Soatok Dreamseeker

@soatok@furry.engineer
7.3K Followers
2.2K Following
7.1K Posts

He/him. Gay/demi dhole (Cuon Alpinus) furry.

Blogger, programmer, security engineer, cryptography nerd. 30+

Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)

I don't represent any company, individual, or community.

Pronounshe/him
FursonaDhole
OrientationDemi/Gay
Websitehttps://soatok.blog

Booking.com just tried scamming me into paying 400€ more on a hotel just because I opened the page when signed in with my existing account. Opening the same page from a fresh session and *then* signing in gives me the discount again.

So make sure to search for your hotels without signing in first, I guess... or don't use booking.com - but let's be real, it's not like other sites don't do the exact same thing.

I hate this.

Interesting observation.

This is from Israel's oldest paper. This is Israeli media reporting these war crimes and genocide in broad daylight.

You won't see this in American corporate media. They've continued to ignore this, enable this, even justify this and cheer it on.

Do not look away. This is genocide. This cannot stand.

Okay, Mastodon, I need your help. I know all y'all work in tech way more than I do.

I'm interviewing for a job, and it's primarily programming things like show controllers and everything that I'm really good at.

But, one of the things they're looking for is some front-end web stuff, react specifically.

Realistically, if I said I was okay at it could I cram and get halfway proficient before my start date in 12 weeks?

Golang is unusual because in most languages the type system tells you when you made a mistake, but in Golang the type system tells you when Rob Pike made a mistake.
Difficult hostage situation!!

πŸ• smarage, martini_snowfox
©️ CC BY-NC-SA 4.0, finnley.dev/license
πŸ”— www.fxfurtrack.com/p/1040461

#furry #fursuit #photography #fursuitfriday
I spent a couple of hours yesterday getting Audacity building, reproducing and diagnosing the bug, and wrapping my head around the complex logic in this part of the code so that I could implement a correct fix. To have copilot review my work, which I contributed back for free, is just so incredibly disrespectful to my time and effort.
You know back in my day, we had static analysis tooling that would give you exactly this kind of feedback, except it was correct. Now we have shit which only looks at the vibes of the source text and does no semantic analysis whatsoever, so of course it's just fucking wrong

Sent a pull request to Audacity fixing a crash bug I'd been running into frequently. The cause was an out-of-bounds memmove. Classic C++ areas.

Anyway I got a fucking copilot review on my PR which left two comments, both completely wrong, one of which suggesting I reintroduce the out of bounds memory access. I'm furious!

@abacabadabacaba @soatok yeah, I’d second the idea to explicitly not allow multiple recipients for this scheme. KCI seems a bit of an edge case for a two party system, but allowing any member in a multiparty group to spoof any other member seems like a bit of a cliff. Unfortunate that schemes like MLS have to pull in signatures for this and can’t just use something similar to Noise_K.
Γ—

Sent a pull request to Audacity fixing a crash bug I'd been running into frequently. The cause was an out-of-bounds memmove. Classic C++ areas.

Anyway I got a fucking copilot review on my PR which left two comments, both completely wrong, one of which suggesting I reintroduce the out of bounds memory access. I'm furious!

You know back in my day, we had static analysis tooling that would give you exactly this kind of feedback, except it was correct. Now we have shit which only looks at the vibes of the source text and does no semantic analysis whatsoever, so of course it's just fucking wrong
I spent a couple of hours yesterday getting Audacity building, reproducing and diagnosing the bug, and wrapping my head around the complex logic in this part of the code so that I could implement a correct fix. To have copilot review my work, which I contributed back for free, is just so incredibly disrespectful to my time and effort.
@hailey You could close the PR if you don't want to deal with refuting a bullshit generator.

@be @hailey Except that would mean the bug is still there.

And someone else may claim to make the fix, but apply the exact same reversal that Copilot insists is better without understanding why it doesn't fix the issue.

@be @hailey I would delete it so they cant easily reuse the free contribution.
@hailey And they're doing it because they believe that if they keep spamming the programming community with this bullshit enough, it'll eventually learn to code itself better and then ✨✨✨magical AGI bullshit heaven!!!✨✨✨

@hailey Not to self promo but we're working on rebasing off Audacity 3.7.4 (without the Muse stuff) and chances are we likely have this bug on our rebase branch. If you want to help us with our rebate efforts we'd be happy! No CLA and AI are involved too!

@gperson will be happy to help you with anything too. Just ask him and he'll help you out the best he can! (That's me writing this too. Hello πŸ˜„πŸ‘‹)

@tenacity @gperson I had already planned to send this fix across! I wasn't aware of the muse drama or Tenacity until today but I'll be switching over going forward :)
@hailey @tenacity for the uninitiated, what was/is the muse drama (if someone has the time to answer this or point me in a direction)?
Basic telemetry for the Audacity by crsib Β· Pull Request #835 Β· audacity/audacity

Please, see our response: #889 Dear all, Due to the large amount of worry about this PR, (which we completely understand), we want to clarify exactly what is going on: Telemetry is strictly optio...

GitHub
@crypticcelery there may have been additional happenings that im not aware of, but the main ones are that they introduced a CLA that would (i believe) hypothetically let MuseCY Holdings make proprietary releases based on the currently GPL codebase, and that they have had a couple kerfuffles with regards to privacy policies and telementry (which, imo, the reaction was more negative than would usually be warranted, probably in part because of the lack of transparency of MuseCY)
@jaxter184 I did not know about this, just the dumb analytics controversy. Welp, guess I'm going back to refusing to use Audacity.
@tenacity @gperson btw I would be interested in contributing some work to move the processing for the spectrogram view off the UI thread to keep the UI snappy and responsive (it currently chugs a bit while h-scrolling with spectrogram on), but since this is a larger piece of work + I see that Tenacity is in the middle of an upstream rebase effort, I wanted to check in first to see what kind of appetite there would be for accepting such a change. Let me know!

@hailey @tenacity I'd say go for it! Just keep in mind that we'd merge it after the rebate is complete, so maybe create the PR once it's all done and then we'll go from there! πŸ˜„

If you'd like to help us out with the rebate effort, you can port our dynamic compressor over. Just that plus the Matroska exporter are what we need left, which I'm handling the exporter right now. (There's also a few other things but these are the major things that need taking care if).

@gperson @tenacity should I base it off the rebase branch or main for now?
@hailey @tenacity Base it off the rebase branch ('audacity-3.7-rebase'). That way, it's less work done when we ultimately merge that branch back into main.
@hailey @tenacity Right now I have the default branch as 'audacity-3.7-rebase' as that's where active development is happening. Eventually, I'll merge it back into 'main' where normal things will continue.

@gperson @hailey @tenacity great to see this, for once things are working as they should:

(1) some "bigh tech" thing behaves in a way that is disgusting and unacceptable
(2) people move away from that awful thing to something better, in this case @Codeberg

πŸŽ‰ πŸ˜„

(I mean, too often it's like "this big tech thing is truly horrible. Now I'm going to keep using it as if nothing happened".)

@tenacity @hailey @gperson hi, does tenacity use conan still?
@strlcat @tenacity @hailey Tenacity has long gotten rid of Conan. Instead, it uses vcpkg on Windows, macOS, and Linux. Most modern Linux distros can build Tenacity fully featured just fine, so you don't need vcpkg on Linux.
@tenacity @hailey @gperson niice!! Great work and much appreciated! I just built it on my Slackware RISC-V and it works, and no conan is required! ❀😻
@strlcat @tenacity @hailey Wow! Did you have any issues? That's pretty awesome that it just built successfully! πŸ˜„
@gperson @tenacity @hailey well, the sound is heavily garbled, which I suppose because the system uses Slackware defaults, e.g. runs pulseaudio, and Tenacity says it outputs sound through ALSA via PortAudio. But this might be just because that machine is slow. I will try to build Tenacity on my gaming laptop today or tomorrow (I think there's no wxWidgets yet)
@tenacity @hailey @gperson okay quick update, I killed pulseaudio, redirected to pure alsa, and only after selecting my actual sound card it worked. Idk if software like Tenacity requires exclusive access to sound card by default, but at least it works there

@strlcat @tenacity @hailey Tenacity doesn't need exclusive access to your sound card, but in this case it seems to have worked better since PulseAudio is out of the way.

Fun fact: if you build and use a recent development version of PortAudio, Tenacity will support PulseAudio directly. You can experiment with that if interested, but I haven't tried that.

@gperson @tenacity @hailey issue fixed! I built latest portaudio, and it works flawlessly! I played with some effects, no problems found. Tenacity runs on riscv64 machine perfectly well.

@strlcat @tenacity @hailey This is very great news! It also seems that Tenacity could perform better with direct PulseAudio support in PortAudio, so that's going to be great when PortAudio 19.8 is out!

This is also exactly what we intended! We want Tenacity to be buildable across a wide variety of platforms and architectures without issue! Granted, we still have work to be done with that too, but it's very great to know Tenacity works on Linux RISC-V! Hooray! πŸ₯³πŸŽ‰

@hailey The only reason I keep my github account alive these days is to stick solidarity emotes on other people’s issues and comments. I should be surprised that the audacity committers are like this, but I’m really not.
@hailey I don’t blame you for being furious, all of this is absolutely appalling! 
@hailey oh, for sure. extremely disrespectful.

@hailey I can relate so much.

It is called social coding for a reason. Learning from each other and being nice to each other is so much part of PR work.

@hailey
Is aishittification a word yet?

@mcorbettwilson @hailey I call AI "Artificial Incompetence." Once in that mindset, I have rarely been disappointed.

Those so-called AI systems keep making the kind of mistakes that would get humans fired.

@mcorbettwilson @hailey No but i'd happily propagate it.

Also pretty sure i'm going to use AI for complicated 3D printing model generation.

But in term of video and images the glossyness, sepia and utter lack of humor make AI ever so boring.

No worries, Robert Crumb is still King.

@mcorbettwilson
It certainly should be! πŸ‘Œ
@hailey

@hailey

hey at least the team didn't send you an email threatening to get you deported to China

https://github.com/Xmader/musescore-downloader/issues/5

(musescore and audacity are owned by the same company)

How to respond to the takedown request email? Β· Issue #5 Β· Xmader/musescore-downloader

Hi, I'm Musescore developer. You need to takedown this repository: https://github.com/Xmader/musescore-downloader and any other your public repositories with same code. Because you illegaly use our...

GitHub

@guenther @hailey

The more I read into the Copilot stuff and the API stuff, the shadier it gets.

This is really sad, because I feel like @tantacrul (their Head of Software) is really very critical of exactly this kind of late-capitalist nonsense.

@teun I don't care what he is supposedly critical of. If your company threatens to deport people, that crosses a line.

(Also the entire analytics/privacy shitshow where they tried to forbid people under 13 to use Audacity (because children cannot legally consent to their data being collected) and Audacity's license change from GPL to MIT.)

But the China thing is just a whole other level of moral bankruptcy.

@hailey

@guenther @hailey

I fully agree. I'm just saying that I cannot quite put these different things together in my head. I hope they will do something drastic in response to this because it doesn't look good.

@teun nah, look at the dates in that github thread. happened five years ago, nobody cares.

@hailey

@hailey such a strong feeling of deja vu from this thread
it has happened before and it will happen again ;n;

@hailey

Why the fuck is the Audacity team using copilot?

@hailey is it ok to take your screenshots and put it on LinkedIn to dunk on AIs.

I promise I will write an alt text on the image, and can remove your username if you rather not have it visible.

Happy to hear that no, you don't want me to do that (this is why I ask!).

@hailey Your rage is both magnificent and eloquent! πŸ‘Œ
@hailey replacing the compiler with sentiment analysis
@jcoglan @hailey I refuse to accept Sentimental Code Analysis as an overload for SCA (Static Code Analysis, Software Composition Analysis).
@hailey static analysis was much better but it did not (does not) have correct output... You can absolutely confuse it with several valid code patterns (the one my company uses gets confused with using unique pointers for cleanup functions). But it was at least much better than that garbage
@hailey god daaaamn this is true
@hailey the static analyzers gave 99% false positives so ... just ignore it all.

@hailey For example the Masterscope static analysis tool of Interlisp which still runs nicely on Medley Interlisp:

https://files.interlisp.org/medley/library/MASTERSCOPE.TEDIT.pdf

In the 1970s it could answer queries such as these (and didn't make stuff up):

. IS FOO BOUND BY ANY ON PATH TO ’PARSE

. WHICH ENTRIES OF ANY CALLING ’Y BIND ANY GLOBALVARS ON ’FOO

. WHO SETS ANY BOUND IN X OR CALLED BY Y

@hailey And those static analysis tools took many years of research and engineering to solve the issue of false positives.

Meanwhile, an LLM being wrong 90% of the time is no concern at all.