yusefnapora

hace 14 díasdiscuss

The proposed bill would still allow you to choose to be on-call. Your boss just has to compensate you for your time explicitly when it falls outside of agreed hours, instead of getting an implicit claim to your entire life by virtue of your employment agreement.

yusefnapora

hace 16 díasdiscuss

Presumably Suzie also serves the people in her community who want tanned skin but don't like the sun. A data center offers nothing of value to the community it's embedded in - neither jobs nor any useful product or service. All the benefits accrue to the owners, and the very real costs are paid by the people breathing in the fumes from the gas turbines, or paying an extra hundred bucks a month for power.

If you don't understand why people don't want them, you're probably trying not to. It's not that hard.

yusefnapora

hace 28 díasdiscuss

[dead]

yusefnapora

hace 28 díasdiscuss

No one is "making things insecure" here - it was already hopelessly insecure by design. The author is just revealing the uncomfortable truth.

yusefnapora

hace 28 díasdiscuss

> ensure this doesn't happen again with more deliberate and effective prompt injection

How can this possibly be accomplished? Even if every actor in the open source world with good to neutral intentions decides that this is anti-social behavior, that does absolutely nothing to secure your system against people with bad intentions.

A system that pulls in arbitrary unstructured text input and treats it as trusted instructions is insecure by design. Asking the entire world to sanitize your inputs for you is a choice - good luck with that.

yusefnapora

hace 28 díasdiscuss

The project README has explicitly asked users not to use LLMs for years before adding this "malware" to the output. Since LLM users seem incapable of understanding consent, apparently a more firm reminder was needed.

As mentioned in the blog post, if your system is susceptible to this kind of "attack," what is your plan when someone with actual malicious intent gets involved?

yusefnapora

el mes pasadodiscuss

As mentioned in another comment, it's even more clear cut in this case. They actually put the original git sources in their project repo and instructed the agent to use it as the "source of truth".

Simple thought experiment. If you handed this same agents.md file (https://github.com/gitbutlerapp/grit/blob/main/AGENTS.md#sou...) to a human software developer and let them work on exactly the same goal, would their output be considered a derivative work?

yusefnapora

el mes pasadodiscuss

You consider it a malfunction for your system to not accept and execute untrusted inputs? And now it's the responsibility of _every program that produces text output_ to tailor the output so as not to cause you problems?

I feel like I'm taking crazy pills here. Time to log off for a while, I guess.

yusefnapora

hace 3 mesesdiscuss

Unfortunately, it seems that few of the people willing to pay money for software development actually care whether you understand the code or not. Unless it breaks in a publicly embarrassing way, of course. Then "you own the code" and the sacrificial human in the loop can be dredged out to take the blame.

All the incentives nudge you towards less and less critical evaluation of the output. The results of careful evaluation are much harder to measure than "this guy is cranking out 10x the code compared to last year!" And while you were busy thoughtfully internalizing the output, the guy next to you has been letting Strega Nona's pasta pot go brrr and spew another thousand lines of spaghetti on top, ready for you to review. Eventually "lgtm" becomes the default, and "do you want me to go ahead and implement that for you" starts sounding like the only way to keep your head above water.

yusefnapora

hace 11 mesesdiscuss

Parallels is quite good - I can watch 4K YouTube videos at 60fps with no noticeable frame drops on an M1 Pro, and general desktop animations, etc. are fine. That said, I do occasionally get rendering glitches, usually in Firefox where a small rectangular portion of the screen will briefly flash black while scrolling quickly through a page.

The biggest quality of life issue for me personally is the trackpad. Although support for gestures and so on has gotten quite decent in Linux land, Parallels only sends the VM scroll wheel events, so there's no way to have smooth scrolling and swipe gestures inside the VM, so it feels much worse than native macOS or Asahi Linux running on the bare metal.

yusefnapora

hace 7 añosdiscuss

If you don't mind spending a few bucks on a third-party tool, Better Touch Tool (https://folivora.ai/) will let you map two or three finger swipe gestures to control volume and brightness. This lets you adjust either without having to look at the touch bar and find the virtual button. It's still a slide instead of a press though, which takes a little getting used to.

comments