David Chisnall (*Now with 50% more sarcasm!*)

@david_chisnall@infosec.exchange
2.7K Followers
86 Following
7K Posts

I am Director of System Architecture at SCI Semiconductor and a Visiting Researcher at the University of Cambridge Computer Laboratory. I remain actively involved in the #CHERI project, where I led the early language / compiler strand of the research, and am the maintainer of the #CHERIoT Platform.

I was on the FreeBSD Core Team for two terms, have been an LLVM developer since 2008, am the author of the GNUstep Objective-C runtime (libobjc2 and associated clang support), and am responsible for libcxxrt and the BSD-licensed device tree compiler.

Opinions expressed by me are not necessarily opinions. In all probability they are random ramblings and should be ignored. Failure to ignore may result in severe boredom and / or confusion. Shake well before opening. Keep refrigerated.

Warning: May contain greater than the recommended daily allowance of sarcasm.

No license, implied or explicit, is granted to use any of my posts for training AI models.

We need more AI!
This is your regular reminder that if you are the smartest person in the room, go find another room. You are not going to run out of people or rooms.

Just a reminder that I reported to home assistant that it was creating ZigBee networks with a single key, and they didn't issue a security announcement or anything like that.

So that's what type of security that you can expect from HA.

Dear journalists writing about AI being the end of programming as a profession:

Programming has a long history of embracing tools that make things more productive. The manual for the STANTEC ZEBRA explains that a limitation of 150 instructions is not a practical problem because no one could possibly write a working program that complex. Today, we routinely write programs several three orders of magnitude more complex than that in an afternoon. Higher-level languages have increased programmer productivity by literal orders of magnitude. Things like integrated debugging environments, reliable autocompletion, higher-level type systems, and so on have all been embraced because they let you solve the problems faster.

Note that they don’t all let you write more code quickly. Most of the improvements in productivity have had the opposite impact. They don’t let you write code faster, they let you write less code to do the same things. This started with libraries of reusable code and simple abstractions like functions and has grown over time. I can write a simple dynamic web page in a couple of lines of PHP, where doing the same thing in the assembly languages that the ZEBRA folks were talking about would require me to write thousands of lines. The PHP version would be more portable and also vastly easier to adapt to changing requirements.

At the same time, there are far more problems that need programs to solve them than there are people who can write programs. If programmer productivity doubled tomorrow, there would not be enough programmers. If people who can’t program were all suddenly able to program at the level of a first-year undergraduate tomorrow, there would still not be enough programmers. And that’s why our industry puts so much effort into end-user programming languages. That’s why the most successful programming language, with over a billion users, is Microsoft Excel.

With all that in mind, don’t you think that the fact that most programmers need mandates from management to use bullshit generators to ‘help’ programming might be an indication that the hype isn’t all it claims to be?

it's not that I despise LLM generative AI. It's that I despise the way that Big Tech billionaire CEOs are stuffing it down the throat of society with no obvious concern for the immense damage they're doing.

Excellent news yesterday, the #CHERIoT RTOS paper was accepted at SOSP!

Huge thanks to @hle, who led on rewriting the rejected submission and made numerous improvements to the implementation.

We now have CHERIoT papers in top architecture and OS venues, I guess security and networking are the next places to aim for!

#CHERI

A very “surprising pattern” that people don’t want to use fucking shit that doesn’t fucking work and depends on stealing people’s work and fucking lighting the mother-fucking planet on fire while feeding their fucking money into the greedy throats of billionaires.
how to make your product more stupider in 2025? 🤣 via https://github.com/Calvin-LL/CalcGPT.io
@iximeow jfc it's bad now. slightly wrong search term and it just fantasizes freely. god I hate this.
The latest #Mastodon update appears to have made the navigation bar on the right remain in its fully expanded form on a tablet in vertical mode, reducing the space for the actual posts by about a quarter. Is there a setting to revert that to the previous (much more sensible) behaviour?
×