easterncalculus

> Is there such thing as "community" at all? As I know, the majority of open-source projects are developed by a single person, where others only contribute bug reports (in best case). It's not a community, if there is such imbalance in contribution and power.

Every single time this comes up it turns out that 'community' is just a trojan horse for 'group of people that sign off on whatever I want and enforce my personal opinions on others'

Honestly, no. Communities are great, the best projects have them, but a BIG part of the reason why webdev and gamedev completely went south (and why most other areas went the same way) is because they focused on vague gesturing towards the 'community' over the software. This is why webdev for so long had thrown out security and performance in favor of 'developer comfort' (or 'productivity', or some other weasel word) and why gamedev artificially retooled entirely around virality within its community - the gamedev subreddit, twitter, instagram. Everything is about what you can show and do in a weekend jam and it's why almost everything that comes out is derivative and frankly bad.

It's not really about 'community' as much as it is about relationships between individuals. Those sound similar but you can gesture vaguely towards the 'health' of the former to justify anything in the way that you can't with the latter.

That's impressive! Would certainly read it when it comes out.

Did not know this, thanks for sharing.

I actually forgot DOGE was a cryptocurrency and was really confused for a moment.

I'm not sure but I wish you the best, OP.

I feel like it is generally a flippant but serious comment. A lot of social problems right now are caused by the fact that rather than having to travel to some large city for a meetup with people that have your particular neuroses, against the friction of well-adjusted people in the real world, now there is a fan club one click away that will ratify whatever fake illness/condition/problem that you have with no serious pushback. A LOT of personal, social, and political problems right now basically boil down to this.

Does this exist already? Meshtastic doesn't do IP.

The Rust moderators were overreacting. Most of their front page was not slop. Now their front page is blog posts and language details. It used to be a place where you could talk about the language's actual impact.

What's yours? I'm not defending it, that's just what occurred. The parent comment makes it seem like DOGE cuts were aimed at the CVE program specifically when they were not.

That is straight up not what happened, and what’s impressive is that this comment is already being cited in AI summaries about it.

The contract with MITRE was set to expire under budget cuts from DOGE, along with basically everything else. That is not them “removing the CVE reporting system” like it was done specifically. It was not saved by ‘several’ agencies or the military (???), CISA restored funding last minute.

There were literal genocides conducted on the platform unobstructed at the same time. They banned him because they wanted to. Be serious.

It's really disappointing that this became a front page post with 600 points. HN is worse at security than I thought.

> There is more nuance to this as well, it might work, but only in certain circumstances which seems to be where this is going at the moment.

It's memory corruption. That requires some guesswork or understanding of the underlying system (platform + ABI) and heap grooming to actually exploit but that's not a security boundary. Any vulnerable version is just going to get hammered with requests until it either crashes without an exploit or actually gets popped.

Related LiveOverflow video about fake exploits going around https://www.youtube.com/watch?v=7CiZmq2llDg

That said, OP is basically full of shit. This is absolutely exploitable and people are going to just assume the platform and ABI and spray it against the internet, particularly hoping for mod_php.

> rather than let the LLM do the entire structure, I take the time to create the full hierarchy of abstractions and actors that I want my code to do. I decide, at the UML level, how abstractions will sit and interact — and then I make the LLM implement those gaps.

Do you do this with every repository that's brand-new to you? You refuse to, for example, use an agent to learn where the feature should generally live? This seems absurdly slow for that purpose, because even though humans can still get a deeper understanding of a codebase after several months, an agent can get a much deeper understanding over a timeline of the initial few days. Unless everything is already meticulously documented for you, I suppose.

The purpose of the system is what it does - providing retirees with even faker jobs than they gave up to go on vacation paid by the fools that still work.

You can click each box in the matrix and see the source for the acts in question from each country. What kind of quantitative measure are you expecting?

Viss is trying to claim there is a security risk here when there isn't one. It's totally fair game to mention that.

It's probably overzealous of HA to do this, but ultimately it isn't. The context missing from this HN thread so far is that the reporter, Viss, has been frankly not credible on security in general for a really long time, despite being a big name in the community on stuff like OSINT. A lot of people in the OSINT sphere basically believe any information being public at all is a security risk and prefer you to pay them exorbitant consulting fees to come up with numerous ways of rephrasing their circular reasoning about why.

I only hope that as these decomps come out, and these games get older, the original devs can comment on them more - to explain that those complex, innovative parts might be quite different than the models assumed them to be, and point out where they're wrong, like Stack Overflow.

This was really lame cope ten years ago and it's really lame cope now.

I don't understand why people talk about this like we live in some fantasy land where C compilers don't have tons of bugs like this. And that's just the bugs, not even the accepted UB.

No matter what happens, people just blindly claim this nonsense is still accurate. We could have AI halt tomorrow and people on Hacker News would still claim AI 2027 is on track.

> Due to this strict harness, we were able to use extremely dumb models efficiently.

With all due respect I seriously doubt that. What are you doing that's different? Almost every test between just Opus and Opus conducting cheaper agent swarms ends up with Opus getting better results at a lower cost. People set up harnesses just like yours and see this.

    It's the job of the media to scrutinize such statements and decide whether there's a story here at all (maybe the story is Anthropic researchers have fallen into a fantasy-land and brought many policymakers with them), not to just platform them.

Speaking of fantasy lands, the one most Bluesky users live in where legacy media doesn’t editorialize ENOUGH on tech companies…

> I know a large reason people hate AI is because it's largely seen as tearing apart hobbyist/professional communities, eliminating reasons to collaborate with others and form relationships

No offense but this incessant focus on the 'gamedev community' is part of the reason why a lot of games suck right now. Like half of indie releases these days were clearly started as hackathon type projects, designed to go viral on gamedev subreddits and twitter (see 'friendslop', several of the 'soulslikes', 'scrollslikes', etc), but after years and years of this stuff it's clear that virality is not actually what makes a good product. This scenario where people see good software (decomps, original creations etc) and clutch their pearls about how it will affect 'the community' is propping up a lot of below-mediocre stuff and it's really, REALLY lame. It's the same kind of crap that let AAA quality nosedive trickling down into indies and this.

but muh Steam's 30% cut, or something

The author shows his age by recommending that student to go into a cost center at Costco. In AI resume land you really need the keywords more than ever to both start and keep a career in this industry.

"Appeal to adult animated show" is lame enough on Reddit but it's particularly odious blogspam here.