Keep in mind that the "American Century" included nuclear nonproliferation. Which, to be sure, was already on life support. But it's dead now. We're all going to miss that.

It also included the US Navy guaranteeing freedom of navigation. We're going to miss that, too.

Even if China were to pass its AI tech to Russia, Russia no longer has the industrial base, nor the liquid assets to take advantage of it. And that's not counting the massive brain drain Russia experienced when almost 2 million men (many of them in tech) left at the start of the war.

Ukraine, OTH, hasn't suffered that type of brain drain and, thanks to Western support, it can carry a war economy and build AI-powered drone tech at scale.

This was a war for Russia to win if it hadn't become so incompetent and corrupt under Putin (and thank God for that).

Leadership matters.

It's not his mouth that he's opening, though.

News you don't like == propaganda?

Shit is happening on the tech front in the Russo-Ukrainian war with spillovers in the Middle East. We are witnessing a battleshift paradigm shift not unlike the widespread adoption of gunpowder, airpower and/or information technology....

... both sides have been heavily invested in this shit, not just Ukraine...

... and it's tilted the war in Ukraine's favor...

... and Hezbollah has embraced that 100%, giving a technically superior force (the IDF) more headaches than it can handle...

... and it's shaping how technology is going to be developed...

... and you think this shouldn't be covered in a technology-oriented website?

Oh my sweet summer child.

This reminds me of every single management moron that dismantled IT systems monitoring to save money because nothing happens anyway , ignoring that it's not that nothing happens but that the monitoring provides a way to see trends and take preemptive actions before SHTF.

Obviously the switch from "loss leader on a scale the capital markets can barely absorb" to "losing money" is going to sting; but I'm curious if we'll see sneakier knock-on effects.

So long as they were losing money hand over fist the vendor does want to throw enough tokens at you to make you feel like you are having a good time; but as few as are required to do that since they lose money on every one. If they were breaking even or turning a profit the incentive would be to sneak as much spend and upsell in as possible; and it's well known that the verbosity/cost of LLM chatter is hard to predict; harder if there are multiple models and other complications being switched around in the background.

What sort of exciting little tricks will we see from vendors who actually make more if you use more?

Everyone knows that 10x engineers validate inputs and carefully manage dependencies; so clearly there's no risk of unexpected behavior.

It seems worth noting that one of the items in Wyden's rather pointed inquiry is the fact that the feasibility of doing this is known to have been demonstrated for the DoD by outside people familiar with it at least as early as 2016; so while this is the first confirmed case of adversarial use it's the outcome of at least a decade of just ignoring the problem; and a significantly longer period of failing to reasonably anticipate the problem. It's not like there's No Such Agency you could ask about "how could you spy on someone with the internet even?" if you wanted to know how well or poorly readily available information matched a nation state signals intelligence apparatus.

Purely as a matter of cellphones being expensive and somewhat tepidly capable in the before times I assume that there was a period within living memory when merely telling people not to Gordon Gekko on their DynaTAC where the russians can hear you was good enough; but that would have clearly and rapidly been getting less true for at least a quarter century.

The whole 'responsible disclosure' preaching and the not-terribly-subtle threats seem particularly bad given that there's an entire industry of actively more dangerous people who are not only treated as legal but actively courted by state agents and cops(and often even less savory customers, though they tend to be cagey about those); the ones who actively seek to keep vulnerabilities quiet so that they can continue to sell exploit tools and services based on them. Throwing zero days on github isn't ideal vs. getting them fixed; but it gets them fixed faster than if Cellebrite wants to hang on to a bitlocker bypass or Trenchant, and L3Harris Technologies Company, wants to keep selling 'network investigative techniques' that can bypass default windows defender configurations or whatever the situation is.

From the outside it's hard to know whether MS actually mistreated the researcher badly enough to justify their displeasure(the consensus appears to be that MSRC was never the best to deal with and has actively gone downhill; but this person's position seems significantly angrier than average) or whether they are perhaps wound a little tight; but implying that their legal status is the same as people actively running attacks against user systems is blatantly false and totally ignores the class of researchers who do actively run attacks while being treated as respectable.

It's a particularly bad look when at least Facebook got into a public legal fight with the NSO group over their nerd-merc work against their users; not like that actually solved the problem of attacks on cellphones; but it was an all-too-rare case of industry pushing back against the 'respectable' arms dealers; and not one that MS has an analog to.

We'll all pretend that nuclear-tipped VCs will remain cool-headed and cooperative when the AI debts start to go sour.

I'm not an expert on rebuilding massively exploded launch infrastructure; but I have a suspicion that a 2026-2029 plan is now going to involve less Blue Origin than previously believed.

Oh, they know; it's more that you can't really put "fuck palantir!" in an encyclical; but you absolutely can choose which perfectly plausible catholic author to quote in your piece on how weaponized AI is bad; and going with Tolkien over the other options seems deliberate.

When "AI-enthused defense contractors with names out of Tolkien" are literally a genre I suspect that he chose that particular citation because he knew it would lead to a few amusing crashouts.

Better, yet, it seems that projects that rely on paste.bin discussions should have been using a source control repository to keep them.

People need to treat discussions as the "live" part of technical documentation (which opens another can of worms, obviously.) But, if it is not source-controlled, assume it is ephemeral, or that it doesn't exist.

This also applies to stuff we cite in Stack Overflow. It's handy to cite a finding when documenting a code change, hack, or design decision based on an answer found in SO. But for very important stuff, additional documentation must exist somewhere, preferably source-controlled.