You act like the existing packages being published in this ecosystem aren’t already slop or quickly getting there.
We already do cooldowns and disable preinstall and postinstall scripts on all packages except for ones that actually require it.
I bet if you looked at 70% of your dependencies pulled in, you would be horrified. I would rather have that capabilities via code in my repos at this point.
I am actually pushing our frontend devs to remove more and more dependencies and leverage LLMs to just write the code instead of all the dumbass packages in hellscape of supply chain attacks via node/npm.
Back during the Iraq war, it even applied to civilians who deployed into the war zone. I had to get yellow fever and smallpox. I was just a software engineer that worked for the navy, but I had to do so I could go do my job over there.
At my job we have tooling that scans our code repos with Opus. Yes it can find stuff however it doesn’t find everything.
I am able to get Opus and Sonnet to function as a red team agent. We don’t have some crazy special sauce, just a lot of trial and error. Basically add enough context proving we own the code and running services that it will run attempts to compromise our services.
It found tons of stuff that was not found with just scanning the code. It found serious security issues that had been in productions for years that humans never found. They weren’t things that were accessible externally but serious enough that we are thrilled to have these tools.
I can say that Fable did refuse to function with our harness. I am worried that soon you have to be in the special club to do this stuff with the SOTA models. A small company like ours doesn’t get accepted to their programs that remove guardrails. Even though our CEO has found and disclosed vulnerabilities to multiple companies and holds a patent around federated authentication.
Personally, I always found it interesting that people called it hallucinations.
I have two kids. My youngest is a person who everyone has met. Yes, I am trying to work on this shit with him but people would say he is one of those people who is confidently incorrect.
My youngest will just bullshit through any topic and a lot of the time he thinks he is correct.
I personally think just stating shit as fact when you have no idea is a common issue with NNs.
Drives me crazy because both my kids have heard me say, “I don’t know, we will have to go look it up” more than I have an answer. Because I don’t do it. But fuck if my youngest won’t just make shit up instead of saying he doesn’t know.
LLMs are asked a question so they are gonna give you an answer just like many humans whether they have a clue about what they are talking about or not
Look, I can’t tell you what will work for you. My wife and I just made the kids adapt to our lives. We keep doing the same shit we always did. Concerts, they go with us. Breweries, they go. Don’t get It twisted, they were expected to behave. Kids pick up fast. Now my 17 year old and I love going to shows together. We are legit besties.
We just integrated the kids into our existing lives.
Hold up. Look, this is all shades of grey but saying Chinese labs all release open weights stuff is kinda crazy thing to say.
Right now they are doing that because they are still trying to catch up to Anthropic, Google, and OpenAI.
The moment they have the special sauce, they will shut it down and you won't be able to run their stuff anymore outside of them. Why do I say that? We already have the evidence in the diffusion model arena. All the chinese labs were pumping out open weights models for image and video, the moment they got to SOTA, they stopped doing it. Less and less is being released.
Chinese companies aren't doing open weights models out of the goodness of their hearts, they are doing it because it help their entire industry catch up. Don't get it twisted, this is very much a US vs China battle here. China wants to win and I am not sure how they won't. Deepseek is the first major large model trained on Huawei chips. It won't be the last and I am betting that China will make up for lesser performance of those chips with more manufacturing and power generation.
I am very bullish on China winning the AI war here. But I also am not naive enough to think that the Chinese companies is doing open weights out of wanting to make the world a better place or the goodness of their hearts. It undercuts the american AI companies.
I am trying to take this in the more giving way possible, anyone remotely considering that subscription should go on reddit and see all the people experiencing outages constantly and insanely slow speeds when it does work.
I have been wanting to subscribe but based on how awful the experience is for most people, I just can’t pull the trigger
I would like to see the "increasing" body of evidence pointing towards traditional vaccines.
My wife has an autoimmune disease. Most all the evidence points towards gut biome but that shit is super complicated. We have very little research into what our gut biome needs to be.
I would also mention, just general auto-immune diseases. I would be very worried this could trigger those in people who wouldn't have gotten one otherwise.
Correct, it will be about silencing any opposition against this administration. OpenAI will be happy to let their models be used to persecute, kill, and destroy american democracy if it lines Sam's pockets.
When the first 10 results on Google are AI generated and Google is providing an AI overview, this is an issue. We can say don’t use Google but we all know normal people all use Google due to habit
We were buying a sailboat(we actually did it). Wife got diagnosed with cancer. We talked with doctors about treatment, felt confident with catching it so early.
Purchased the sailboat, we live on the sailboat with our two kids, two dogs, and two cats, 6+ months out of the year.
What you can't plan for is shit that happens on land. We came back in June 2025, my wife was stopped at a red light and got rear ended by a dump truck. That has put a pause on our sailing life. But we should be getting back out there soon.
I wouldn't argue we should roll this out to everyone. But I am glad it exists. I commented earlier in this topic about how it caught cancer in my wife at the age of 44. She didn't have to go through chemo or radiation treatment because it was caught so early. Surgery removed the whole cancer.
Additionally for me, I have a scan that shows what my body currently has. I had something show up that I did get a scope to check out that was a pancreatic rest. No big deal. Now, if I ever have another MRI and somethings is somewhere else, we have a baseline to compare against. Everything is a risk calculation. When I did my MRI, I also had other procedures done like a heart calcium score.
I will get a little more personal. We didn't do it out of the blue. My wife and I decided we want to live on a sailboat. That was a big purchase for us and boats take a long time to sell. We didn't want to commit to such a purchase then 1 year later find out either of us had cancer then we have the stress of cancer and the stress of trying to sell a boat.
I would never suggest everyone do it, but I am happy we did.
Yep, I have experience with both. It found cancer for my wife and she was able to treat it immediately. Fully recovered.
It found a weird spot on me that turned out to a pancreatic rest.
The only reason we did the scans were because we were making a significant life decision that we didn’t want to have to backtrack if either got diagnosed with cancer within a year . We knew nothing was guaranteed but we wanted to do some tests.
Just a high level question. My youngest son was adopted. He isn't white. He is naturalized. Should we go ahead and renew his passport so he can carry around a passport card at this point(we never got one in the past because they seemed like a waste). It seems crazy but with people being grabbed off the street for being brown, it seems prudent have a quick way to prove citizenship.
You forgot to mention it is also tied to provable namespaces. People keep saying that NPM is just the biggest target...
Hate to break it to you but from targeting enterprises, java maven artifacts would be a MASSIVE target. It is just harder to compromise because NPM is such shit.
Had an EV since 2018, range is never a concern.
My only concern is that traditional American car manufacturers still suck at making EVs.