You quoted something directly contradicting what you said. Nothing is concealed, every line of erroneous code could have been analysed for 15 years. All information needed to find the bug was public since it the code has been written and checked in publicly.

You confused “obscurity” as in a synonym for low popularity with the word “obscurity” as in people not knowing how it works and people deliberately hiding the inner workings of a system.

Everyone using Linux can know how it works, that’s the opposite of obscurity in the sense it is used within “security by obscurity”.

Apart from that, Linux is very popular, just not on the Desktop. It is therefore not obscure in the sense of popularity either, at least the components which are hit by the bug mentioned in the article.

ugh shit next week will be awful at work patching all those servers. At least they found it because bad actors did.

What benefit does that give you for media viewing?

What exactly about X.509 is trash for that use case?

Sadly couldn’t find anything. Thing is, if you watch your own media, why use TOR?!

I’m just saying it’d be nice if you linked your article on your homepage.

you’re not actually against AI, you’re against hustle culture, influencers and unsustainable practices.

96.5% of all AI projects are linked to that. If 96.5% of my tap water tastes like poop and 3.5% are potable, I’d still not want to drink it.

I always wonder if veterans really need to know that much information at all times.

Actually I suffer from something called “monitoring fatigue” or “notification fatigue” at work. There’s so many monitoring notifications, half of which are nothingburgers, that I seriously hate that part of my job is responding to them.

I already disabled notifications for my email in our monitoring system and now there’s just another department monitoring the monitoring system and creating tickets for me. I can’t escape it.

I’m in the “Fuck AI” crowd even though I currently heavily use LLMs, specifically for the reason that slopcoders, techbros and memelords destroy the planet.

I’m in the same boat as those people and that’s specifically why I hate it.

Sounds interesting.

Can you link those projects please?

Your link is broken and currently displays a Claude Code announcement. Are you even real?

Usually these tools are very basic.

If you read this community in the last weeks you’d know that slopcoders don’t stop at basic projects.

deleted by creator

For Android there’s PhotoSwooper which works somewhat similar @uuj8za@piefed.social

Says every Dunning-Kruger sufferer who don’t and can’t 😉

Good point, still, I wouldn’t ever vibe code because I’m faster doing it myself than screaming at an AI to do it wrong three times over and tell me “oh you’re right actually, I’m sorry”

Sorry, but I think those outnumber capable, security-minded developers by a large factor.

Yeah, they’d be shit without AI aswell though, they just have way more output now that the shit they churn out actually compiles after screaming at a chat prompt for hours.

When you’re “treating Claude like a junior coder”, you’re just cleaning up after a mostly unchanging system.

Good point! As soon as I feel like the LLM isn’t helping me but instead costs me more time than it saved, I try not to fall into the sunk cost fallacy.

I found it okay-ish to write documentation and fix smaller things which are just annoying chores. It can “learn” to solve the same issue in slightly different contexts if you write proper documentation. Which has the additional benefit that other humans can actually learn from said documentation aswell.

you’re missing out on the opportunity to get better at problem solving by skipping the part where you find a programmatic solution

I’m already pretty good at problem solving. I know how to solve the things I let AI do. I don’t need to solve the hundredth similar issue in a slightly different way just to practice, because you don’t learn from success, only through trial and error.

As soon as LLMs generate code which I find to be subpar, too fancy, opaque or complicated, I take it as inspiration/challenge and write a better solution. I don’t blindly merge LLM generated code. Just like with a junior coder, I don’t babysit LLMs, but at some point I’ll just do it myself.

As I said, LLMs are basically glorified autocompletion, and anyone thinking they should have them solve problems is on a path to idiocy and incompetence. You’re completely correct in stating that one shouldn’t become lazy so they don’t forget how to actually do their job. That’s when you can be replaced by a shell script.

Here, a random link explaining why using bandwidth for no reason while people provide it to you for free might be ethically questionable

https://tor.stackexchange.com/questions/21067/tor-streaming-videos-is-it-ethical

Should I explain it further?

Using Claude to write code you don’t have the chops to quality check… doesn’t really qualify.

What if I do have the chops to quality check and actually do treat Claude like a junior coder?

I often use it for annoying tasks like “transform this data structure into the one which is specified in the new major version of the upstream API” and write a test before.

It basically saves me typing things and I would need to test my own code anyway. That’s one of the good use cases: glorified autocomplete 😅

No proprietary models are hosted, you can only access models hosted by the community or ones with open source weights,

why mention Fable and Mythos then, which are proprietary models? Community hosted models can also be proprietary. Proprietary in contrast to Open Source just means owned and operated by a corporate entity, which can be part of a community as long as the license is not Free.

Or to not do security by obscurity at all.