milkshakes

speed of iteration is more important than quality of iteration; high iteration speed lowers the cost of failure and compounds improvements

i agree with you!

nevertheless,

> where we nevertheless treated a double free in Regexp compilation as a vulnerability after a comprehensive assessment

not sure what sort of comprehensive assessment is still called for at this point?

https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-fo...

> We have not requested CVE identifiers in Ruby for these fixes, at least for now.

> Ruby has generally considered it unsafe to compile and use a regular expression created from untrusted input. We stated this in the advisory for CVE-2022-28738, where we nevertheless treated a double free in Regexp compilation as a vulnerability after a comprehensive assessment. We did the same for CVE-2024-27282.

consider where "AI" was just two years ago, pre claude and codex. what do you think the next two years will bring?

1. there's no actual evidence that the key to the wallet is on this machine at all. it would be trivial to add a service that would sign challenges to prove so

2. a working RCE against PHP is worth much more than $1000, attacking this machine would easily burn that

educate yourself

https://oliviagallucci.com/aslr-bypass-techniques-and-circum...

> I wouldn't be surprised

yeah i am not surprised you're not surprised. you seem to have already made up your mind. that said, every single guess you have made here is completely incorrect and not based in facts at all.

literally you have no idea what you're talking about! but don't let that stop you from having an opinion

as a solo: you can build and ship more in your own time

as a startup: you can iterate and scale more with more velocity and less growing pains

as an enterprise: people with ideas but not a technical background can put their tokens where their mouth is and build their own interfaces, personal apps, ask their own questions, ship their own features without having to navigate layer 8 and play games for resources

> There are other reasons to dislike LLMs and fear or hate what AI is doing to the world. But people who feel something was "stolen" from them, who now close their blogs and turns repos private because LLMs - they're just showing they had ulterior motives for their work - which again, is fine if they were up-front about it. The OSS subset of those, just paint themselves as being grifters all along.

thank you for putting such clear words to a feeling that's been troubling me about this outrage for a long time.

isn't the problem then capitalism? the promise of AI is to deliver efficiencies, leverage, and consequent surplus. AI does not itself allocate the surplus.

please, tell me more

> people in the community, or at least in the surrounding area, will play golf there

going to go out on a limb here and guess that net-net, a datacenter provides more benefits to a broader spectrum of society than a golf course does.