61–70 of 83 posts
With so much cloud being at risk from AI now, soon or in the future, it seems like self-hosting or at least managed custody of your own gear is going to become more of a thing.
Is the idea that self hosters tend to make less security mistakes than the big hosting companies?
[flagged]
I'm mostly investing in China these days too. Remember that they have no soul and only do this as long as it is beneficial to them to appear that way (liberal, democratic). Same for the US. This is how the game is played.
Earlier quoted context omitted.
We actively take it for granted in the US AND we’re actively watching it slip away. No one seems to give a shit.
There's an alternative viewpoint: democracy is experiencing a revival. The old "cathedral-style" democracy is dying. People are seeing that the "regular" politicians are just ineffective and kinda boring. The old party-based structures are stifling and prevent changes. People want more direct participation in the governance. So people are voting for a "new wave" of candidates that promise to work around the old insti…
Mamdani is NOT doing the same nor like Trump. For all the scaremongering, he is pragmatic politic with policies full of compromises.
There ia no symmetry between what those parties do.
It's one thing to forget an Authorize attribute. That's a coaching event and procedure update. It's another altogether to not be able to see a dormant use-after-free bug because your brain can't hold the entire codebase and product roadmap at once. You can't coach a human developer on that. We all miss things this deep in the rabbit hole. The 2nd best option is to avoid this space of possibilities altogether.
Earlier quoted context omitted.
Mythos actually does change that calculus. Going forward, with access to a mythos caliber llm actors are not tied to bad configs or lazy admins for access. I get that the bs is real. But it's important for you to not rest on your laurels having recognizing that salesmen sell. You actually have to pay attention to and understand the new developments your field. It's sad that the marketing department odd doing a better…
Mythos finds exploits largely by reading source code. Your open source dependencies may need to be version bumped quickly, but most companies are not going to be immediately exploitable without a large scale source code leak, and an attacker motivated to spend large amounts of money/compute on finding lucrative exploits (not just any exploits). To me the reaction has been way overblown, though again, very real for la…
Earlier quoted context omitted.
Is the idea that self hosters tend to make less security mistakes than the big hosting companies?
the idea is that you don't have half of all companies all share the same liability of a single cloud provider who is half-arsing it because of their monopoly position.
The fear porn around this all has been horrible. I work in Cybersecurity and Mythos is all the vendors will talk about because they want to sell something. It started the day of the announcement which is what told me it was all BS. They had no information about it yet would happily tell me about all their solutions for it. Anyone in my profession worth a damn will tell you the vast majority of security issues are rel…
Earlier quoted context omitted.
Anthropic losing their ability to release new models to most customers (and thereby revenue, and thereby ability to train new models) makes you think investors will value it more highly than if they could release new models to everyone who wanted to pay them?
Since training/inference/datacenters are a money sink (as you can read in any financial insights of anthropic, openai, etc.) having more customers might actually be detrimental. Just look at the consumer side: the current attitude of most people is they'd rather not pay the actual cost of the LLM they're using. Therefore the big money is probably in an IPO by boosting your product to be so unfathomably potent, it mus…
That could only be true if serving inference to customers was the least profitable part of the business, and that the training side of the business was the more profitable side of the business? Otherwise unless their huge fixed training costs get cheaper if they lose customers, it's only going to be worse?
Earlier quoted context omitted.
Mythos actually does change that calculus. Going forward, with access to a mythos caliber llm actors are not tied to bad configs or lazy admins for access. I get that the bs is real. But it's important for you to not rest on your laurels having recognizing that salesmen sell. You actually have to pay attention to and understand the new developments your field. It's sad that the marketing department odd doing a better…
Mythos finds exploits largely by reading source code. Your open source dependencies may need to be version bumped quickly, but most companies are not going to be immediately exploitable without a large scale source code leak, and an attacker motivated to spend large amounts of money/compute on finding lucrative exploits (not just any exploits). To me the reaction has been way overblown, though again, very real for la…