KronisLV
Joined 6 years ago
Joined 6 years ago
I mean if you have only one there’s https://www.qubes-os.org/ but not sure about the gaming part, nor is it necessarily as good as separate isolated hardware.
Architecture page: https://doc.qubes-os.org/en/r4.3/developer/system/architectu...
There's horror stories of automated systems suspending people's Google accounts and suddenly they can't access their photos and other important data.
Like if you use a password manager and all of the passwords are random, might as well go a step further and at least have separate e-mail accounts for groups of activities.
The only difference is the architecture/moving parts/featureset which roughly corresponds to the attack surface, which then roughly corresponds to how many CVEs will be found, though that's also affected by how big a given target is.
For example, total new CVEs:
2024 2025 2026
Forgejo 1 10 >55 (confirmed ones, checked what I could)
Gitea 1 9 121
GitLab 145 165 251
(a lot of the reporting out there sucks, cause some CVEs get assigned to Gitea and may or may not be applicable to Forgejo as well, so you have to dig into the details for example https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSear... and https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSear... and https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSear... )That's not to say that Forgejo is some perfect piece of software, just that it builds on some of the past experience of Gitea and just has both less features than GitLab, is simpler, and also a smaller target. It will probably get >100 per year too soon, but I'd reckon that the totals will remain than GitLab for the foreseeable future.
Maybe I'm wrong!
Just get the source code of Forgejo, audit it thoroughly and run an instance of that.
Sometimes how projects are run is weird, like how Hi-Fi Rush seemed to be doing well and then Microsoft axed them despite it:
> In his letter to staffers, Booty said the closures were “not a reflection of the creativity and skill of the talented individuals at these teams or the risks they took to try new things.” And while the changes will be “disruptive,” Booty said that they are “grounded in prioritizing high-impact titles and further investing in Bethesda’s portfolio of blockbuster games and beloved worlds which you have nurtured over many decades.”
https://arstechnica.com/gaming/2024/05/microsoft-shuts-down-...
I guess that’s just the old “Build One To Throw Away” in a modern light, where prototyping more freely is now actually feasible. I think if you apply the good engineering ideas of the past decades to AI, the results can be really good!
Except I’d also add a lot of testing to the prototype, to bring up as many edge cases as possible.
How could that be made to happen? Should EU somehow move to federated (let’s say per country) instances of Mastodon or something? Or one big platform? How would regular folks get used to it? And how could those initiatives be prevented from falling into irrelevance when network effects are at play?
I agree with the idea, it’s just that there’s the usual hurdles there aren’t necessarily good answers for that I know of.
That said, I bet that’s how eventually we’ll end up with actually good ADEs (and a bunch of dead projects), by taking what works and changing or discarding what doesn’t - for example GitKraken Kepler has a really nice ticketing system integration but also the older versions I’ve tried had vibe slopped UI.
If nothing else, competition should push everyone who is capable to keep up to do better. It is kind of a bummer sometimes, though - I also wanted their Fleet to succeed, but that was before Zed became really good.
To be fair, there were some arguments to the opposite, but an odd situation to be in anyways: https://news.ycombinator.com/item?id=49654350
Though to be fair Opus 5.5 is better than Opus 5 was in that regard. I still prefer the OpenAI models to either of them when it comes to regular prose, though.
If they didn't, they'd be unable to compete with their competition and also we'd get worse models that can't reason about many domains or do that much due to limited training data/generalization. I don't think we can put the cat back in the bag or mandate only non-problematic training codebases without shooting ourselves in the foot.
Now, if those AI orgs were mandated to properly compensate everyone whose data they've mined, to track which neurons get invoked and to pay accordingly based on what was used to train them... ehh, that's about as unrealistic as stopping. Kind of a bad situation all around, unless you abandon the idea of any sort of copyright.
It's an excellent way of showing how unreliable the information you find online is (and it will only get worse in the future), but willfully creating misinformation and made up shit and offering it as fact feels hostile to humanity.
Surely nobody got hurt as a consequence of those "facts", but bad decisions with real world impact could be made regardless. It feels like the behavior should be shunned in a general case (the same way I'd shun those numerous spam sites that pollute search results and very much would prefer they not be allowed to exist), even if in this case the intent was good.
Problem is, you can't really do anything about it, other than figuring out a way to take down hostile sites and keep them from popping up, so it's even worse than fraud or even just bad research in academia.
I feel like an increasing amount of orgs out there have long abandoned this thinking.
I wanted something in the EU, so I went with INWX - their UI is quite unintuitive/bad in my eyes though. I guess Hostinger/IONOS/Gandi/... would also be pretty popular for anyone like me.