Comment Re:Fuck off and die. (Score 1) 89
You mean Lemmy?
I've tried it. It's OK but it needs more development.
You mean Lemmy?
I've tried it. It's OK but it needs more development.
They're facing a major problem, and it's partially of their own creation: there already is a wall between their content and the user searching for it. It's called Gemini. Would they be facing it if they boycotted AI early on rather than selling their user's content to Google et al? Probably not as bad. But they'd still be having problems.
Reddit's stock is down today after u/spez basically said "We're fucked" to the shareholders, pointing out there's been a dramatic reduction in web traffic, and that Gemini isn't sending them anything significant.
How enforcing logins will help is anyone's idea. But the website is dying at the moment, and it's not primarily because of Spez's utter incompetence, it's mostly because the open web is being shutdown by Big Tech in favor of slop generation. Reddit is the "Mostly open web", it relies upon the open web to exist. But the idea of posting questions and answers and discussions about specific technical things being viable as a "thing" is obsolete.
Look at Reddit today, look at r/all or r/popular, and it's primarily bot-created videos with stock sound tracks about nothing. It's a shell of its former self, and might only survive as a competitor to TikTok. And when was the last time anyone went to TikTok for anything more substantial than doomscrolling?
Reddit was like that once. But I've noticed lately the "front page" (be it r/popular or r/all) is dominated by "Let's show someone doing something cool and add a saccharine stock soundtrack to it" type videos.
I think it lost its soul when they did the API thing that lead to so many leaving. Moderation has seriously deteriorated as people interested in the subs they mod no longer mod them, real communities have mostly died out, and what's left is auto-moderated generic subs that bots post to dominating the site to the expense of everything else.
The recent news about forcing everyone to log in will probably not end the way u/spez thinks it will.
This appears to be an FPM exploit: https://github.com/KillaBoi/St...
But notice it has to make a huge amount of assumptions about the configuration of the server in order to work. So this kinda sorta underlines the thing you say, assuming the hacker cannot obtain the output of php_info() - it's not unheard of for PHP devs to include that somewhere so they can check what's going on. It makes script kiddie stuff a little less likely, though a hacker specifically targetting a specific installation will likely be able to break in.
I've read various comments about viable this exploit is, and even submitted a link to someone's commentary to Slashdot about how it maybe overblown (https://eliastaylor.com/noexploit/) - The infosec community seems genuinely split on it, and I'm not sure this proof of concept is really going to convince anyone right yet.
The reality is we should probably not have acted as if a nuke went off last week, while at the same time we should patch it on a "just in case" basis. The 4 thing was more serious, and remains more serious given the number of IoT devices that'll accept 4 forever. This, on the other hand, is a good reason to stay up to date.
My suspicion is that all of those comments relate to importing Word documents and templates into LibreOffice. Without LibreOffice full-on ditching their internal DOM and using Microsoft's, formatting changes are inevitable.
The question to me is why they see that as a reason to not replace Word. The obvious solution is import the fucking templates and fix them, a one off task.
Standards, maybe, but features? I'm unaware of any features missing from LibreOffice of note, and LibreOffice has a better UI and discoverability as it supports CUA standards, something Microsoft's Office suites haven't done since the mid-2000s.
Collabra is a full office collaboration suite based on several open source projects including LibreOffice. LibreOffice and Collabra have had an... interesting relationship, despite the latter making probably the largest amount of contributions to it in recent decades.
It's not obscure, it's just you probably don't know the primary output of Collabra's work when you use it.
...and? Are you seriously saying we shouldn't address serious threats to health because there's other serious threats to health?
...says the person who defamed Fauci in the thing being replied to, something that only people who intentionally consume only media that agrees with them knowing full well it lies about 90% of the time would do.
Let me guess: you think children are getting sex change surgeries. You also think that schools are providing sex change surgery for free. You think that there are litterboxes in school classrooms for furry students. You won't fly any more because there's a risk the airplane pilot might be a furry, and that somehow makes them unable to fly. You think cats and dogs are being eaten by legal Haitian immigrants. You think that undocumented immigrants are flooding the polls or even make up a meaningful percentage of voter registrations. Global warming? Ridiculous liberal myth, clearly. Same for the damage CFCs did to the ozone layer. Oh, and that pizzeria Hilary Clinton got her pizzas from has a child rape basement. Sure.
Sound about right?
We're running a business here. We need real software, not toys created as a fun weekend experiment with a chatbot or burning money to run an agent and get 50% (or more likely 5%) of the way there.
One of the more subtle dangers of vibe coding is that the genAI system will generally drown you in praise and at no point tell you that it's already been done or that there are already ways to achieve what you're doing.
That's why this project got to the coding stage.
> you cannot just separate out any pieces you want and use them independently,
Except when you can, which is most of the time. Grow up.
One really amusing thing in common with most of these "PoC"s is that they lean on "LFI", or local-file-inclusion, to make the vulnerability. In non-php terms, their exploit chain requires the server to already have a severe code-level vulnerability. It's not rare for PHP apps to be (broken) in some sense, but requiring the server to have an existing vulnerability where users could cat
/etc/password is an insane pre-requisite. If you need this, this does not make this a severe bug.
Taylor suggest the issue is people outsourcing their judgement to Claude et al, with Claude finding the problem, telling the users (correctly) that technically it's an RCE issue, and the users failing to recognize judge the context. It certainly wasn't helped that a PHP core team member appears to have been one of the people who took the reports at face value, stating "exploits will start appearing 15 minutes after the patch drops." And, of course, PHP has a poor reputation for security, albeit largely over design issues than interpreter quality.
If you're overloaded with slop bug reports - that is, bullshit bug reports that aren't a bug in your program but are the results of genAI users simply believing the output of Claude and shoving it into a ticket so they can pretend they contributed - you might have a very different view on this.
Slop is slop. If genAI was producing high quality output that's usable we wouldn't call it that.
This would, if someone would do it, resolve a hell of a lot of issues that I think are serious in the current model. Alas big-AI seems reluctant to actually partition training sets like that, and instead are focusing on lobbying to try to get copyright laws to ignore the licenses of the content they're training on. And honestly, that strategy doomed because not every jurisdiction in the world is going to go along with "Please let us ignore copyrights because we have lots of money" the same way the US seems to be going.
Everything Big AI seems to be doing seems to be oriented towards preventing society from hitting CTRL-Z.
Ask five economists and you'll get five different explanations (six if one went to Harvard). -- Edgar R. Fiedler