xlayn

WHY ON HELL paint has a remote code execution in the name of God? WHY? is this because someone who needs to build a CV decided to network something on ..... I can't come with a reason why "An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network." will cause paint to start being nice to an attacker and leaking crypto secrets etc.. the thing says sending a specially crafted packet.. this means windows is part of the attack vector, but that just makes the WHY bigger, really, why?

sure, but as soon as you don't find Qwen3.8 27B there you know what's the TLDR.

sure, but as soon as you don't find Qwen3.8 27B there you know what's the TLDR.

I use claude code... and I friking now that I'm being dumb and naive on thinking I can trust them... sounds like I'll have to start working on the jail thing for claude code to not see anything and only talk to anthropic servers... what a pain

update: this can be also server side on anthropic side... so the request leaves your machine with some random guid associated to you, and the anthropic server then proceeds to query with all your details any way.

I mitm the connection and nothing was leaving at least with the claude code web fetch tool of claude code.

I'm in version 2.1.318

Can AI companies SHUT UP with things that no one can use? the companies that can use it they have had access to that for a long time...

You are right and here is my hot take into why working with models is a f pain. Harness... yes I have one https://github.com/alainnothere/privibe but is not what mine has that the other doesn't but what it doesn't have.

I suspect the whole reason for how bad models accessed through subscriptions tied to a harness of the provider (looking at you copilot) is that microsoft in the case of copilot "builds into the harness and hence into the model" an intention; and I don't have proofs (which qualifies me to start a popular podcast) but I suspect the harness keeps pushing the model to fix an issue as quickly as possible so the service can appear as "it just bam fixed the issue".

The "sitius altius and fortius" of the technobro is what you see in the tv ad "copilot check my git and fix a bug", how stupid do you think someone has to be to believe it works like that? my instructions to model say that I HATE urgency to make changes, we are researching and until we figure out causes, and understand all the mechanism involved AND THEN AND ONLY THEN we can check what's the actual intention, what business wants... then we can talk about a fix.

Grab a harness that injects the minimum possible and let the agent be and you will see how much difference there is in the quality of the model response.

Just because you start doing good actions by preventing access to other of your services doesn't mean we are going to forget the bad ones.

github.com/alainnothere/mailBoy

news.ycombinator.com/item?id=50359814

I had this long time in the talking.... lot of details.. the spirit of the thing... what yes what not and also had 45$ of web code thing from claude that expires tomorrow... and tomorrow I had to do a demo involving that other program that uploads your files and ask you to create an account.. so here we are, 3 hours of polishing and I can demo now without providing a user and account I don't want to have or create.

Goverment regulation... when goverment has regulated wall street and banking industry no issues... as soon as "we will let them regulate, no mam, door plugs will not start failing on airplanes..." things go south.

Not like anthropic or open ai, they sure downloaded torrents of everything to train, crawl the web non stop, eat open source developers work, git repos etc, not pay ANY but they are not distilling other models at least....

But that's obvious... Astra is Qwen, if Astra can is because Qwen can....

When they started uploading things to the server and requiring you to have an account to access the things that they STOLE from your machine without authorization in first place, I uninstall it...

What can go wrong by uploading your things, if you had any passwords or users there that "pinky promise" will not be uploaded, then running AI and maybe oops have a leak and now someone is hitting your production servers?

if you grind... live well below... not below, not without extravagancies... well below..., don't travel, don't eat, no avocado toasts, have two works, no wife, no kids... burn the eff out....

THEN it will go quite far

quite far to teach you you have been played out of your youth and now you are poor

I found sad, that someone on their early 30, on the pinacle of their capabilities and the pinacle of their "I'll grind until I get <insert capitalism goal here>" and then burnout have "only" $68k to know figure out what to do... in the usa... if you don't have a place to live but you have a car you can still do things, the other way around you can't, 95% of the time you need a car... and if you have a health issue you will start bleeding money really fast... there is no safety net...

And I say only because it's a lot of money, and it's not a lot of money... if you have to pay rent, or mortgage payments, or car payments... car will be reposesed, credit score will go south really fast, and everything is tied to the credit score, so they know how low they can drop the ball and you will still accept because you are in need.

I want you to remember, the american dream... one person working as a mail man can bring food to the table, pay the mortgage while the wife raise the kids and kids go to school, you retire 40 years later with social security giving you enough for the basics...

Then this is for someone with university debt... so this is the case for someone with a title... what's the situation for the other unlucky 95% of america?

"1. Webs of trust, in some way that resists crowds of sockpuppets." we are already there... is just that the frog soup had a very steady hand at rising the temperature.

The other option is to use the X402 protocol to pay, every time you access a page you pay in cpu to calculate some shitcoin.

For a person, is just trading the time spent loading and displaying ads for paying the creator for their work.

But if you are scrapping you are now paying with cpu and electricity to see things and content creators are being paid.

First homeopatic share.

In a few months, he will create a revolutionary type of microprocessor...

Skynet begins to learn at a geometric rate. It becomes self-aware 2:14 AM, Eastern time, August 29th.

....launches its missiles against their targets in Russia

...Because Skynet knows that the Russian counterattack will eliminate its enemies over here

ummm yes, they have to dogfood it... this is that lucky area of the venn diagram where you have to do it, measure it an act on it... because improves the bottom end and the product.

the last source of truth are forums.. but not reddit... if it has a CEO it will rot and enshitify.

I'm talking about forums... the bmw forum for your old car... the motorcycle forum for the enthusiast of the SV650... those places are full of anecdotes, people talking, lending a hand to another person... being humans and care...

Which is what social media is/should/was about, is what internet is about before the enshitification happened... I would vote to have this ID associated to you via check of your local goverment issued id and ONLY UPPON VERIFICATION of you being using that you can log and read and use those websites without tracking you (Yes 10,000 ifs where this is secure, handled in a confidential matter, the whole tech is not to track that you are doing something... but that a human is behind that, no api, no robot, no adds, no nothing... just the old school forum where you can go, talk, submit a photo... where someone who wanted to spend time to write something did it, SO WE CAN ENSURE TWO THINGS, A HUMAN IS THERE, AND NO FVK!NG CEO WILL ENSHITIFY IT, no to track people, but to know that a person is interacting there)

But because "empathy is the weakness" and shareholder value...

I sometimes think that the world would need to do a "snow leopard" release of everything... to unit test, to fix... and then we will be able to move forward... but AiMaxSlopIt will result in those situations where you have to rollback or redo from scratch parts... because it's unmantainable because it's bad... it's spread everywhere and "the map" is not there.

Anecdote, I did a travel across USA and when I was looking for a hotel, if you go from apple maps, to website, to try to book, the "load browser" in the maps... could end in states where you could not go back because back is get out of where you are and go back to the start of the map... and was a terrible experience... then you turbo charge it with "implement game changer UI improvements for the new bar on UI design" goal of some guy with enough power to make damage... and you end with softslop (or is it sloprosoft?)

I know the steel made before this particular year is look after because was not affected or build during periods of radiation, and that gives it qualities sought after.

When AI started I got a copy of 6 months before of wikipedia and open street map.

At some point you cannot trust anything because everything has been touched by everything as a regurgitation of everything.

THIS, so much this... but let's use an analogy

if a really powerful mafia got installed into your city, a very small violent group of people demanding people to pay to stay safe... how long before you start organizing? how long before they notice and do something about it?

Let me fix it for you

Muse AI agent --(like all the other AI things) is ALSO-- commercial surveillance network disguised as an AI assistant

Uber "deregulating" everything, means Uber taxing everything... because everything will go through it... and you know the EEE thingy right? better prices until you kill industry, then rise prices...

The good thing is that we will not be fooled this time while checking the dead bird thing...

The police?

This is game theory... wait a sec... is degenerating capitalism into something that burns everything down to ashes just as a "the ultimate 6d chess move" to actually solve/perfect all the computer problems?

We are in AI thing right now... but bureaucracy makes everything fail... so we can start doing genetic algorithms/game theory to optimize it so we can swarm... but swarming requires defining a max/goal, which will require some kind of formal definition framework for what "the sitius altius and fortius" of AI agent swarm can build on Minecraft can do....

Wait a sec... are we just trying to beat Magnasanti in Minecraft?

it's economy of scales, qwen 3.8 27B regurgitates a lot and that's an intentional tradeoff of space/speed so you teach it patters that can follow for more complex stuff and give it more basic tools that can utilize to build those... the tradeoff comes from the model writting a lot of verbose prose to achieve that.

if the approach works, you have now a viable path to use this complex/hybrid structures where you can pair those chips with gpus and offload whatever is optimum to the model on chip.

Just like you can go and buy a threadripper now (the ram maybe not so much), how much was worth that amount of computing 10 years ago?

Remember those gpus into chips https://inference-docs.cerebras.ai/models/qwen-3.8-27b , where you have this chip that implements a model that run at those extremely high speeds... the ones that people ask "why do we need that"... if this is true... one of those chips with the correct harness is all that's needed to get fable like intelligence in every single computer in this planet...

Happy hallowen Tax Ramltman and Amowhateverwayyournameiswritten...

You are being downvoted but I agree, any company including openAI, anthropic, google etc... should be closely regulated by goverment to ensure they never run any AI that doesn't follow all the rules defined by governing bodies, nor train them to have any workaround... NO ONE HAS ABLITERATED ACCESS TO ANYTHING.

Thanks god, you are not a wacko thinking qwen3.0-1.5B-abliterated would hack a goverment.