Viewing profile — demosthanos

There isn't, but everything that they said above is absolutely true and people who try to fight it will suffer. There is lots of flexibility within those constraints, but the const…

For what it's worth, I totally understand the motivating use case here. There were absolutely times where I walked away from what I was hoping would be an hours-long project that w…

Yes, the problem with comparing open models to open source is that open source requires humans to volunteer their time. Open models requires humans to volunteer their money. These …

The myth is that Roman concrete was 'better' and that we don't know how to recreate it. The facts are that it was not better in any way than what we can do now and we have always k…

Yes, you, too, can have two-thousand-year-old buildings if you're willing to make that longevity be the primary thing you pay for, assuming that your successors don't tear the thin…

Related, Grady Hillhouse on the myth of Roman concrete. > The miracle of modern chemistry has given us a wide variety of admixtures like superplasticizers to improve the characteri…

First: This is the general privacy policy, not the enterprise contract. I don't know what goes into the enterprise contract, but I do know that our legal department spent a very lo…

I'd like to see you try using mental calisthenics against a well-funded legal department. Let me know what the judge says.

There is a world of difference between: * A company following suit with their entire industry in choosing a very generous definition of fair use. * A company being the first to def…

You truly see no difference between having a perhaps-overly-generous definition of fair use and flagrantly breaking contracts that you signed with your customers?

There is an enormous difference between: * Exploiting ambiguity around fair use at a large scale before the law catches up and then jointly lobbying with your competition to make s…

First, I think people should buy from GoG for exactly this reason. But also, the difference is that Steam has as far as I can tell never yanked a game from someone's account and fa…

Because: 1. There are lots of things that compilers load into their memory that aren't actually source code. A memory exploit turns non-source data into executing-in-the-compiler c…

I don't think transitive definitionally means we can ignore it. Any input that I give to my direct dependencies could theoretically end up inside of its dependencies and I can't kn…

Recent and very related: Physical disc production ending in Jan 2028 for new games on PlayStation (797 comments) https://news.ycombinator.com/item?id=48745456 So Sony is simultaneo…

> Compilers are not security sensitive, usually. The compiler is one of the most significant trust boundaries we have. Its decisions can intentionally or unintentionally create vul…

In context that's clearly not what he's saying, the next sentence is this: > Zig has more features than Rust for making memory-unsafe code work correctly, and that was the area whe…

It's great that you can make your own independent apps on atproto, and you're right that I overstated the "anything on the protocol" in the analogy. Analogies are always lossy, but…

I don't think the Google comparison is doing you any favors in resolving the concern behind the category error, though. What I'm hearing is that AT is like the web if Google had st…

> I feel like we've done full circle. Languages are back to being (mostly) procedural. I'm not sure I like it, but it seems that this is what people prefer. Is this an actual shift…

Not formally, but we do informally recognize names and prioritize researchers who reliably turn up good results.

In theory, yes, but are you actually seeing clearly-garbage lower-bound reports like this? The ones we're seeing show clear evidence of being AI-generated, are often incorrect or d…

As someone on the company response side of the HackerOne brokenness, I can confirm that this effect is real but would also note that the difficulty of distinguishing is not as seve…

I don't know if all ecosystems are as bad as node is, but the node ecosystem has terrible issue severity ranking which makes infosec squeamish for no reason. Every week or so there…

The biggest consistent tell for LLM writing is when the conversation leaks through into the final prose. You read along with the text and things seem to be going fine until all of …