Skip Navigation
CVE-2020-19909 is everything that is wrong with CVEs
  • I used to work in a place where we constantly got looked at by security companies and consultants. The wisdom of that time? Companies don’t hire security firms and consultants to find nothing, so no matter how asinine or impractical it is, they’ll still file it because an empty report is bad for business.

    Our security handling was pretty strict, and we had to constantly talk customers off the ledge and kindly inform them that their consultant was blowing crazy swamp gas up their asses. My favorite was a firm that listed all Easter eggs as a vulnerability. An open source package could raise the list of developers with a secret key combo, and so the customer saw this on their report and raised a stink. The customer had no idea what this all meant, but their consultant had scared the crap out of them, so we had to layer on a patch to disable the stupid thing.

  • has beehaw gotten more argumentative as of late?
  • I've been on the internet long enough to know that any argument that goes on for long enough is going to get uncivil. You're also very unlikely to convince someone who feel threatened by your point.

    So I've got a soft 'respond once' policy. if someone replies to one of my comments, I respond once to clarify my position and address anything important. If I have failed to make my point by then, then my writing ability will continue to be insufficient in n > 2 comments, and I am adult enough to let them have the last word.

  • Red Hat Tries To Address Criticism Over Their Source Repository Changes
  • It’s not surprising. A lot of these CEOs run around in cliques. They have forums, news letters, Chatrooms, and social events. When Silicon Valley Bank went down, the CEO of the company I work for was giving us news from other CEOs he was talking to from a shared Chatroom they set up, basically a discord for CEOs.

    The other point is that many CEOs are slaves to trend and have a deep fear of missing out.

    In a way, they’re organized, and combined with the above, that’s part of why when one big company hops everyone leaps behind them as if they’re moving as one (it’s all a dick-measuring Highschool clique contest though, which is why I don’t use the word conspiracy). I would not be surprised if Huffman and Musk both repeated their rhetoric to an adoring crowd of fellows before they took it to their feeds. It’s maybe why they speak so brazenly, because there is a little echo chamber of people who worship at the altar of Survivorship bias in the hope that heaven will send them more bigger-dick pills.

  • Owner of Destructoid, The Escapist, Siliconera, and others Fires Writers and Hires for "AI Editor" to Churn Out Hundreds of Articles Per Week
  • Something to keep in mind is that these companies aren't concerned with total profit or revenue or anything like that - it's all about the percentage. I suspect in the short term, these AI-articles will look very profitable. Networking effects, consumer habits, and SEO will carry the day for a time.

    But what always screws these MBA types is the inability to recognize the specific natures of their business and the second order effects. Not all costs are representable on a spread-sheet.

    Basically, the second order to me really boils down to this: AI generated content isn't really a 'brand'. Good writing shops tend to build a following with their writers and expectations with their editors. The writing, investigative, and editorial bent of a house is essentially what makes a shop. See The Economist and The New Yorker as examples. In other places, a lot of niche shops are selling personality as much as product with youtube, podcasts, and others.

    this means there is no real 'value add' someone like an AI shop can provide. You are throwing yourselves down the hole of becoming a pure commodity, and as every business major knows, being a commodity sucks. Short term profitable, but literally no one cares about where a mass produced nail comes from and its a race to the bottom of price.

    So, as time goes on, with the barrier for entry being incredibly low, every bill and joe who fancies themselves an SEO wizard has no reason to not jump in, so your competition rises and your ability to charge some value for (ads?) drops a lot. But that's the tip of the iceberg. Many of the companies that would occupy this brandless, commodity-filling space are way better positioned to make a run at it than the GAMURS Groups of the world. Microsoft's Bing chat and (probably soon to follow Bard) will whip your ass in the long-game. Why search Bing to get an AI article from the Escapist when Bing will do it for me? I really doubt anything churned out by an AI with some edits will be that much better per convenience.

    This whole could easily collapse in on itself. Like a lot of people in the AI space, I'm interested to watch what happens when AI begins to consume and be built on its own content.

  • On Politics and Forking
  • After a buzz over to Hexbear, I find the strain of far-left over there that is more concerned with backbiting and defending former-communist and current parody-communist regimes because blind 'if west bad, not west good' thinking, than any of the useful zones of leftist activity.

    I didn't observe anything that was explicitly hate-speech in my 15 minutes buzzin' around, but it didn't really feel 'kind', if you know what I mean. I get why Beehaw isn't federated with them. For the record, I am a deeply left-person. I do think that stating "Beehaw has no specific political affiliation" to be somewhat naive. Midnight fueled thoughts incoming.

    If Beehaw is "explicitly a safe space for minorities", then we must ask "Why do we need a safe space for minorities?", "Where does this need come from?" all of which begs questions about power, hierarchy, control, the sources and motive of hate and oppression, and a dozen other related questions that will each need some meaningful response. This leaves you with a couple of choices.

    • We become horribly reductionist (and naive) and just handwave and say "Because we need kindness, and there is hate." But then, why are we in need of kindness, why is there hate? Why do we need more love? Different hole, same warren. This route I think trips you up in the "unable to explain the issues themselves." You might retreat to the escape hatch of "focused on politics", but ignoring something so pervasive and in-your-face as politics is a conscious and focused political act. People who ignore politics are some of the most deeply political people on the planet. There is no escape from politics.
    • The other option: We confront and grapple with the beast, and reach conclusions, answers, and stances to the best of our ability about these issues that lie at the heart of a community's formation, what we want for it and for people. This is basically the formulation of an ideology or identity. Maybe not a concrete one, but one that will broadly align with some subset population and unalign with another. Maybe this doesn't quite fit with Beehaw's vision of community, but at its most over-simple, a community basically defined by both who is in, and who is out, and the nature of those assertions.

    Bullet 1 is (in my opinion) unsustainable; it will present a nice facade for a time, but eventually people and events will make people dig, and dig, and dig. Some of these incidents will put people in a place where they won't have clarity and purity that comes from deliberate soul-searching, but will be wrapped up in moments of fear, panic, hate, outrage, and other emotions that will bias the rudder towards things the admin may find unpleasant. People come to strange and often harmful choices and beliefs when they don't have a wellspring of strength to draw from, and instead have to find it in the moment, or as is often the case, give in to the storm (excuse the purple here. It's late as hell for me). I think this is evident in just about every major online community of the past.

    So as I run out of energy: I think you start thinking about some broad stances, or people here will start thinking of them for you. That "we do not know what the political leanings of most of our users are" may be a dangerous sign that there isn't really a pulse on the kind of community you're building, and are accidentally just throwing together a place where people gather.

  • Any poetry fans in these parts who might recommend some poets or poetry anthologies?
  • I don’t really consider myself a great poetic connoisseur and I’m not versed in the classics, I just pick a collection now and then let it sit with me for a bit.

    With that context on my reading habits: I picked up and enjoyed the collection “Pine”, by Julia Koets.

  • Nullroad Nullroad @beehaw.org
    Posts 0
    Comments 6