dragochat

actions that impact tens of millions of ppl can have consequences that are hard to predict - the ppl in power play power games, by definition, and most of them can't afford many of these consequence bc they'd be fatal to their games

fortunately even the most "malicious" actors are at least reasonable, even when not fully rational

also it's a GOOD thing there are billions of us on the planet still, this makes the powerful warmongerers still afraid to not push things too much into the chaotic realm

...still not "getting" smart wearable, and probably not gonna get one until someone figures out good _wireless_ monitoring of _blood-pressure_ and _glucose_

like wtf could be useful in doing with those puny impotent sensors packed in right now?!

was about to reply, but... this has more layers than a (rotten) onion - I'll just restrain myself form doing so :P

she'd be the perfect CEO of a BigAI corpo - as opposed to betting on humans randomly discovering new chemistry in predictable ammount of time, betting on neural networks offering a brute-force way to (super)human congnition is actualy "saner" - I mean, we know from _evolution_ that in a universe with out _physics_ brute forcing the problem of building intelligence with neural-network like architecture "very likely works"...

now this thought just made me have more sympathy for Sam Altman (there can actually be much worse ppl out there...)

govs are hostile to SMBs as a result of lobbying

makes perfect sense bc in a world ruled by big corpos, govs are captured and work in their interests, so they become hostile to SMBs.

> Exempting small business could easily be viewed as hostile / corrupt regulation disfavouring large entities.

then let's PLEASE have MORE of these "corrupt" and "hostile" regulations, it's clear that in a more and more chaotic global economy only a swarm of small players can change direction fast enough, with some support from big corpos providing economies of scale only in selected sectors (energy, resources extraction, hardware, AI deployment/inference optimizations, healthcare and just a few others)

TL;DR in EU, "strong" countries protected their national companies; weaker or smaller ones didn't

=> short term gain, free profits for eg FR or DE companies being allowed to devour other smaller countrie's markets

=> big country corpos get used to "almost free lunch"

=> big EU corpos fail to innovated and become uncompetitive globally

=> US ans CN corpos try instead to come with their increased efficiency and innovation at the EU market

=> EU freaks out and throws random restrictions and fines and regulations

=> only the most aggressive and ruthless CN (Temu etc) and US companies get through

=> they mostly rape the s out of EU markets

=> EU tries to protect its markets but its institutions have been regulatorly captured

=> [dark spiral goes on and on...]

all people are somewhat corrupt or incompentent.

that's why it only makes sense so think in broader terms, and a broader level regulatory capture absolutely exists.

the problem is that to solve regulatory capture in the EU parts of governments would have so go to war against corporations on the part of SMBs. but... governments in Europe de facto don't even recognize the right to exist of SMBs, basically _nothin_ of the large swath of government contracts fall to misc small businesses that would be perfectly capable to deliver on them at even 4x the quality standard corrupto-corpos do... probably there's some positive counteexamples in the weapons industry recently since we've realized we really do need quality weaponry at great value "by yesterday morning", but besides that... govs _HATE_ both SMBs and startups-from-unkowns (god forbit bootstrapped...).

wtf are u talking about? some examples would be in order...

everybody is apparently some kind of professional sports player...

both fail at supporting arbitrary tilings/splits (think vscode splits, or tmux panes)

still as bloated as ever?

can't we just have tabs + tiling (either tiles in tabs, or tabs in tiles, both can work), and call it a day?

that's all I need from browsing today

...before any of this matters though:

- is non-destructive editing implemented yet in GIMP?

- is stability finally improved, can I running without a never ending crashfest on both ubuntu and macos?

bc tbh the UI was never the issue for GIMP, it just wasn't good enough software.

exactly the opposite:

"For a complicated long running feature branch" always simpler to repeatedly merge main into dev, easier conflicts solving etc

For simpler cases squash+rebase as default merge strategy trumps leaves a nice clean history.

your "physics" grounding is exactly why it feels so odd - software is by its nature anti-physicalist

math and logic are closer to a basis for software abstraction - but they were scary to business people so a "fake language" was invented atop them - you have "objects" that don't actually exist as objects, they are just "type based dispatch/selection mechanism for functions", "classes" that are firstly "producers of things and holders of common implementation" and only secondarily also work to "group together classes of objects"

> I don’t like this kind of senior developer [...] not my wavelength.

Bro & I would not get along well =)))) But the article IS good stuff.

> trivial like an async callback

can't for the love of dog parse the meaning of this - what do you mean? a callback that is async passed to a sync api? you refer to the complexity of sync<->async bridging? ...or?

what's the modern "absolute beginner's guide to async in Rust" - ideally something dense that can bring someone motivated from beginner to expert in ~1 week of intense hacking on it?

ok, f googled it and found it: ~"entry-level/junior sysadmin and cyber"

so, a path could be picked from what you know:

1. devops/sre - really hard to get above entry-level without real experience and you _will_ be competing head on with AI ...ouch

2. cyber - same with whitehat as with devops/sre ...basically go full red-team / blackhat / offesinve for a while, the get certs and portofilio, then job in "real cyber" ...BUT ppl that do this tend to have a "very specially broken brain", so if you haven't done this already you're probably not one of them [probably for the best]

...but they're probably all bad, so better DO SOMETHING ELSE ENTIRELY:

...gtfo of software, you're likely not gonna become an "agents hearder" with skillset, mentality and experience - in the US probably going full on on agriculture [recent US protectionism and isolationism will give you decent levels and shield for globalized markets], learning some minimal hardware tinkering to automate drones and later manage android workers, software for planning farming automation etc... hire hands for physical labour and BUILD AND MANAGE A FARM or something like that (maybe farm + restaurant or smth else form tourism / hospitality)

...puritans will be puritans

> I have spent months adjusting my resume

just share the damn thing, someone may have something for you ;)

...I've kind of rarely seen these ppl complaining about work actually sharing their resume or a condensed description of their skills, knowledge and experience

bc software engineering learning is 99% BOTTOM-UP...

and that's bc SE education FAILED BADLY... almost nothing of what's useful is thought in schools and nothing of what's thought is useful

instead of FIXING education and theory, software engineering marched on forcefully without it

now we need to go back and properly fix education, because an intern should absolutely be required to have the "advanced" skills that we imagine in our deluded minds that only "10+ ys of industry experience" should confer, and that are absolutely required to be even a junior AI-augmented SE

SE/CS education should be rethought from scratch to distill, purify, and teach in 3ys max the concepts that used to be acquired through 10-30ys of experience - it 100% CAN be done, and we should wake tf up and DO IT instead of complaining about it - "advanced enterprise systems" architecture require nothing more than mid-highschool math and can be thought on symulated systems in sem 1 of year 1, it's just some of the "teachers" would have to actually put in the 80hrs-weeks of work to do it in due time

> going into every interaction thinking about which parts of oneself to dial down

what if (a) I hate leading questions, (b) by default only smile when bad/tragic things happen (eg "train crash leaves 100 dead and maimed"), (c) I'm quite bad at listening bc if you don't say interesting things often/densely enough my mind adhd-s away, and (d) interrupting is second-nature to me?

...advice may be good, but for some of us it's like 99% of ourselves that we need to dial down in order to carry on a successful interaction - it works, but takes a hell lot of energy

one interaction? some of us spent half our lives having 99% of interactions be like that - we've grown out it one way or another, but for many ppl "doing people" is HAAAAAARD ...just as for some differential equations are. we're just build veeeery differently. for many "the social world" is a hostile jungle, and we ca face it all right, but with a strong suit of mechanized armour and fully loaded weapons strapped to it.

some of these _are_ true _good_ advice for most ppl, beginner level as they may be, as by default they have been trained to be waaaaay too agreeable

ffs sake, u get the point... "under threat models x, z & q that are considered for scenarios ..."

anything deployed is hackable ofc, question is just the profit/risk ratio a business tolerates/prefers, and what backup plans exist to "reboot" after fatal incidents

nothing's perfect in the real world but most things are survivable

reducing all risk is the same as reducing all opportunity for profit - and in a much truer sense than it seems ...as you also reduce adversary's risk to profit form you, so essentially pursuing too low risk you head towards negative sum (as security has costs) games that on average we all loose from playing

you got everything I said wrong: I'm familiar with security and infrastructure best practice and I'm confident I/we can securely deploy almost any vibe-coded crap someone can throw at us - we understand security, we understand defense-in-depth, we understand the subtle trade offs of why security by obscurity is usually a bad idea (and when it does help) etc.

sure, if the vibe-coded sloptopus does bank transfers and stuff, properly carving out these pieces out of it might require actual engineering work before containerizing it - but someone is willing to pay for it it can be done

some "toy" example: take a crappy app that stores llm keys in config files that the llm agents themselves can edit - after isolating it up, but an llm proxy in front of it and have those keys be short lived proxy-keys with aggressive rate limits and monitoring etc etc

isolation, injecting proper monitoring into code of apps, putting proxies between app and apis, and layers between app and infra it runs on or touches etc

and these things now can be mostly cookbook-ified / automated 90% of the way too

as long as you can shop things into little ppl and ensure short-lived and granular access to valuable data you can 100% run totally unsecure and buggy code reliably and get value from it

it's engineering and understanding security from first principles [and a culture arund it - that _is_ the HARD af bit though...] instead of just believing in "secure app best practices" from the "holy scriptures" - secure apps are hackable, and unsecure apps can be unhackable, heck even mil systems run on unpatched old software everywhere, they're just properly insulated, the components are insecure but the system as a whole can be perfectly secure

100%. I'm willing to prioritize what matters at the right time. if "inner-system security" is not the right priority, and security can be attained at the "outer-system level" better, we should have the balz to say it. fuckitol

we love to say things like these, but... most security issues are in fact BYPASSABLE - virtualization, firewalls, autorollbacks, ro-filesystems and so on are many of the tools we have on our belsts

decades of WordPress have taught us that insecure apps can 100% be securely deployed

it's a bit of an art, most recently edicated devops/sre ppl suck at it, but it's doable

...aeons a go in a former life we ran production apps that got hacked weekly, and nobody batted an eye at it, backups servers recreated from secure ro-images were span up with last-clean-app version, occassionally we had fun disassembling whatever reverse shells and other mallware that got beached on our systems (but couldn't "swim" bc everything we ran was "too exotic" for them to figure out the next steps of a proper attack), development and business continued as usual with zero interruptions etc