but rather to produce good work--that a person is willing to spend months working on a paper is a (weak) witness to the fact that it has some minimum quality. If someone has a record of producing high quality work, that they wrote a paper is a stronger witness, since it was worth the opportunity cost to write it. If many people engage with it substantially, that is even stronger evidence. This is not to say that there isn't lots of low-quality work--there is, in fact a huge amount--but we have strong sorting mechanisms, admittedly using imperfect proxies (all depending on costly human labor!), to find high-quality stuff. Arguably the paper itself is not the primary product here; in many cases the primary product is actually the expertise developed over the course of producing it, which can then be applied to other questions.
If you believe, as I do, that producing high quality science should be one of our fundamental goals, I think you’re obligated to embrace new tools that help one do so. Refusing to is a declaration that these outputs are not important. But I worry that we are not on track to automate the production of good work; rather, we are on track to automate the production of papers. We need new mechanisms to ensure that we are also producing good work, and to ensure that we are developing the human capital to engage with it.
English


@SoosMate Great philosophical opening there! Are you sure you're employed?
And yes, the stat is clearly interpreted to make a headline.
Anyways, I'm excited for this pork cycle to continue. In 3-4 years, will there be a 10x of philosophy graduates while The Economist calls for IT skills?

English

a rare case this guy can honestly claim he succeeded at
unusual_whales@unusual_whales
BREAKING: Trump has said: The whole world has become somewhat of a casino
English

@uwu_underground and the award for best privilege escalation through prompt injection goes to ...
u r not wrong
English

@slow5ort AI fast built companies and compliance companies standing up and saying "hold my beer" rn
English

We should have an dedicated annual adversary and lame vendor awards at BH/Defcon pwnie style
Most Epic Breach
Best Cryptocurrency Attack
Lamest Vendor Response To A Breach
Biggest Attacker Fumble of the Year
Most Absurd Compromise
Best 'No Evidence of…' Statement
Best 'We Were Compromised' Fanfiction
'Working as Intended' Award
Best Internal Memo Leak
Best Influencer Damage Control Campaign
Shadow IT MVP Award
Best Breach-as-a-Service Upsell Vendor Pitch
Delayed Disclosure Record of the Year
Most Ambiguous Customer Notification
Best Blamestorming Incident Of The Year
'We Take Security Seriously' Lifetime Achievement
English

@rob_mcrobberson we developed ozempic, check and mate creationists, evolution works
English

@SIUChasmite well unless you are a committed error theorist there should not be a problem
English

@JeffBohren oh man:
- rag poisoning
- credentials harvesting ( so many .env s)
- agentic privilege escalations
- non deterministic scope of agentic execution
- non verofiable execution chains...
the world is now full of amazing possibilities
English

I fear giving AI agents access to sensitive information and systems is going to be one of the worst security mistakes IT has made recently.
This for at least three reasons:
1) LLMs are vulnerable to prompt attacks. Further, no one seems to know how to prevent it.
2) MCPs will continue to be a source of RCE vulnerabilities. It reminds me of the CGI-Bin days of the internet.
3) Skills will continue to be vulnerable to supply chain attacks.
Did I leave anything out?
English












