• 1 Post
  • 520 Comments
Joined 3 years ago
cake
Cake day: March 22nd, 2024

help-circle


  • It might be wishful thinking, but it would also answer the question: why now? It’s not like the concerns are meaningfully different now compared to when the bubble started. If they were so convinced that the AI future was both inevitable and possibly catastrophic, they could have followed Yud into the “research foundation” game rather than accelerating the timeline. I guess they’re probably more convinced than I am that the latest round of security breaches are actually a sign of new capabilities in the models, but it still feels really convenient. Frontier model advancements have been slowing down and costs have been accelerating exponentially, and now they’re taking the line that they’re choosing to slow progress and spend less money on arguably their biggest cost center.










  • I agree that this is more plausible, but it’s still almost as baffling, since it suggests that the existence of some people who can afford a (hypothetical) bed-making robot implies the nonexistence of people who can’t. Like, at least Ovacado toast in a cafe was a vaguely affordable luxury that someone could conceivably stretch their means to occasionally purchase. This is more like “all you need to do to stop being poor is cut back on having your chauffer paint himself in gold leaf to match your limo”.



  • I need someone with more actual software dev knowledge to back me up on something. It looks like there’s a new zero-interaction remote code execution vulnerability in most major vibe code generators. I’ve seen it called Plugin4Shell because apparently we’re still doing marketing names instead of actually getting CVE numbers for these things. The link there seems like a decent overview.

    The bug, dubbed Plugin4Shell, breaks SHA pinning, the mechanism developers rely on to lock an installed plugin to a specific, reviewed version of its code. Pinning is supposed to mean that once a plugin passes review, it cannot change without the developer’s knowledge.

    AIR’s researchers found that every one of the four agents checks out the pinned commit without verifying the checkout landed there, letting an attacker swap in malicious code while the pin still looks intact.

    So if I’m reading this right, the mechanism to cryptographically ensure that your AI agents are using the code they say they are just was straight-up not being checked? This feels like it should go on the big board of incredibly obvious failures, but I’m not familiar enough with the git side of things to be absolutely confident in that. Like, if a person tried to pass off software that did this it would have significant career implications, right? Or am I misunderstanding something somewhere?


  • It feels like they’re trying also to privilege AI as “system 3” when realistically the idea of external cognitive assistance isn’t that different if you’re looking at Claude the chatbot or Claude the smart kid in your class who lets you copy his homework before homeroom. You could probably distinguish this from other forms of paratext by the degree to which it seeks to actively replace your own thought rather than supplementing or augmenting it, but then I remember my teachers saying the same thing about sparknotes so there’s probably more of a continuum there. If that’s the case, then the pattern that Dan Olsen describes in his WoW documentary is probably relevant here as well, since it’s performance pressure and social norms that are really pushing the negative practices into a level that is killing everyone’s souls.





  • I feel like the problem is less one of infiltration and more one of context drift. The racism and eugenics were in there, but it wasn’t as central to the group as the fun sci-fi stuff so people could pretend it wasn’t there, the same way that people pretend not to know that their coworker heretically believes in the wrong pizza toppings or whatever. Effectively they’re saying “Sure, they may have some bad takes on race or gender or economics but they’re the only ones who will talk about the second coming of Robot Jesus with me.” This dynamic also largely explains why these groups (and arguably sci-fi in general?) are so goddamn white and male.

    Of course, as the tech industry took off and these people sought and acquired actual wealth and influence, the dynamic started to reverse. The fascists may not be appropriately invested in the second coming of Robot Jesus, but they are in agreement about eugenics and deregulation, and that’s enough for the tech oligarchs to throw their now-considerable resources behind them.


  • I usually have some sympathy for the dev/maintainer side of FOSS since it is very real work and passion doesn’t exactly pay the bills, but the proliferation of AI nonsense is deeply disheartening. At best it shows how narrow of a band these people select from, since even among programmers and software nerds, pro-AI sentiment seems tied to a specific subgroup. Less charitably it shows how the FOSS movement has been fully captured by the corporate interests who always saw it as a source of free labor first.