Glyph

@glyph
7.1K Followers
336 Following
34.1K Posts

he/him

You probably heard about me because I am the founder of the Twisted python networking engine open source project. But I’m also the author and maintainer of several other smaller projects, a writer and public speaker about software and the things software affects (i.e.: everything), and a productivity nerd due to my ADHD. I also post a lot about politics; I’d personally prefer to be apolitical but unfortunately the global rising tide of revanchist fascism is kind of dangerous to ignore.

postshttps://blog.glyph.im/
disclosureshttps://blog.glyph.im/pages/disclosures.html
codehttps://github.com/glyph
patronshttps://www.patreon.com/creatorglyph
It's difficult for me to talk calmly about companies that are excited to spend hundreds of millions of dollars training stochastic models while the teachers in every public classroom in North America pay for their own chalk, some of their students' school supplies and some fraction of their students' lunches out of their own pockets. That those companies go on to say this will make the teachers "obsolete" is too much.

I think I’m noticing a trend with English words:

  • “cool” used to mean “a bit cold” but now it mostly means “good”
  • “awesome” used to mean “inspiring awe” but now it mostly means “good”
  • “fantastic” used to mean “fantastical” but now it mostly means “good”
  • “incredible” used to mean “unbelievable” but now it mostly means “good”
  • “amazing” used to mean “inspiring amazement” but now it mostly means “good”

RE: https://thepit.social/@peter/116376219055579156

I know a lot of people, in software and otherwise, who are feeling things along these lines.

Hold on, whatever tools you’re using, just hold on to your sense of purpose and meaning. There are a lot of forces at work in this world that want to rob you of that. Your feeling of losing that is not recognition of some new fact of our reality; it is you experiencing a psychological weapon.

DuckDuckGo has a handy feature called "bangs," where you can turn anything you type into your browser's address bar into a search of a specific site just by tacking on a special code associated with that site starting with an exclamation mark. This saves you a lot of clicking around.

You just have to be careful to use the right bang code. !mw, for instance, will pipe your search through the Merriam-Webster dictionary, which is useful all the time. But if your finger slips and you type !me, your search will be piped through the Mass Effect fan wiki

so it cost anthropic $20k to find this openbsd crash bug which amounts to putting a negative integer in a tcp field where a negative integer was not expected by the c code which does some cavalier int cast bullshit, ie. a vuln which is totally fuzzable, and quite certainly would have been found by the fuzzers of the 2010s had anyone cared to burn that much compute on fuzzing openbsd.

The difference today is not that anybody suddenly cares about investing that much in openbsd (is the build server still a donated machine running in Theo's basement?), but that openbsd's reputation for security makes it really good marketing if you can find a bug, any bug, it doesn't matter; and that marketing value is what makes it worth spending $20k on fuzzing.

to be clear many dear friends have said this in an attempt to be fair. I do not wish retroactive violence upon anyone for having made this error. I just want this to set a baseline for future discussions so everyone knows they can’t do it any more
here’s the “AI regulation” that I want: if anyone proposing utility for an AI tool utters the words “I could imagine…”, a big cartoony boxing glove on a spring needs to pop out of a box and punch them through a wall
Farmers won their right-to-repair fight against John Deere. The settlement includes a 10-year “agreement by Deere to provide ‘the digital tools ​required for the maintenance, diagnosis, and repair’ of tractors, combines, and other machinery”. https://www.thedrive.com/news/john-deere-to-pay-99-million-in-monumental-right-to-repair-settlement
John Deere to Pay $99 Million in Monumental Right-to-Repair Settlement

The ag manufacturing giant will also make digital diagnostic, maintenance, and repair tools available to third parties for 10 years.

The Drive

Python Tip #99 (of 365):

Don't convert pathlib.Path objects to strings

Using a pathlib.Path object in an f-string or a print call is fine and I do this often.

But if you THINK you need to convert a pathlib.Path object to a string to pass it off to some other path-handling utility, you probably don't need to. Most path-handling utilities in Python support pathlib.Path objects just fine.

#Python #DailyPythonTip

Bruce Schneier was on today's edition of The Tech Report, talking about the newest wank out of Anthropic.

He made a claim that he'd seen researchers compare the asserted performance of the new model (in the "system card" etc.) against previously-available models, and they were performing at about the same level (finding the same vulns, it sounded like).

Does anybody know what research he was referring to?

EDIT: FOUND! https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier

A web search is not pulling anything up for me, because the infosphere is currently flooded with credulous repetition of Anthropic's marketing materials (and I have no reason to believe those aren't just lies)

AI Cybersecurity After Mythos: The Jagged Frontier

Why the moat is the system, not the model

AISLE