That's not my experience at all. The complexity of my instructions still depends on the complexity of the task, but recent versions can do FAR more than write CRUD boilerplate.

1. How much of Proton's code is security-critical? I would bet less than 1%. The rest is UI and CRUD. 2. Did you see how complex the vulnerabilities that AI has discovered were?

"stop lovingly handcrafting all our code" - Lol, that really sounds like a clash of cultures. But I am mostly on the CEO's side. I feel more and more like a product manager. Opus 5.5 has become so good that I often only take a glance at the code before accepting it. At the beginning of the year, it was more like "add this function to this file, write test cases for it that cover x and y". These days, I increasingly just describe what I want, and only give minimal short hints of how I want it, and it turns out to be just perfect. It identifies and handles corner-cases that I haven't even thought of. There may be a market for "lovingly handcrafted code", just like there is a market for handcrafted carpets or sweaters. But I don't think it's very big.

Your best engineers will be AuDHD, and AuDHD folk don't do well in these sorts of synthetic tests.

I can code in 20+ languages for over 12 different OS', write code that's good enough for CERN to run for particle accelerator data collection for a decade, have accelerated systems by an order of magnitude by understanding the poem space better than their previous engineers, but I am abysmal at exam style settings.

The software industry is riddled with SEs who write abysmal code but can pass a coding test easily. They're the folk that you have always needed to reject but didn't because they ticked a box.

It's planet of short stature now

Maybe it only needs like a few GB for a tiny gemini or tts model..

Interesting... I didn't consider that angle.
Thanks!

My opinion is that AI will kill Linux eventually. Not now, not when Linus uses it, because Linus knows how to code and is careful. But eventually the crappy vibe-coded junk will seep into the kernel. And then you'll get Microsoft-style code quality issues.

They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

The email wasn't even too good to be true. The nasty phishing emails are the ones where the recipient is supposed to get a real email on the topic, but it's because of a publicly known event and outsiders could easily make up the content, so they just need to find a bunch of likely recipients.

I think the "you've been assigned the mandatory phishing training" emails should come from an external sender and contain a link to get into the extended training, and you should only get the short refresher by finding it through verified sources. Not only would this be a good placement test, it would test that official communications are actually hard to fake and possible to verify using the process in the training.

"In response to the embarrassing data breach that hit the news recently, we've assigned every employee at the company an online training session about phishing at this link. By sure to take it immediately, because it's a legal requirement for our settlement and delays could affect your employment." --Russian Hackers

Russian sites like Yandex, Rutube, VKvideo... are great to find porn. But if they go down, I'll take the minor inconvenience for the sake of Ukraine.

More seriously, Yandex has been throttling queries rather aggressively lately, and I'm pretty sure it has something to do with their compute going up in smoke due to Ukrainian drones.

War department is Donald Trump and Pete Hegseth doing their fascist circle-jerk.

The DOD/DOW have been working on this for a while. They discovered, early on, that the device had a propensity to cause permanent nerve damage.

It's very unlikely the US have fixed that, as they'd largely sidelined the work as a failure. However, at 36%, Trump needs something he can call a win, no matter what the long-term consequences.

What can go wrong?

I wonder if the control room technicians will be allowed bathroom breaks...

Ever since I read Accidental Empires as a kid I knew that I wanted to work at a startup (or even found one) and live in Silicon Valley. That didnâ(TM)t really work out, even though I havenâ(TM)t fully given up yet (except the Silicon Valley part). I probably wouldnâ(TM)t be on Slashdot without him. Over the last decades I enjoyed his blogs, looked forward every year to his bold prediction, and was entertained by the crazy (but not successful) startups we he worked on. This year I was thrilled that he started blogging again, only to be shocked that even more terrible things have happened to him (heart attack, stroke and death of this son), and surprised that he was an ex-neighbour of and friends with Avram Miller, who writes an awesome blog I discovered to is year. RIP Bob. You will be missed.