alper

We're looking into the AI SRE category and I feel most existing setups are kinda far off from being able to do this. For anything you are starting to build now, I think you should start things off from the beginning to work like this.

Even then… if your engineering is good, there aren't that many trivial things that these things can do anyway and for the non-trivial things you need to have a human in the loop.

Is this like Janet?

Wordpress is a toxic property.

The best thing they can do to strengthen security would be to sunset PHP.

There's no need for that many web languages, programming language is not a relevant factor anymore and even it was nobody can seriously argue that writing PHP "makes their heart sing" or some shit.

In those cases this exploit is a blessing because it makes the choice clear: turn it off or get owned

The slop machine can then also port your stuff to Go and you don't worry about this stuff as much anymore.

The marketing around the response I would bet is the main reason why they couldn't keep it secret.

This isn't a security incident as much as it is a marketing opportunity for all these companies.

> How can we help identify and fix vulnerabilities in downstream packages while upstream fixes are pending, or backport fixes to older versions that no longer receive security updates?

Is the company selling a magical code generation machine really asking how it can backport a fix to an older version of the same software?

Is this for real?

Do they consider this an example of a "good" response?

They have to backport this fix or else leave a large part of the internet broken.

Heap use after free?

No excuse whatsoever to not either rewrite your website of PHP or to rewrite PHP itself to Rust.

I thought the Anthropic project did read as a tall order to be completed inside a company from scratch.

What? He couldn't use their internal super powerful AI cyber weapons to create an exploit to hack into the firmware of the conference room device?

This is very bad marketing for OpenAI.

I read it and I knew it was going to be Russia.

> the reality of disenfranchisement faced by the elderly, immigrants, the homeless and the unbanked for whom cash remains a lifeline

On the one hand the disenfranchisement is real. On the other hand many of these people are able to learn lots of new technologies if properly incentivized. It's generally an opt-out of society that's enabled by workarounds being available.

Should we forego on convenience because we have a bunch of naysayers?

Forget about cash, try living life in de Randstad area without a smartphone and half a dozen apps setup, configured and tuned for you life. It's definitely possible, but you will be living at a different level of velocity than if you have all the tools at your disposal.

I learned lots of things about how messed up Passkeys are and there's a well known advocate online for them who keeps going on about how you can export them without ever mentioning that it's also possible for you not to be able to import them.

That's the kind of half assed communication that loses trust.

> Stealing accounts is almost always done with phishing or social engineering

This only becomes real if you don't have e-mail fallback access to your account. Something which seems like a very bad idea.

Yeah, but none of what they do works without the rest of industrial society. As such it's an empty pursuit.

Resilience and survival are social pursuits.

Missing so many fundamental pieces of digital infrastructure, at least getting mapping to the point where it isn't a Google monopoly is amazing.

> Being product-led means caring about your users

Show me a platform team with a full product setup and I'll show you a platform team with over capacity.

Not to mention the average level of PMs will take a team like this down if you can even find one who can understand the type of work that the team is doing.

Who remembers the picture of inside Zuckerberg's home that got leaked with the grotesks living their private lives?

This is entirely how FP is supposed to work. Don't like that, don't use it.

It ships database files over the network and does that blazingly fast.

I had to setup a Passkey recently and wanted to store it in 1Password and the experience was quite absurd.

I don't know who designed this or who thinks these are acceptable affordances, but it seem to be part of the same disingenuous push that's behind passkeys in general.

It's the same here in the various city libraries of Berlin both in the state library as well in the various branches across town.

State: https://www.zlb.de/veranstaltungsuebersicht/

And this is by no means special. I'm pretty sure this is the case for most major city libraries in Europe.

Other than that lots of people do their work or homework there, hangout in the outside spaces, book rooms for community meetings. With some more budget, I think there's a lot to be said for these to become default community activity/collaboration spaces.

> not claiming that the model wasn't trained on those sessions

The math group inside OpenAI may be training or fine tuning their own models which given some reward functions would definitely bias their usage of the training data towards things that look like math.

You can launder all of it without a human "directly" doing anything.

It's fine. They only need to steal the discoveries long enough to go IPO, then the companies will enshittify and the scientists can go back to doing their original work (which the models can't do anyway).

Just take Baby Rudin and a serious stack of paper with you on these holidays and you should be set.

My two experiences of de-brainrotting:

1. Doing a pilgrimage walk in Japan with a cleared phone home screen. Only the Gaia GPS app on there with the route, and some other local weather and mapping applications. No consumption of anything external during the day. Just steady walking and eating and looking around. It was excellent. You can probably do this anywhere given the right context and commitment.

2. We slept several nights in a hut at 2100m altitude in the Austrian Alps just out of range of cell reception so the icon on my phone was "satellite" all the time. It turns out that without the possibility of communication or fresh input, you can read a bit on your kindle in the evening and then go KO at around 22:00 sleeping like a rock until 06:30. Such an amazing amount of rest and refreshment just from a simple accident of geography.

I have a basic task that I run every day and I use it to eval models and these days the Qwen3.8 model I can run on my laptop is competitive with both Claude and Codex because the models have just been adulterated so far. I have to ask and ask again for it to follow the single skill that describes how to do the task and maybe then will it do it.

For full text search you could also use pg_search (Tantivy) which looks very cool.

But at scale you probably don't want to manage a bunch of mission critical systems that were jacked into your database server. The database is slow? How do we monitor that?

So I would definitely begin like this, but you need to have a plan to break all of these out sooner or later.