HackerTrans
TopNewTrendsCommentsPastAskShowJobs

jzb

5,324 karmajoined 16 years ago
Joe Brockmeier. Currently an editor and writer for LWN.

Submissions

A new era for memory-management maintainership

lwn.net
8 points·by jzb·2 months ago·0 comments

comments

jzb
·2 days ago·discuss
It’d be nice if there were a consumer version of this. I have plenty of old RAM.
jzb
·6 days ago·discuss
Could substitute a tractor tire, maybe? Would certainly smell better long term…
jzb
·7 days ago·discuss
Do you have stats on that?

I’m not sure piracy or AI training are really affecting book publishing dramatically. But if you have data, I’d be curious to see it. AI scraper bots are a total pain for online publishers and FOSS sites, but AFAIK they’re not really harming book publishing directly.

The consolidation of publishers and Amazon’s own practices are probably worse for authors than “piracy”.
jzb
·11 days ago·discuss
Sorry if it sounded like it was only in Debian; that was not my intent. I tried to make clear that the Debian package maintainer and upstream maintainer were one and the same, and that the change was upstream first. That was the reason cited by the person who complained, that he didn't file a bug because the maintainer was the one who instituted the changes upstream.
jzb
·11 days ago·discuss
I think “abject poverty” is probably overstating the case a bit. I do think quality of life is trending downward given the fact that housing, food, gas, medical care costs are all increasing while wages are stagnant or worse.
jzb
·12 days ago·discuss
There's an enormous imbalance between company and customer that you're ignoring, not to mention the difference between a private person and a company's very public personas who own said business.

If a company was sniffing around to learn my political views, that would be a bit intrusive, wouldn't it? I wouldn't expect the same level of anonymity if I were the CEO of a company like Mullvad. There's also a disparity between "I'm taking my business elsewhere, good luck without my $10 a month!" (or whatever Mullvad costs...) and "we've decided to not allow you to use this service".

How large a disparity is depends a lot on whether a company has a lock on a market. Generally, if a vendor in a crowded market decided to turn away customers who are XYZ voters (as an example) I'd be more apt to just comment on that as a business strategy than as a "how dare they, they must accept all customers!" Like, if you are one of 20 VPN providers and you think you can be successful by turning away customers.. well, OK. Good luck with that.

If it's a provider with a monopoly that's a bit different. I live in an area with only one choice of provider for electricity. So I don't think they should be allowed to refuse service to anybody who is paying their bill, even people I vehemently disagree with.
jzb
·12 days ago·discuss
If the far-right parties they're supporting are similar to MAGA in the U.S., what they're doing is taking customer money and funneling it into a political effort to do just what you're describing - just in a different way. "We don't like groups X, Y, and Z, so we're going to fund a political effort to take their rights away by using government."

As I understand it, the Örebro party pushes for deporting immigrants and has a "Sweden belongs to the Swedes" policy that includes deportation for even those born in Sweden if their parents were born in, e.g., Somalia. So basically, "we don't like certain people, so we want to use customer money to force them out of our country". That really doesn't paint Mullvad as the victim, here.
jzb
·12 days ago·discuss
A right to say something is not the same as the right to say (and do) something without being called out on it.

He has the right to do what he’s doing. Other people have the right to react and say “That sucks, it’s against my values, I no longer trust you or want to do business with you.”
jzb
·22 days ago·discuss
This is not new. AirPods are newish, but this is not new. People have been wearing headphones in public spaces since the Walkman, if not before, in large numbers. You can probably find opinion columns bemoaning this shortly after the introduction of the Walkman.
jzb
·last month·discuss
The difference is really volume, which is the case with a lot of problems related to AI/LLMs.

Humans have always submitted crappy code. LLMs, however, do so at a much faster rate. Even the most active lousy coder is not going to be capable of submitting anything like that volume of code to multiple projects.

Humans have always been capable of social engineering and trying to sneak in malicious code. However, it's possible that as agents get better that they can do so much faster. The missing component will be compromised accounts, I think -- how many aged accounts can attackers get hold of to turn loose with agents?

Long-lived FOSS projects have tons of people who've created accounts many years ago that might be easliy compromised, but have checked out of actively participating. It's not necessarily going to throw up a red flag if a "person" shows up after a hiatus and starts contributing again.

So, there's more to it than overwhelming a single maintainer -- it's the capability to conduct a bunch of these attacks in an automated fashion if attackers can get hold of compromised accounts.

(As an aside, it's concerning that a maintainer would be pestered into accepting a questionable PR like this. I expect, though, that there are quite a few overworked people who have taken on things like Anaconda and are being measured on how quickly they close PRs.)
jzb
·last month·discuss
ISTM this developer did people a favor: He’s shown a real-world vulnerability pattern in a way that didn’t do real harm.

Odds are he’s not the first to think of this, he absolutely won’t be the last. If your agents, CI/CD pipeline, or whatever are vulnerable to this, it’s time to fix that now before something truly nasty comes down the pike.
jzb
·2 months ago·discuss
No. It’s not. It’s just that we’ve been conditioned to accept that disposable devices are the way of things.
jzb
·2 months ago·discuss
This is wonderful. I grew up watching WKRP and wanted to be Doctor Johnny Fever when I grew up. Managed to work in radio for a few years part-time, but by then DJing was “here’s a program sheet. Play these songs, exactly” - not the dream of being a DJ doing their own programming. I also realized why Johnny was always broke.

Still, very cool, and a little jealous of the on-air staff that get to work there.
jzb
·2 months ago·discuss
Um. I grew up watching WKRP. I’m in my mid-50s.
jzb
·2 months ago·discuss
Lord. I pity the managers that are going to be worrying about their jobs sitting in 1:1s with people who are also looking for answers when there really aren’t any to give.
jzb
·2 months ago·discuss
This doesn’t sound like they’ll be weaning off it, though: it’ll be cold turkey. That’s going to let wealth holders pick up more property at depressed prices and drive down wages.
jzb
·2 months ago·discuss
If they’re hosting network services, sure. I wouldn’t put vibe-coded software outside a home network, ever. But it seems low risk if people are just creating their own desktop software: especially since it’s less likely to be vulnerable to widespread malware.

(Note: I’m not an LLM fan, don’t vibe code myself at all. But I would be unconcerned about security for the kind of things I would create if I did start doing so.)
jzb
·2 months ago·discuss
“There is no poverty of information.”

Quite the opposite, in fact. But there’s a difference between the information being present somewhere, and a reasonable way to get that information in front of people in an actionable form.

We’re drowning in “information,” at present. But the mass media narratives that are most readily available distort things quite a bit for a lot of reasons. (Ratings, owner bias/interference, format.)
jzb
·2 months ago·discuss
It's only "necessary" if one accepts that the current way is the only way.

I'm not really sure what the point of encouraging new development is if the end result is "big company scoops it up and makes it shitty, but people get to enjoy it for a few brief moments before that happens."
jzb
·2 months ago·discuss
This is amazing. Page says it works on RHEL 14.3, which doesn’t exist. Current RHEL is 10.x, this must’ve been done in a TARDIS.