@bagder I have very mixed feelings about this. Yes, AI does find real bugs (turns out a lot of bugs and exploits fit common patterns, hooray humans). But I also think taking a dump of an AI conversation, or even a “summary” of the problem, and dropping it on the doorstep of a maintainer is…VERY RUDE.
It should be socially expected that a filer of a bug continue to write a succinct summary of the issue.
I tend to reject reports like this, not because the error is not real, but because increasing automation means that the bug WILL SOON BE FOUND AGAIN BY SOMEONE WITH BETTER MANNERS who will take the time to understand the problem and write a succinct paragraph to describe it. This latter filer is MY FRIEND, and someone I want to build a relationship with and reward by crediting with finding the bug.
If maintainers don’t reject slop-dumps (sorry, LLM-dumps), they will be DDoS’d by thousands of auto-filers. As AI bug reports get better, it must get easier to reject those who don’t put any effort into filing.
So today some of the worst people on earth using the most environmentally destructive tools on earth brought down a huge part of the internet by exploiting a potential problem found many years ago in PHP which was previously not practical for anyone to exploit.
It only became "practical" to exploit this problem because "AI" came along to automate the boring and repetitive work required to do so. Absurd amounts of computing power were applied specifically to break into other peoples' websites.
Now the same people who are behind this are trying to pretend that they're heroes for finding an exploit.
"AI uncovers critical vulnerabilities", their headline reads. But the vulnerability was only made to be critical by the very same people as hide behind that headline.
Many thousands of websites are offline, many people are losing money, many thousands of people are working hard to try to patch or work around the problem, many small guys are finding it almost impossible to patch, and we're all supposed to be thankful to OpenAI and others involved ? Nah. Fuck off.
Everything about "AI" involves a lot of externalized costs, but I've still yet to see even a single positive thing that has been achieved by "AI". That has definitely not changed today.
#php2shell #php #fuckai #openai
mitmproxy now has an --emudhra option 😆
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
@drahardja I am an extremely stupid man, certainly less calibre than the IA could hire, and I fixed this shit without asking *any* LLMs. Not even my local ones. Come on guys.
RE: https://mastodon.archive.org/@brewsterkahle/117481215431503956
Why the hell did they need to use Claude wtf is this brainrot
Don’t let the door hit your ass on the way out, Zuck
VOTE YES ON PROP 40
VOTE NO ON PROP 41 and 42 (poison pills on 40).
“Mark Zuckerberg considered leaving California over the billionaire tax”
#threateningMeWithAGoodTime #FuckZuck #California #YesOnProp40 #NoOnProp41 #NoOnProp42
Data centers could erase decades of air quality gains https://www.theverge.com/ai-artificial-intelligence/1015958/data-center-pollution-rising-report
eMudhra's press release tries to insinuate that AI is somehow partly to blame for their CA fuckup:
« Last weekend, an independent researcher found that the weak keys could be reverse-engineered possibly with AI-assisted techniques. »
In fact, the researcher just ran all the CA certs through an existing key linter: https://github.com/google/paranoid_crypto (not actually expecting to find anything!)
https://emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca
"The video shows a plainclothes agent wearing a red flannel shirt pursuing the man with a handgun, followed by two masked agents in tactical gear. I’m a U.S. citizen the man tells the agents as they surround him. When asked why he was running, he responds, “Because I don’t know who you guys are.” https://www.sfgate.com/bayarea/article/ice-gun-sf-citizen-22486051.php
Elderly protestor beaten up the police outside #Elbit Systems in Germany
https://www.instagram.com/reel/DewF1yTAIFJ/?psln=MWlndmhobHoweXM1Zg==
@ketan Morally this is somewhere in the ballpark of the car company promising to set "nature lovers free" when they buy the big-ass SUV and have a blast running it roughshod all over the woodland and prairie. At some point the driver stops, gets out and pets a small plant, then gets back in the SUV and floors it. This was from ~20ya.
@ketan I think it overstates the quality of AI, it's not going to rise above the level of the mediocre white guy, merely equal what's expected of someone of his ability. His co-worker presumably will have done an incredible amount of work just to get what he got given racial underestimations and all and without AI or stealing someone else's glory out of pure envy and inferiority.
@ketan It’s so revealing that every office-work AI ad seems to endorse the worst asshole behavior in people. Utter neglect, then taking credit for someone else’s work, then bullshitting your way through, all while not caring about the work product, all for the grand goal of making an extra dollar or winning corporate praise…just the worst aspects of humanity.
The first genuinely honest ad for generative AI I've ever seen, from Microsoft / CoPilot
A mediocre white guy sees his non-white colleague getting praised for good work, he asks AI to *literally copy it*, and then he gets all the praise instead:
#ShlaerMellor, #FunctionPointAnalysis, #punk, #environmentalist, #unionAdvocate, #anarchosocialist #freeSoftwareAdvocate #cooperativeLife #noLLMs
"with a big old lie and a flag and a pie and a mom and a bible most folks are just liable to buy any line, any place, any time" - Frank Zappa