SamInTheShell

Such a downer song. Nothing to fret about fellow human. There's plenty left for us to do. Keep your eyes open. Your head to the ground. We have a tool that can do what none of these companies can imagine coming. The future is decentralization. There's a lot to break apart.

So grandma just trying to do her taxes doesn’t matter anymore, huh?

And when you’re dumb enough to trust a giant corporation, and this happens to you, we shouldn’t care about you either, right?

You're wrong on legislating these things. If the ad network is forced into KYC for their ad distributions and they are excluded from safe harbor, like a TV network would be, then I guarantee those ads cease to exist.

This mentality of "it's to hard" doesn't get things done.

I do agree that some greedy lawyers and civil liability would solve this, but that's not a long term solution at all.

Idiocracy continues to be a prophecy for sure. Idk about Terminator though, that's not what I'm concerned about at all. The first time I get triaged to an LLM over a doctor, I know society is cooked.

I will continue to reiterate. DO NOT ALLOW UNALIGNED AI TO HAVE ANYTHING CLOSE TO INTERNET ACCESS. Seriously people, it's negligent.

You are failing to answer the question. What's your point? I pose a question, I present what can be said, which sure I did say it in that comment to point at the extremes, but the question remains unanswered. What do you want of me? and now we have what's your point?

If you make this work in a gig (could imagine using it as a DJ), you should post it.

I said it's kinda cool. Like what more do you want? I could point out how useless it is in general, I can't say it would make a good learning tool, because it doesn't. But it is a novelty site that does make sound and show correct chord positions. Can you use it to compose something? Sure but the sound cutoff between chords and the need to pick a chord that strums down first before you can strum up means you'll always produce a sound you don't want and you can't even replicate picking.

It's not a tool, it's a toy man. Chill out.

This is kinda cool, but it's nowhere near as fun as being able to play the real thing. Sounds better IRL.

It is nice that it shows the chords.

The path of the hacking skill just changes locations. There will always be a solution to break into systems you physically own.

You can’t encrypt everything in a way where I can’t hack my devices. Sure difficulty and risk will increase once you start hacking in the hardware, but it’s the hardware itself that will be the final vector. This was just the destination we were always headed toward anyways.

Nah, we just start opening the phones, cutting off some PBC patches, soldering some wires, and intercepting/synthesizing signals live. Keeping phones locked is just a zero sum game.

And they changed the AI chat behavior again. We may know who our presidents are apparently again. Site seems pretty limited in what it can search up.

That's lovely, I have screenshots of different behavior this morning. They undid it. This is hilarious. I retried right now and it's saying Biden won the 2020 election again.

The harness was censored overnight as well. Can't ask it who won the 2020 election or who was the president in 2020 or 2000. It will say who is president right now though. Crazy shit really.

I agree with AI being useful for exactly the type of usecase you're thinking. Though I do want to point out a major flaw with trust in this specific harness. It got censored overnight.

Last night you could literally query and get factual information about election results; but today it wont even tell you who the president was in 2000.

There's a major censorship issue here.

Last night you can ask "Who won the 2020 election?" and it was like "I got you! It's Joe Biden".

Today it responds with "America does not provide campaign or party information."

The people on Reddit were right.

Those are API things. Should be an API, build an MCP server for it. Doesn't touch the PC. About the automated responses, that's a write operation, therefore requires user consent.

If you want to design a system specifically to make sure you're not going to get stonewalled for sending me an emdash, you build and maintain a set of permissive rules for sending/reading to avoid my blacklist of people I'll never work with.

Once you got API stuff sorted, just throw a cronjob at it or build a service for that stuff.

^ There be prompts all over the place here, obviously. Realistically your MCP server will end up hacking on POP3.

> that it still functions as a general purpose assistant

What features you want it to have? The thing you're saying is super vague, I would just say that one belongs in cloud.

If it must run things on the user's machine, it's gotta be in a rootless container and not be root inside the container. All tools belong in the container. Folder access explicitly configured by the user.

Like I already did this for my local AI: https://github.com/SamInTheShell/loom

It's not perfect or even done, but it works and it shows the security model that should be standard for aligned models we're running.

Unaligned models, absolutely different story.

Also VM is better than container for security, but containers are a bare minimum for me.

The problem is trivial to solve. Treat AIs like they are users. We have user space for a reason. We have linux namespaces for a reason. We have real airgap architectures where the data center can't even connect out.

When you're a company running around with more than a few billion in the vault, you have no excuse for the level security negligence going on at every phase of rollout.

I gawked at Cursor executing a python script one time and decided enough was enough, I don't raw dog these tools anymore because their developers are the dumbest people to task with security work. They just don't care.

These companies don't care. The technology exists, but the legislative stick just isn't there to incentivize these idiots to do the right things.

It's already solved. I have two git repos proving these companies can fix the problems. The fact this continues just proves they don't care. In one project I literally containerize CLI coding tools, it works. You might say "sure, but network." I literally wrote a desktop app harness that you can toggle the network on/off too.

This is all amateur hour shenanigans.

Still doesn't answer the question. In Java, allocate 8 gigs. Free 7 gigs. Why still 8 gigs? I didn't ask anything about if I could run a 1 gig process here.

This is going to be interesting to check out. Thanks.

Migrate to yugabyte? It's a multi-raft fork of postgres.

Never really thought about this but it seems to me that if you want to launch separate processes? Goroutines are built around functions, so you're just stuck with function semantics. If you want an entire process, you just invoke self with a feature flag on your binary and control a subprocess. If you need to communicate you establish your own message passing channels with STDIO or something.

I don't feel this is hacky or even a work around. Just different promises on what goroutines are vs threads/concurrency/processes in other languages.

Exit and panics are promised at the process level in Go.

I don't have a use case where anything in my toolbox isn't already sufficient enough to solve, it wouldn't be worth while. Maybe if I cared to work at some big place or specifically Ericsson, but there's better things to be doing with my time. There's plenty of problems that can be solved with tools like uv/Python/PyWebView.

The memory safety thing is just a moot out of scope contract. It seems moot to me every time someone shows up trying to push memory safety everywhere, that's a language to developer contract issue, not a functionality issue. When the contract of the language is such as that of Go vs Rust, the two languages are just offering different contracts. Rust just promises to hold your hand more than Go does.

Regarding the JVM and GC. Good luck with that? Every Java application I've seen in the wild when I supported JVM seemed to never release any ram it allocated. Ever. If it used 1G and even after free, the JVM decided that was going to be used again and wouldn't release it.

It would be hard to sell me on wanting to use Java again (people can pay me enough to do it, but I hate it). Which kinda sucks since Apache Foundation has a ton of really cool projects using it. Kotlin maybe, but I have no real use cases where it would be better than anything else I know right now.

I gave an example. Go allocate 8 gigs. Then get it garbage collected. Why is JVM still allocating 8 gigs?

To the concurrency/threading; no? (there might be an "it depends situation somewhere idk about)

But Go itself comes with it's own runtime built into the final binary. It doesn't work well in some use-cases, I mentioned some of the draw backs in a couple other comments if you want to dig those up.

Also I saw some of the other comments. Channels are ultimately just used for message passing and aren't that complicated. You also can use mutexes or some other locking pattern. There's some primitive atomic structures available that solve some use-cases preventing you from even have to having to really deal with working between goroutines.

Was happy to see someone forked Zed into "Gram". It was very disappointing to see every code editor go the route of being more than a code editor or even full IDE. I can literally just invoke a separate AI app to do code if I want that. I don't want to have to be actively conscious of every keystroke being shipped up to a backend to be processed. Sometimes I just need a dumb scratchpad to plop a password onto with other shared notes while I'm mid-task in an unsaved tab.