robomc

This is one of the things about the novels he describes too, and their impact on empathy. Like, you can explain to someone in 3-4 sentences that slavery is cruel but that's not the same as inhabiting a characters circumstances for 500 pages.

It's a natural instinct for engineers, to think you should always convey information in the most efficient way possible, but it's actually not how real understanding tends to occur in the real world. You need a lot of noisy carrier signal and time and context etc.

This sort of a anxious hyper-vigilance is exactly the sort of main character bs you should let go of though. Spend some time with your kids or whatever. You actually can't plan and prepare for a hypothetical war with russia.

It really isn't that though. If you're disparaging normal ass people with jobs and families and lives as "NPCs" you probably should try ignoring your thoughts and feelings a bit because they're probably part of a some low level grinding psychosis.

wtf are you talking about. Being a blacksmith isn't pure escapism.

Yeah the subject of the email should be "Action Required To Prevent Data Loss" or something

In this context it would presumably mean not casually deleting your customers' data.

When people say a company is unserious they almost always mean that they're not thinking about, and taking seriously, the work that their customers do. This seems like a classic example of that.

This is a confusing description of a real thing. They're clearly biasing the models more and more towards long horizon end-to-end software development, which leads to impressive "claude, build an X make no mistakes" demos, but is mainly an annoyance for expert users doing real work.

(If you give claude an inch these days it'll just steamroll through a whole program of work without checking what it should be doing - a kind of overenthusiastic pull towards the first draft that is often detrimental and definitely wastes tokens, and even for very basic tasks it's using many more tokens than it should because it's doing this full belt and braces thing for everything, just in case you're an idiot).

But also... it's something you can easily reign in if you want to.

> It can result in a key insight that helps you strategize more effectively, a novel approach that saves a huge amount of time, a feature design that is lot more user-friendly

My brother, that's my job.

I assume they are just passing off AI prose as their own and don't want anyone to be able to tell. Which is surprising for someone who's been blogging for a thousand years. But I don't really see any other reason for this amount of heat and FUD.

This is moronic. This is like being mad that the slot machine you think is lucky is occupied.

Do employers in the US look at your university marks?

Yeah you can buy it in pretty much every liquor store on earth, it even comes in those little single-slurp mini bar bottles, in tiny bottle stores in broke ass towns at the edge of the world.

My favourite aspect of DK, which isn't changed by this argument really, is that people who reference it very often believe it said that low skill people are MORE confident in their abilities than high skill people, when the authors never claimed that. Which is kind of like doing a DK yourself when trying to deploy the DK findings.

i don't even understand the benefit of cheating on a college course, unless you think you're going to fail

Yeah that seems like an enormous problem with this example.

yeah imagine thinking biden was too old and infirm

"I have a vague concern, so I'm now using a shittier toolchain. You shouldn't do it though." is a weird post format.

Yeah the really misleading part of the screenshots in this article is that it doesn't show the "resize cursor", which basically makes this a non issue.

Also, for anyone reading this who hates the general aesthetic, go into Accessibility and hit "reduce transparency". This has been a desirable setting for last few OSX versions.

> If the cloud service you’re using doesn’t support OIDC or any other ephemeral access keys, then you should store them encrypted. There’s numerous ways you can do this, from password managers to just using PGP/GPG directly. Just make sure you aren’t pasting them into your shell otherwise you’ll then have those keys in plain text in your .history file.

This doesn't really help though, for a supply chain attack, because you're still going to need to decrypt those keys for your code to read at some point, and the attacker has visibility on that, right?

Like the shell isn't the only thing the attacker has access to, they also have access to variables set in your code.

He's using it correctly, in its secondary sense of "belonging or appropriate to an earlier period, especially so as to seem conspicuously old-fashioned or outdated."

It's not a deal breaker for me, but it doesn't sound like a recipe for "winning the console generation".

no but the headline is "valve is about to win the console generation"

Yeah I mean... can I play Fortnite, BF6 or the upcoming GTA on steamOS?

This. And when a service goes down it's a lot easier to explain to your client/boss that "half the internet is down" than "our boutique solution is broken so it's just us actually".

To me this kind of sounds like the other side of the same thing. Lunchpail scientists accumulate data within an area of research made interesting by a landmark work by a big name. Future big names make breakthroughs by drawing together a lot of the lunchpail work. etc etc

I found out recently that I've been paying for Prime Video since 2020. I think I did legitimately sign up for it. That's not my complaint.

But it's fairly scummy how it doesn't seem to send you any email, the payments have a very vague generic coding like "AMZ2318971239", and the actual subscription management is super buried. I only noticed it, after years of using Amazon a fair bit, when I went deep into my account panes looking for something else.

You're right, it could be the sensible most likely thing AND the far-fetched thing.

> because researchers from Kudelski Security most likely tried different static analysis tools and they didn't work the way Rubocop did.

Yes but that's kind of the point - they say this issue that takes you directly from code execution to owning these high value credentials was only present on rubocop runnners but isn't it a bit coincidental that the package with (perhaps, since they chose it) the easiest route to code injection also happens to be the one where they "oops forgot" to improve the credentials management?

It just seems very convenient.

From the CEO's response:

> On January 24, 2025, security researchers from Kudelski Security disclosed a vulnerability to us through our Vulnerability Disclosure Program (VDP). The researchers identified that Rubocop, one of our tools, was running outside our secure sandbox environment—a configuration that deviated from our standard security protocols.

Honestly, that last part sounds like a lie. Why would one task run in a drastically different architectural situation, and it happen to be the one exploited?

The tennis example is weird though. I don't think people who are bad at tennis go around claiming they're great at tennis, do they?