MeetingsBrowser

at some point they saturate, 90% of the stuff is answered

I don’t buy this.

Programming as an industry is famous for constantly evolving and changing.

Because they are generated by AI

Nothing changed here and it seems reasonable to me.

If you want GitHub to tell people about your security fix, someone needs to tell GitHub about the fix first.

AFAIK they mostly pull from the normal sources like NVD automatically, but you can also submit to GitHub directly.

There are plenty of ways to notice a malicious release without observing it running.

Build provenance, maintainer alerts on new releases, tying releases to specific git tags, etc all help.

Requires a GitHub security advisory and

Only advisories reviewed by GitHub trigger alerts.

From https://docs.github.com/en/code-security/concepts/supply-cha...

Only a few of the recent supply chain attacks were discovered by users noticing weird behavior.

The majority were noticed by maintainers or third party groups noticing things like releases not tied to a source tag, many rapid releases, etc.

Cooldowns won’t stop everything, but it makes a malicious release significantly more likely to be noticed

It’s possible this kind of behavior is endorsed throughout

It very well could be a culture issue

I agree

VP is a leadership position, and has significant influence over the culture

OpenAI had >5000 employees last year. How many work in the hardware group?

It very well could be a culture issue.

If it is, would you extend your opinion to say Apple turns a blind eye to ethical issues as well?

All of the employees divulging secrets came from Apple after all. The person named in the lawsuit was a 24 year Apple veteran and a VP at departure.

I’m not one to defend huge companies, but OpenAI is a huge company.

It’s possible this kind of behavior is endorsed throughout, or it’s possible it’s limited to this specific group.

We know nothing beyond what Apple has alleged.

Not just any employee. A 24 year veteran and at the time of departure the VP of design for the iPhone and Apple Watch

I make roughly triple the median income in my MCOL area.

I own a modest 3b2b house.

My mortgage plus daycare for two kids alone costs $78k/year (~$6.5k/month)

It’s like the bystander effect but for code, lol.

Just pick someone and give them the task.

85K - you can live everywhere besides the coastal US cities comfortably.

This is far from true. There are plenty of expensive places to live away from the coasts

As opposed to what?

Driving schools will shut down within the year because self driving cars will be prevalent

few businesses/people seem to grasp this and all think there is some magic "business hack" they can do while avoiding doing the core business thing well.

Unfortunately , it seems to work for Kroger.

As customers we hate it, but Kroger sells something like 20% of all groceries in the US, and HEB is a s small by comparison regional grocer

Kroger is one example. Most other stores in Texas had the same depressed skeleton crew feel, except for higher end options that cost 3x normal groceries.

Same thing for Bucee’s compared to normal gas stations.

Bucee’s popularity exploded by asking “what if we paid someone to clean the bathrooms at a gas station” and following the logical chain of thought from there.

People like spending money at businesses that aren’t depressing or gross to be in.

The biggest difference I’ve noticed is HEB has plenty of employees who don’t seem depressed to be there.

When I’ve been to HEB I see plenty of cashier lanes open, each with a cashier and bagger, people stocking aisles, a team behind the butcher and bakery counters, etc.

By comparison, Kroger seems to try and have a skeleton crew at all times. Usually a single cashier, a self checkout supervisor, and a couple of people frantically stocking.

The Kroger employees look over worked and clearly unhappy to be there.

The HEB employees seem generally happy and are usually in groups chatting with coworkers and customers while they work.

Shopping at Kroger feels almost dystopian relative to HEB.

how so?

There are literally hundreds of projects on googles github with the standard “this is not an official Google project” in the readme.

Claude code is by far the buggiest piece of software I interact with, If the underlying model weren’t so good, I would never opt to use it.

It takes multiple seconds to launch, random lines disappear in the scroll back, it’s internal state gets messed up causing the TUI to show duplicate and/or offset lines, and it frequently causes some kind of GPU buffer corruption causing the entire terminal env to show garbage.

logic based vulnerabilities like a ReDoS pattern identified from source without live exploitation, or an admin-only route that's never been exercised

The two classes of vulnerability given as examples are the exact kind of issue I probably don’t care about, and are not grounded in an actual security model

I don’t know how to make the statistics match my perceived reality.

Both in this thread, and people I know in real life who are looking for jobs are struggling hard. Mass layoffs are becoming more common and the time spent between jobs is measured in six month increments.

And yet, the numbers say we are in a hiring market with more job openings than ever, except for during the pandemic.

My perceived reality and the numbers almost could not be further apart.

The proposed solution conflicts with the supposed problem.

The author is an individual claiming the ability to author and maintain a standard library

… to be used by small orgs who do not have the resources to author and maintain a standard library.

This is a collection of forked open source crates bundled together with open model vibe coding?

the code written by AI is more robust than by humans because more edge cases are tested.

This is at least a mildly concerning take to see in a blog post announcing a solution to supply chain security.

It seems like this boils down to: don’t trust the original authors to maintain the packages they wrote, trust me and my LLM instead.

What is the benefit of switching memory modes like this?

Recipes go back millennia, and seasonings were also common, but varied by region. It’s easy to grow your own herbs a, or even forage for some things.

I don’t think it’s true that most food sucked at any point, except for people in exceptional circumstances.

What project did you apply for?