2,697 karma · joined March 2, 2013
Send hate mail and memes to eculperic@gmail.com
User namespaces opened up an enormous surface area to local privilege escalation since it made a ton of root-only APIs available to non-root users.
I don't think user namespaces are available on android, and it's sometimes disabled on linux distributions, although I think more are starting to enable it.
Relatedly, kernelCTF just announced they will be disabling user namespaces, which is probably a good idea if they are inundated with exploits: https://github.com/google/security-research/commit/7171625f5...
https://www.theverge.com/2022/5/19/23126349/glitch-fastly-ac...
[This had substantially less coverage than forming the union, so I wanted to link it here]
We could get to 30% in just 60 years!
Nobody would have believed it 10 years ago, but today AI is more likely to replace a concept artist than an accountant, so it's not beyond imagination to replace a manager even if the ICs are still human.
AI excels at summarization, which is a big part of the job for a lot of managers. They gather information, go to meetings, write reports, and generally re-share information appropriate for whatever audience.
At a lot of companies, the lowest level managers don't make a lot of decisions either. Tech leads make technical decisions, PMs make product decisions, and the skip-levels (e.g. Directors, VPs) make staffing decisions.
In practice, I don't think humans will report to AIs, but hierarchies might flatten (e.g. ICs report to Directors) and responsibilities might get shuffled around (e.g. some duties get assigned to HR).
If the workers are AI-bots, then I don't really see any skill overlap with management. If you manage only AIs, you are an IC, not management.
Why can't they be authenticated? That seems like the obvious fix. Otherwise how you are handing out the correct customer_id unless you authenticate somehow?
This scheme also complicates API key rotation, although you can work around it by trying to decrypt with both the old and new key if you use e.g. authenticated encryption.
This also has no mechanism for expiration (besides API key rotation). If you add an expiration time and sign it, then you essentially created an authentication token that you use as the customer_id.
And when you break these out, you don't actually have to split your code at all. You can deploy your normal monolith with a flag telling it what role to play. The background worker can still run a webserver since it's useful for healthchecks and metrics and the loadbalancer will decide what "roles" get real traffic.
They also mention Books3, but they don't appear to actually allege anything against Meta in regards to it and are just providing context.
I don't think it actually changes anything material about this complaint if Meta bought all the books at a bookstore since that also doesn't give you the right to copy the works.
The original complaint is 2 years old though, so I don't really know the current state of argumentation.
https://www.courtlistener.com/docket/67569326/1/kadrey-v-met...
Note that incidental copying (i.e. temporary copies made by computers in order to perform otherwise legal actions) is generally legal, so "copying" in the complaint can't refer merely to this and must refer more broadly to the model itself being a copy in order to have standing.
The parallel consumer nearly entirely solved this problem. Only the most egregious cases where keys were ~3000 times slower than other keys would cause an issue, and then you could solve it by disabling that key for a while.
It processes unrelated keys in parallel within a partition. It has to track what offsets have been processed between the last committed offset of the partition and the tip (i.e. only what's currently processed out of order). When it commits, it saves this state in the commit metadata highly compressed.
Most of the time, it was only processing a small number of records out of order so this bookkeeping was insignificant, but if one key gets stuck, it would scale to at least 100,000 offsets ahead, at which point enough alarms would go off that we would do something. That's definitely a huge improvement to head of line blocking.
It gets really complicated very quickly, but if you are single, have less income, and it's only from wages, it's much simpler.
However, knowing it's that easy requires reading a lot of instructions, and if you make enough money (depending on filing status), it suddenly gets much more complicated (forms 8959, 8960, 6251 have income triggers), and if you have 1099s (INT or DIV) you might need to file Schedule B and form 8995. And if you have a mortgage, you should do your taxes twice to see if itemizing with Schedule A is better. And god forbid you sold anything and have to do Schedule D and forms 8949.
This post is specifically about Industrial Policy: https://en.wikipedia.org/wiki/Industrial_policy
But other effective interventions are anti-trust and demand-inducing regulation (e.g. people want to fly because they know it's safe).
https://a16z.com/the-future-of-work-cars-and-the-wisdom-in-s...