• 0 Posts
  • 15 Comments
Joined 3 years ago
cake
Cake day: June 20th, 2023

help-circle
  • I actually do think that someone who already has multiple decades of experience in programming without using AI is probably not producing shoddier code after incorporating it into their workflow

    While it’s not impossible that someone like that exists, the number of times I’ve seen someone push LLM generated code that LOOKS okay on a first glance to experienced eyes but turns out to result in things like the code as a whole suddenly ignoring all permission groups and just letting everyone through in one particular area, or allowing directory traversal, or injection, or any number of otherwise rookie mistakes is high enough that everyone, especially programmers with decades of experience should be extremely concerned.


  • use an LLM to assist in coding properly

    This is categorically impossible for any ways in which the LLM could reasonably “assist”.

    Putting aside any potentially elitist definitions of the word “properly” and simply taking it to mean “code that functions and isn’t malware”, you’re stuck with the same modus operandi you get copy-pasting snippets from stack overflow and hand editing them to fit your codebase.

    To wit: you still need to go over every single bit of code to determine whether or not it’s safe to include in your existing codebase, and unlike stack overflow, output from an LLM isn’t being simultaneously examined by other experts for flaws at the same time you’re looking at it.

    We need to stop treating LLM’s like they’re in any way a “robot programmer”.

    They are database reorganization engines

    (data lake of indexed, ingested material)

    with a static output style

    (resemble human speech patterns)

    that is specifically, deliberately written to deceive about its own capability and purpose.

    (speak with confidence, which is a thing that a script or a program cannot have, as though it is performing a specific requested task and not just vomiting up the contents of its proverbial shelves because someone handed it an hand crafted index card that menrions a few things from the card catalog it uses)

    There should be no place for that in programming.



  • The vast majority of computer users with those kinds of issues are

    1. probably using windows home
    2. On a big box store computer with a platter drive
    3. an i3 cpu
    4. and 8gb of ram

    windows 10 couldn’t reliably run it’s own bundled software (Mail), by itself, with nothing else open, without that one app going “not responding” every few minutes on a computer with those specs.

    Last time i checked, Walmart, best buy, costco, etc were still selling those specs with win11 which is notably bulkier and slower than 10, especially without an ssd, so things have only gotten worse for the average non-power-user.

    That’s a perfectly servicible spec for basic operations on a mint install, you could probably even watch netflix or youtube on it with linux, but i wouldn’t want to run windows newer than xp on it.





  • PIN is the best way to go there. It only works on that one machine, although you can technically set the same PIN again on another computer.

    I believe the typical intent is as follows:

    1. It is now possible to brute force things that were previously considered “complex” passwords in a semi-reasonable amount of time.
    2. This necessitates longer and more complex passwords
    3. People can’t remember those so they have a tendency to write them down or do other relatively insecure things with them.
    4. Forgotten passwords can generate a lot of helpdesk calls and are also an attack vector
    5. If we insist on really complex passwords that are too long to reasonably brute force with current technology, we need a way for users to log in that’s not going to make 3 and 4 a major issue.
    6. If the simpler PIN method is locked to a per machine basis, it matters a lot less if the PIN is compromised because you also need physical access to the computer or the PIN is useless.

    This should, in theory, allow workplaces to set requirements for really complex passwords that only need to be reset once a year or so, without breaking helpdesk, inconveniencing users, or leaving gaping security holes.

    Whether or not that all happens depends on the workplace, but that’s the general thought process in most of the places I’ve worked where a modicum of sense prevails


  • I’m curious. Economically speaking, what would happen if Nvidia pulled a “Steam” and had a “February sale” where some models of video card were discounted enough to lead to a massive spike in sales numbers? A big enough discount to generate a greater total net return on sales for the quarter despite the fact that they were sold at a lower profit margin per individual sale? Assuming limitations like “you must create an account with a residential shipping address that can receive no more than x cards at the discounted price per street address” or some such to limit scalping, would simply showing increased profits do them any good?

    Or is the problem due to a lack of product quantity?






  • Determining the 3d structure of a protein took yearsuntil very recently. Folding at Home was a worldwide project linking millions of computers to work on it.

    Alphafold does it in under a second, and has revealed the structure of 200 million proteins. It’s one of the most significant medial achievements in history. Since it essentially dates back to 2022, we’re still a few years from feeling the direct impact, but it will be massive.

    You realize that’s because the gigantic server farms powering all of this “AI” are orders of magnitude more powerful than the sum total of all of those idle home PC’s, right?

    Folding@Home could likely also do in it in under a second if we threw 70+ TERAwatt hours of electricity at server farms full of specialzed hardware just for that purpose, too.