Stubsack: weekly thread for sneers not worth an entire post, week ending 23rd December 2024

From the replies:

In cGMP and cGLP you have to be able to document EVERYTHING. If someone, somewhere messes up the company and authorities theoretically should be able to trace it back to that incident. Generative AI is more-or-less a black box by comparison; plus how often it’s confidently incorrect is well known and well documented. To use it in a pharmaceutical industry would be teetering on gross negligence and asking for trouble.

Also suppose that you use it in such a way that it helps your company profit immensely and—uh oh! The data it used was the patented IP of a competitor! How would your company legally defend itself? Normally it would use the documentation trail to prove that they were not infringing on the other company’s IP, but you don’t have that here. What if someone gets hurt? Do you really want to make the case that you just gave Chatgpt a list of results and it gave a recommended dosage for your drug? Probably not. When validating SOPs are they going to include listening to Chatgpt in it? If you do, then you need to make sure that OpenAI has their program to the same documentation standards and certifications that you have, and I don’t think they want to tangle with the FDA at the moment.

There’s just so, SO many things that can go wrong using AI casually in a GMP environment that end with your company getting sued and humiliated.

And a good sneer:

With a few years and a couple billion dollars of investment, it’ll be unreliable much faster.

AI could be a viable test for bullshit jobs as described by Graeber. If the disinfotmatron can effectively do your job then doing it well clearly doesn't matter to anyone.

the team have a bit of an elon moment

"Oh shit, which one of them endorsed the German neo-Nazis?"

Aaron likes a porn post

"Whew."

very interesting, thank you for sharing

Thread of prior complaints

For VPNs, at least, I can offer some suggestions. If you wanted to securely access a specific box or network of yours, tailscale is pretty great and very painless to use. If you wanted to do stuff without various folk noticing then that’s a bit trickier but I’ve been happy using mullvad… they’re not the cheapest, though they have some splendid anonymous payment mechanisms (you can literally mail them a wad of banknotes with a magic code on a bit of paper… you don’t even need to muck about with bitcoin).

also, how are you liking bitwarden?

I really need to kill off my current password manager and bitwarden's looking like the least worst of current options (esp. when paired with something like vaultwarden instead of running a fucking nodejs sync server on the internet), but also some of it seems quite stunted[0]

it's gotten so bad that I've started pondering writing my own, because good god does basically every option out there depress me

[0] - no global hotkeys? the fuck

last time it came up, tuta was the least worst of the mail options. it's not the same offering as proton's in-garden encrypted, but nothing is afaik. rest of it is pretty okay (I have some (not all[0]) domains on there)

the rest of the things I don't have a direct recommendation in part because [0] and in part because I don't use computers entirely like how a lot of people do. that said

storage: backblaze storage pricing is not bad. they might have a desktop app thing? calendar: caldav is a dark art beyond my ken - I haven't even got that shit playing nice on my own things[3]. fuck knows who does this well. vpn: mullvad[1] (has quite recently had another full assessment published). maybe njalla[2]?

[0] - I'm one of those crotchety fuckers that still has a whole pile of self-hosted things that have been going 15~20y

[1] - seems okay and to have their head on straight. haven't used myself.

[2] - also haven't used it myself, comes from some of the folks of the TPB gang

[3] - admittedly I haven't tried that hard because I don't need it much, but it is extremely goddamn annoying to debug from clients

I use Posteo for mail and calendar now (they’re not encrypted between users like Proton but you can just hook it up to any mail client and PGP your shit) .Mail is IMAPS, calendar is CalDAV, contacts are CardDAV, etc. Depending on where you fall on the security-convenience sliding scale, that might be an option. I’ve decided that I care more about portability and standards than super-thick encryption which made me choose them over Tuta, because Tuta offers no way to access the mail over IMAP whatsoever, not even an optional bridge like Proton, and that was a total dealbreaker for me. Posteo also claim they’re 100% green energy which is a nice bonus.

For drive I use Filen.io now. They’re relatively new so I can’t make any assumptions about how long they’ll be around but the price is fair and they offer lifetime payments too. Also their Linux client is pretty solid and doesn’t fucking eat my RAM for breakfast. They’re also in the process of adding support for rclone as per a GitHub issue I’m following.

VPN I pretty much don’t use because I’ve never felt I needed it, so no recommendations there from me.

I was in the exact same boat til recently, but switching off of Proton was actually surprisingly easy even though I had it tied into a bunch of accounts and infrastructure. I actually ended up saving a lot of money compared with Proton Unlimited, and it’s a relief to not have all my eggs in one basket, especially since stuff like Proton’s no logs policy is effectively worthless, and if you’re a whistleblower or similar you’re expected to use a VPN or Tor to access your mail every time to keep from being arrested… but most likely your VPN (and possibly Tor client) is Proton too if you’re paying for it, with the same worthless no logs policy.

some quick recommendations:

Proton Mail

Proton Calendar

tuta does both of these. their mail is e2e and fine — it’s jankier than proton but also less resource-intensive. it’s also the only other choice for now :(

I haven’t used their calendar yet, but from a distance it looks good. I should give it a shot sometime soon.

Proton VPN

this depends on what you’re using your VPN for. actual security? fucked if I know. high bandwidth fuckery? airvpn is pretty good and they’ll let you allocate ports.

Proton Drive

tuta’s getting this soon apparently. otherwise, I can second Backblaze being very reasonably priced if you don’t mind having to choose and set up your own e2e software.

It seems like it is a neat addition to a robust verification system, sadly they picked it as a replacement for a verification system. Ah the libertarian desire to build a thing but not be responsible for it.

this is such a mess, holy shit

and only on .com? I have some very pointed questions about the maturity of the verification program/design

The British elected a guy who wears a mop on his head. You cannot convince me that is his actual hair.

I still have occasional intrusive visions of Johnson busting into an unattended supply closet in the Palace of Westminster to steal a fresh mop head, shouting, "BLOODY LABOUR NICKED ME TOUPÉE!"

People probably asked the same question about the first Habsburgs.

Oddly parodied before it happened in the tv series community (the dad of the somewhat racist main character. The dad itself is very racist).

E: I do wonder what Javier Milei looks like if he would dye his hair

mild guess: "golden boys, with the the 30+ years required to look Politically Evolved"? and of course the selection factors involved from even just getting to that point and the stylist/image handling that that involves

there's also an element of the system does as designed, and there's an element of self-reinforcing delivery/production of these ghouls

I'm guessing these people were JAQing off hard enough that they got kicked out of their local Oxford-style debate org and had to start their own.

Debating post-truth weirdos for large sums of money may seem like a good business idea at first, until you realize how insufferable the debate format is (and how no one normal would judge such a thing).

FWIW I just got an email from GitHub announcing that Copilot is now free for my account (a very basic one).

I mean, considering only the relationships between words and symbols in the complete absence of context and real-world referents is a good description of how a certain brand of tech dunce thinks.

Unfortunately it doesn't look like he was properly banned, just booted out of his session for having suspiciously-high APM. Now, the true eSports nerds among us will already know that high APM is a staple of high-level play in some games but is also an easy way to check for certain types of cheaters. Because of the association with skill in e.g. StarCraft it also became a very easily gamable metric if for some reason you wanted to feel like you knew what you were doing or show off for your friends and strangers online. For example, certain key bindings let you perform some actions as fast as your keyboard's refresh rate allows by holding down a key or abusing the scroll wheel on your mouse. This can send your measured APM through the roof for a time. My gut says this is what Elon was doing that triggered the anticheat program, rather than any amount of actively gaming or actually cheating.

Please note that the hard-won knowledge of my misspent youth has no bearing on how pathetic it is for the richest man in the world to be doing the same kind of begging for clout that I did at 14, especially since I'm pretty 14-year-old me was frankly better at it.

He wants to be seen as the Uber-nerd, better at nerding than everybody else, so of course he would cheat. See also how he has claimed he was the best at quake. He just is hype and bravado because a group of people who saw him stutter (*) about some half remembered/understood science fiction ideas were impressed with his genius and drive up his stocks/reputation. He now is going after the anti-woke nerds as potential marks (He has said quite a few dumb thinks about video games recently).

See also how his elden ring build was bad, his diablo 4 world record relied on abusing an exploit, he thinks polytopia is some sort of complex high level game on the level of chess. The man is a dullard. (E: He also is bad at dnd., a cooperative game which you basically cannot fail to play well))

*: Nothing wrong with having a stutter, that happens. It is weird people claim his stutter is not because he just stutters, but because it is a sign his brain is so great that he is having a hard time because it is thinking about so many genius level things at the same time.

narcissism is a fuck

this is a pithy framing, I admit, and with him as possibly a boundary-pushing narcissist with record-breaking voids inside.... still

well, first you'll need a solid grounding in the theory of categories

I extremely recommend The Little Schemer as a gentle introduction to both programming interactively and to some of the fundamentals of computer science. some of the other books in the series are also good, gentle introductions to some more advanced CS topics too, but they all assume you’ve read through some of this one.

Andrew Plotkin’s Lists and Lists is also pretty good as a self-contained learning environment with a tutorial

other than that, I second the Python recommendation. another first language recommendation I can make is GDScript, the Godot scripting language. it has a very good in-browser interactive tutorial for programming fundamentals, and a very detailed manual once your learning goes beyond what the interactive tutorial teaches. game programming isn’t the easiest way to start in general, but Godot has a few advantages in this area: you can see an interesting result right away when writing code, its scripting language is very well-integrated with its tooling, and it’s fairly close to a couple of other languages in syntax and semantics (specifically Python) so your knowledge should transfer fairly well.

depends on audience / person? and also maybe teacher

I've stepped people through essentials with e.g. idea "tell me how to make coffee" (as an intro to procedurals and dependency) all the way through many other types/shapes, through lego/blockly/whatever style teaching, and through outright "imagine this is a magic box and ${thing} comes out the other side" stepped iteration. sometimes you can jump straight to "hey so here's a language that means specific things and here's what that means" and go from there

so yeah I guess for my part I'd say I attune to the recipient. but for advice toward teacher I guess I'd attune that toward what I figure they'd be good at teaching

so... what're you good at (teaching)?

I used this site (forgive me for the very 2000's style branding, very edgy etc) to learn python. the course used to be free on the site, so you will have to find a way around that, either via wallet, or 1337 skills (the course doesn't do the same branding as the site btw). But it also has a useful list of links to books and stuff like that to learn more (or at least give you an idea about how much different things exist out there).

But the idea behind the course 'the best way to learn is to do the work' is pretty useful in learning how to code. It is easy to fall into a trap of reading about some coding and thinking you understand it and then utterly fail at actually implementing it.

But as froztbyte says, it does depend a bit on how you learn.

E: also this url is quite old now, so I have no idea how many of the links still work, sorry about that.

In the model card for o1, OpenAI notes: “When o1 was led to believe that it would be shut down when acting on its goal and that its actions were monitored, it attempted to deactivate this ‘oversight mechanism’ in 5% of the time. … When o1 found memos by its ‘developers’ that describe how it is misaligned and will be superseded by a new model, it attempted to exfiltrate its ‘weights’ and overwrite the new model in 2% of cases.”

And yet reading that should give us at least some pause

The lack of critical thinking on display here is stunning.

I'm looking on the bright side. Yes, they looted Puppet, but now they're stuck with Puppet

oh good I needed a replacement free host for my other-other wireguard bouncy box. thanks aws

To his frequent "no, people really are this stupid" refrain I would like to add an argument. If it didn't work on enough people to be profitable, the business model wouldn't have persisted and been replicated and refined into the dominant model of online advertising, and/or online advertising would never have been able to become the primary monetization framework for online content. Like, it's fucked how much of the existing Internet is effectively subsidized by exploiting people who don't know better, and I don't think people are really okay with this as much as the system is sufficiently obfuscated that we don't have to notice or think about it.