SolarNet

If you read the calif report

> No special harness, or access to models that weren't generally available to everyone were used in the initial bug discovery. I focused on something I had a background in, knew its vulnerability history well, and held a theory that specific bugs lurk within the codebase. This shows that "know your target" is still as applicable as ever, even in the LLM dominated VR age. No model is simply capable of unearthing "all bugs" with simple prompts.

They used a public model as a research assistant and a code assistant. They guided it with expert deep knowledge of the project. OpenAI did not lead this, ChatGPT was not instrumental in this.

It is perhaps at best to say OpenAI made it possible to find the bug more quickly. And on the double edged sword, also made it easier for it to be exploited days ahead of release. So I agree with the original commentator, did they on the balance actually do anything good here?

Speak for yourself. I don't see every model being released under GPL after having read the entire source code as a step of creating their binary artifacts (model files).

The point of the open source I work on is to contribute to a commons, not to have it stolen so that it can be used to destroy those commons, used for the profit of techbros, and used to justify the murder of children.

I am one of those employees who can make architecture decisions, and make them well, and have for decades.

The level of appropriate LLM usage in my opinion? Ask Gemini some questions when you need to search the web then read the sources it gives you.

LLM written code still has the problem IBM identified. A computer cannot be heald responsible, and so it cannot be allowed to make decisions. That applies to executive management AND software engineering.

Of course that requires working in an industry, like aerospace, where engineers are (usually, Boeing not counting) heald accountable.

> what do you say to the fact that Sha1 had a lifespan at design time?

Read the article. SHA1 was chosen for content hashing, not security. Hence the security lifetime doesn't really matter.

The constitution generally, at both the federal level and state levels generally has a clause like "if its not enumerated here then the next division down has the right to regulate it" hence why the feds regulate interstate commerce, but not state internal commerce. This usually stops at the county level, not the city level, but large cities are effectively their own counties so that distinction doesnt matter much.

Its enforceable in that the city has a police department and zoning rights. So they can force businesses out for violating the law, and they have they have the monopoly of violence within the city to make sure you follow their directions. But whether thats funded or practicable depends on other factors.

Tax the rich.

And by that I mean people who "earn" their wealth through mechanisms that aren't direct income. Heck, give an exception to the tax on the first million of non-income based wealth. But something has to change because their money is their power and they deserve less of it.

The actual education can be useful. I dont think my masters degree has ever landed me job. But I would not have been able to deliver many of the things that got me a leadership position, nor be as capable as an engineer as I am today without the experience. The milage obviously varies greatly here based on where one goes.

I mean its as private as VPNs are and people pay for those too.

Its funny because Kagi apparently also uses Google, and Microsoft and other threads were complaining about it.

It sounds like they use everything to give their subscribers good results. Which is what it sounds like I am paying for.

If they notice. Again, a printed version of the contract that is signed has no evidence of the attack. The attack is on getting your legal LLM to hallucinate specific things of what you are signing.

I doubt a judge will look favorable on people saying "but my LLM said it was 1k"... cause they are known to hallucinate.

When every AI company does it from multiple data centers... yes it's distributed.

Land is scarce. Also, generally, property taxes are paid to the city/county that makes that land desirable to live in.

Like usual the answer is it made it easy to use. Think Linux and Windows. You have a customized Linux setup kind of agent. Open claw is the easy install wizard assisted version of that that the masses can easily setup.

It's nothing new, its just the old stuff packaged together and pre-configured.

Cause it was written by AI.the entire mid section is classic AI slop writing. Repeating the same points and numbers over and over, repackaging the same idea with "key takeaway" and shit. The voice of the author is heavily AI coded there.

> I don't know, manufacturing seems to have learned pretty well that they can ship everything overseas and people will eventually accept products just aren't made the same way they used to be.

I mean this is true, but we aren't talking about the consumer here. We're talking about the industry which is to say the powerful people who own and run all these companies.

What has happened is that those overseas countries now have all the experienced engineers over there and they know it. So you see things like the Trump admin begging Korean companies to keep their workers in the US because they understand how to actually do these things. And the reason the Trump admin did that is because they owe favors to the rich people who want to profit off of factories in the US.