deprave

Another thing that bit me is that automatic updates reserve disk space even if no update is available. It makes sense when you have plenty of disk space but on my MacBook Air with 256gb of storage it was about 10% that I got back after turning off automatic updates. I’ll get a Mac with more storage next time so I don’t have to do that.

Apologies, I didn’t mean to imply it’s a benchmark, I just wanted to provide a reproducible example of where I see models make decisions that seem to be fine initially but might paint the software architecture into a challenging corner. I don’t expect models to read my mind, but I do see them produce a lot of verbose output, none of which is used to say “here’s a simple response to your ask, but have you also considered...”

I disagree with the assertion that the model gets it. Here’s a practical example I just tried with Fable 5.1. I gave it this prompt: “Write a Go function that can be used to establish secure communication to a remote system using a certificate. Keep it short, single function, and explain how to use it.” The output forced the use of a private key stored in a file even though that wasn’t specified anywhere as a requirement. The function Claude wrote takes a private key file argument and calls a Golang function that requires a private key file (tls.LoadX509KeyPair) even though Go has crypto.Signer which could support private keys in various other manifestations like HSM or KMS. I argue that a person who “gets it” (or who is reasonably experienced in security) would have opted for not requiring private key material for this to work.

For the record, this isn’t unique to Claude. ChatGPT and Gemini do the same, each with its own quirks. ChatGPT got extra credit for being the only one who allowed the function to also take a CA file for server authentication.

Don’t get me wrong: LLMs are the future (maybe even the present) of software development but I think there’s some way to go before they can be entirely hands-off in some areas. I still find myself having to course correct designs and plan mode helps me with that.

And of course, thank you for your work on Claude. :)

Thank you for working on this, I love the idea. What surprised me was the way user identities is managed, I assumed you’d use whatever git uses. Would you mind elaborating on that?

It’s important to note that by “raw” they mean without padding, which is more rare than just a signing oracle, see section 7 of the paper.

To me, there’s a difference between ads that help me learn about brands or products, or make me laugh or have some positive emotion (Super Bowl ads, billboard signs, and movie previews come to mind) and ads that take over search results, interfere with the content I want to consume on an already-small screen, or are just distasteful to me. I can’t say I like ads but I recognize that I specifically dislike some ads more than others.

That’s the important question. Someone else on the thread suggested it was to divert attention from one failure (AI) and now they have two. I wonder how Steve Jobs would react to this mess. Maybe he’d say he would not have been in such a mess in the first place. :)

I thought the same thing. Some of the commenters said this move might be related to stock price or appeasing shareholders, so I wonder if that, too, was directed at them, as in “we’re big and we plan on getting even bigger”

My hypothesis is that this is government response (own stake in Intel) to another government’s action (hint take over of Taiwan) and as such is outside the free market. But I have no evidence to support it, it’s just an opinion and it could be that they view Intel as “too big to fail” or something like that as you suggest.

I agree, and I think the government’s incentive might also be a having strategic production capability in the US. Maybe they’re concerned about TSMC’s future with the tension between China and Taiwan?

What would be a superhuman result for booking a flight?

Encryption at Rest makes it easy to reason about data hygiene, since access to the data is gated through access to the keys.

You want to delete data? Toss the keys. You want to confidentially process data? Make the keys available to a TEE or such. You want to prevent yourself from having constant access to the data? Let the client provide the keys. And of course, you want to protect the keys? Use an HSM.

I learned that from The Office :D