• 1 Post
  • 241 Comments
Joined 2 years ago
cake
Cake day: July 4th, 2023

help-circle

  • I’m going through something similar with my parents. The frustrating part hasn’t been the forgetting, it’s more not trying to work around it.

    I keep telling them to write things down if there are verbal plans being made, will remind them etc. then sometimes they just never do even if I chase a bit, or they’ll write down the wrong thing or the plans will have changed and I’m not told and it just causes a whole mess.














  • An issue I’ve seen brought up in the open source community is that they have audits that look at the number of untriaged issues and time to resolve serious issues that their funding depends on.

    I’m in software, but not open source, so it seems like they don’t have someone aligned with their team who they can sit down and say “either we need more resources, cut scope for new features, or accept quality / security issues coming up” to, its kind of this weird game of politics they end up needing to play to get any kind of funding for full time maintainers.

    That’s the main reason they can’t just ignore issues that come up in their backlog, especially security ones.


  • When have we tried voting as an informed electorate? It doesn’t matter how many times we throw them out if we don’t pay attention to who we’re letting in. What you’re proposing is endlessly shuffling a deck and expecting it to magically be sorted after enough shuffles.

    The number of morons I’ve talked to whose entire understanding of politics and policy boils down to them saying “government can’t do anything!” or “the two sides just need to come together” infuriates me. We need people to have actual opinions based in reality of both lived experience and informing themselves through things like news stories or town halls, even if its only for a few weeks around voting season. Without that we’re just going to have a revolving door of grifters each one leaving with nice full pockets each time they leave.



  • Security vulnerabilities are different, especially when they also put a 90 day disclosure period in it which is more severe for a security exploit.

    That disclosure bit, not in the article, is really what tipped this all over the edge. If it was just hey, here’s a bug then its really just flooding the backlog for the maintainers who need to triage that. Disclosures are often used so people are aware that they’re using libraries that the maintainer has refused to patch, but in this case its really just holding the maintainers hostage so they end up wasting their time going through irrelevant issues.

    Also, many of these libraries get security audits to make sure they are actually triaging and working through their backlogs, so could lose actual funding they get.

    Ideally, they would either use their supposedly capable and powerful AI code gen to just make a fix and send over a patch, or at least use LLMs on their own end to triage the issues and only send over the most sever X periodically.



  • I think a good characterization is overshoot with a correction due. Its not that it won’t hasn’t durably changed the way things work, I think there were a lot of experiments that were run at the expense of employees that a lot of companies are going to find a negative ROI on and we’ll see less prevalence of AI In those applications.

    That’s not including any kind of future legislation that would further shrink the current application of AI.