cortesoft

> they also ask questions, and if they are good, they ask the right questions, something LLMs still have a problem with.

Sure, but LLMs do ask some questions already, and there is no reason to think they can’t keep getting better at knowing the right questions to ask.

Humans also often fail to do this well, and I think we all have experience with developers who do a very poor job at understanding what is actually being asked of them.

Maybe LLMs will never become as good as an expert developer at being able to suss out what someone is actually trying to do when they make a request, but it is certain LLMs will become better at it, and there is no reason to currently believe they couldn’t eventually become as good as the best humans eventually.

This is how gossip and urban legends and other myths have always spread. The difference is the size of the network and how much distance a myth can travel in a very short time.

Now, the entire world can share the same piece of gossip, and it takes on an entirely different quality when it is global instantly.

This doesn’t help you if you need to run a public website.

I was more talking about staying up on security issues with your stack after they are patched. We will need to check for security updates constantly, or risk being exploited in the gap between a security release and you finding out that you need to update your software.

That is an excellent point

Is the starting statement on about half of the comments on this page. The world is getting so weird.

It feels like the only solution is going to be proactively running your own AI agents looking for patches and applying them.

I think calling private data "lost" if it is accessed is not a misnomer, even if you have backups.

You lost its privacy

And you trust this source because?

Is there a way from within the VM, though, to determine if that hardware feature exists and is enabled? If you don't trust your VM provider, how do you trust them when they tell you they have that feature and it is enabled?

We still build lots of things here in the United States, too. While many people can point to examples of projects that couldn't get off the ground due to red tape, you can also look around and see a lot of projects that are being built.

Many states operate that way, and many other states have rules that limit what the local governments can do.

If real people are using the model for real, they will discover for themselves that the data isn’t reliable, and then might switch to a different model.

The incentive will be to maintain a subscriber base.

> It's meaningless to say that selling something is profitable if you are ignoring the cost to produce it.

At the same time, training costs don’t scale with usage, so no matter how expensive they are, they can be paid for as long as inference is profitable. It is only inherently unsustainable if you lose money on inference.

Of course, it could be that the inference usage required to pay for the training is too high to be possible, but that is a separate argument.

We would still know if certs were issued, though, which is the thing we want to check

Seems like the next push, then, will be to get agents and LLMs to start doing that discernment?

There is nothing stopping us from adding the ability to understand the context of information an LLM consumes, too, right? The same process humans use to assess data reliability could be taught to an LLM?

What? I have spent $10k on a computer but would never fly business or first class, that shit is way too expensive. Two trips would buy a new $10k computer!

Just because other people don't use your version doesn't mean you can't.

This is true for pretty much every fixed price subscription service in existence

What else would it be ranked on other than value? How else would you compare different types of items?

Yeah, you are right. I don't know what I was thinking when I said that.

Little harsh to say I have NO idea what I am talking about, though.

I still don't agree that companies won't revoke their passkeys if we are in a PQ world.

If they don't, you are still in a better place than passwords. Each public/private key pair is unique for every domain, so a compromise in one place is not a compromise in others. Many people re-use passwords (even if you don't).

Where are you seeing that? I don't see the word honest anywhere on the page

In a PQ world if they have the stolen hash, they have the password. How is that different than the passkey world?

You would revoke it yourself, I am saying.

Also, the same risk applies, but to an even greater degree, with a password.

The risks from using passkeys are a subset of the risks from using passwords. There aren’t zero risks, just fewer than for passwords.

Passkeys aren’t permanent, you can change or revoke them. If the algorithm used suddenly becomes vulnerable, you would need to rotate all your passkeys.

How would you get back into your email account if you lost your password or password manager? It is the exact same situation.

How do you share a file-local system between multiple computers, your phone, tablet, etc?

> People with access to debt bid up the price of an asset, like a house, against other peoples’ similar access to debt.

That might be true now, but it would not mean house prices would go down, it just means more people would rent.

Think about how these loans work right now... people with money they don't need right now loan that money to people who want a house but don't have the cash right now. The reason they loan that money is they want to earn a return, which they get in interest on the loan.

Let's say all consumer lending is banned, and you can't loan money to people to buy a house. Well, the people with that money still want a return, so they will invest it somewhere else. Where can they invest it?

Well, one option is they could buy houses and rent them out. Since they only have to compete with other people with money (since poorer people can't get a loan for their house), the price is going to be much lower than it is today, which means they can get a better return by buying the house and renting it out.

So now you are still in the same situation with house prices, but there is no way for you to get any part of that return.

This may or may not help depending on how technical you are, but at the core a passkey works through public key cryptography, like SSH keys work. Setting up a passkey with a site involves sending a public key to the site, which they store as being owned by your account. Then, to sign in, they use your public key to generate a challenge, you use your private key to solve the challenge, and you respond proving you have the corresponding private key.

This means you never send your private key to the site, so if their database is compromised they only get a public key, which can’t do anything (it is public, after all)

No amount of phishing can get you or your client to hand over your private key, because there is no use case where that is required. There is no possibility of MITM, since your private key is never sent anywhere in any situation.

As for getting locked out of your account, losing your passkey would be the same as losing a password. You would need to follow the site’s password reset flow, and if you can recover from a lost password, you can recover from a lost passkey.