TuxSH

> threat that exfiltrates

No need for something new here, Claude Code (Auto + default settings) has a tendency of running "find"/"ls" on your home folder when it struggles with solving a problem. I wish I was joking.

Now of course people trust these AI companies not to do bad things(tm), but all it takes is replacing the model endpoint URL -or any kind of harness compromise- and nothing will seem amiss

> Google

Is it not because they have been enshittifying Search for over a decade, then recently lost their de-facto monopoly on Search due to LLMs, with no good new product to show for it?

LLM use != vibe coding (latter should be reserved to "cattle" projects)

One can use LLMs to find vulns and/or review hand-written code, for example. But to answer your question, one doesn't understand code they didn't design nor write themselves.

Not sure when it started (at least the M4 is affected by this) but all the macbooks I had (personal+work) since the M4 have display dimples after being put in a stuffed backpack.

Meanwhile the M1 Air I had for more than 3 years never saw the issue.

> Google has the products

Outside their most successful products (YouTube, Android, GMail, Chrome, Search), their products are usually worse than their competitors (e.g. GMeet vs Zoom)

> the brand recognition

Of not maintaining/outright abandoning their products, and making Search worse over the years?

> most importantly a billion normies

ChatGPT has 1.2B weekly active users, all the normies know what ChatGPT is but don't know about Gemini (outside the "AI Mode" stuff)

You're not alone. Though, I wonder if this means better coating, the coating on the existing MacBooks (but not the M1's) get damaged far too easily when in a bag.

Yeah and some of the article wasn't proofread (by himself or a clanker) and the project is missing some of the due dilligence.

One striking example is "No debugger, no stdout" which is baffling considering I implemented a GDB stub in the very first version of Rosalina which I released like... 10 years ago?

Stdout redirection is supported by both 3dslink and GDB stuff on 3ds, too.

I don't mean to be a party pooper - and the projects fullfills its role as a showcase of how far pure vibecoding can take someone - but it's this can of thing that gives the "absolutely no AI" crowd grounds to stand on.

> Good instinct, the bottleneck is on the CPU side though.

Have you, or rather your agents, tried to identify which CPU functions were the bottlenecks (e.g. in citro3d, perhaps)?

I find it surprising that your stuff is CPU bound. Are you doing one command-list submission for _both_ eyes (with one drawcall for each)? This should be relatively simple, only require viewproj matrix changes and avoid CPU<>GPU roundtrips.

If not, you are going to hit IRQ dispatching costs as well as shardmem dispatching costs as well as other costs.

It's the choice of the moderators* and they are banning solo projects, and any kind of AI usage even if not slop.

Most low- and medium-handing fruit vulns can be found and exploited by GLM and some knowledge already.

Kneecapping cyber vulns only serve governments, Pandora's Box is already open for cyber-related stuff.

> For the open-weight release of K3.1 Pro, we identified and removed cyber-related data from both training stages, while retaining the general-purpose coding tasks needed for model usefulness. We will continue to apply appropriate controls at every training stage, of which cyber-related data identification and restriction is one example.

Lame.

> Having a small number of apps installed at the same time, needs each app to be periodically reinstalled at short intervals (IIRC, one week), and you need to have your expensive Apple laptop with you for that reinstall.

Not true if one pays up ($99/yr), in which case the interval becomes one year. Also apps that sign and install other apps with one's cert exist.

The category they list in the $50k context are PSC exploits, or TSEC coprocessor exploit when executing the secure code that bootROM provides it.

So, presumably, current and future key material compromission like on Switch 1

> Worth noting too that this would have easily fetched >$50k

More like $30k, no ("system processes allowing piracy")?