oscarcp

It seems my eyes skipped the part of "[...]mostly consist of code written by generative AIs[...]" my bad. Which means I have to apologize twice, because of the other comment. Damn, good slap in the face xD

No but I use LLMs for repetitive tasks and chores mainly, the ToS forbids any use of LLMs, not just "reasonable" or "unreasonable" use. And even if it wasn't my case, if someone wants to purely vibecode, they should be free to do it. As I mentioned in another comment, I understand the restriction, I really do, it's not abut the code and more about the complications posed by automated LLM flows (unending shit PRs, merges, thousands of CI jobs running for no reason...) but still, I don't think it's the way to go.

Not if they keep putting everything behind a paywall. I'm not going to pay 60 (20/user/month) euros per month to be able to restrict pushes to main. It's absurd. Sorry, this specifically gets my blood boiling so I might be a bit more aggressive than needed.

It ridiculous, Codeberg did the same. I get why, really, I do, but it's creating a severe damage that will be abused by a third evil actor that will take over the wasteland of GitHub and GitLab by creating a service that will allow anything (until it is enshittified of course)

Outcome? Everyone on their own self-hosted git servers, zero collaboration.

I was about to mention Codeberg but I saw the last two changes to the terms of use and they're basically digging themselves into the ground with so many restrictions

How does it compare to a local deploy of PSONO?

That just gave me shivers down my spine of people eventually becoming so lazy that the AI will decide who to fire based on a massive amount of circumstantial data that very likely has tiny cumulative errors that will lead to classifying your best personnel as a bums and liabilities.

Just to make my point: can I really trust humans to keep up with the required identity data that will give me enough "credibility" so the AI will give me access?

Let's say I had a promotion, who changes my title in the system, who changes my responsibilities and my place in the org chart, more importantly, will they do it or is <HR_NAME_HERE> on leave and forgot? those are data points required by the agent to determine if I'm "good enough" to access a certain resource.

What if... someone spoofed my address and did a flood in one of the resources that are lateral to what I'm allowed to access (let's say I don't have access to company sales but I do to department sales and the attacker floods company sales with requests under my address), would the AI determine that I'm a high-threat actor and not allow me to access legitimate files going forward?

Will exceptions be made by humans? In which case we go back to human-managed permissions.

Sorry, I might be barking up the wrong tree but I think these are questions that are not meant to be solved during implementation. And they add to what @firasd said about legitimate-but-odd behaviour

Am I undertanding this correctly? The idea is to have ultimately an AI decide if I can have access to a resource based on dynamic inference, identity , intent and service signals that can easily be manipulated?

Unless I gravely misunderstood the text, this seems like a terrible idea (fancy non-scifi, but still terrible)

I don't know your use case... we use only dedicated root servers (from the auction) and the cost is stupidly low, we run 6 x 64GB RAM, 6TB HDDs Xeons and each of them (with the price increase) cost us like 40 euro/month, which is redoncolus (ridiculous). The only "inconvenience" is that we have to do the infra ourselves instead of having a button to click but wow, the cost savings alone are insane. A 4GB RAM/20GB disk/1vCPU in DigitalOcean costs 7 euros/month with a horrid I/O that can't even run a static site (we tried to migrate)

shame I cant recover my original account. When they sold to spotify I hadn't accessed my account for a good while so they just moved everything over and deleted it. It was a shame, I'm one of the OGs that signed up when it still was audioscrobbler, 23 years of historic listening data through the drain. Shame. (did i mention it is a shame? XD)

what-a-way to pre-start a work day. Thanks for the contrib! :D

4% seems reasonable, it's pretty much standard across the board in Europe (median sits around 6% if I recall correctly), not many companies can pull 10% profit. For example in Spain, major conglomerates like INDITEX have a 11%, Iberdrola has a 10%. We also don't use the same metrics and parameters as the US for profit, so the values are skewed.

That said, certain sectors like software (as in custom enterprise grade software dev) pull revenues that are much much higher sitting around 35%, but it's not that common.

Gentle reminder that we have a gag law that subtly undermines the right to strike as well as give full and total power to police to do whatever they want if they deem your actions a "disrespect" or "disobedience" without giving explanation to anyone.