It seems likely that the answer to this question is 'yes'; but it seems like a mistake to be distracted by it when we are talking about people who are, busily and intentionally, building 'AI' products against the public.

It's mildly comical when they attempt to emulate humanity; but the important bit isn't the cluelessness; it's the malice.

I suspect that this would be more tedious(and potentially less flattering); but you'd think that the metric you'd really care about for the juche-computer would be component availability.

Going by cost is interesting if you are trying to get the attention of balance-of-trade types and tariffs and dumping hawks; but it's an almost perfectly wrong measure if you are trying to catch any "oops, turns out that only the Chinese vendors so hungry they are considering offshoring to Vietnam still make a random passive or unexciting tolerances switching IC because it's a zero-margin part with no real room for differentiation that everyone who could got out of years ago" type situations.

If it's a real, drop-dead, 'national security' problem some of those are probably less serious, if there's a much fancier TI part that is overkill for the job but could be subbed in for only 3-4 factors of ten more; but if you want to keep economically viable civilian production open or it doesn't have a direct upmarket analog that could get really awkward; even if you've ensured that all the fancy logic ICs, copper, and gold are geopolitically friendly.

That's basically the Nexperia story, slightly simplified. Philips decided to private equity semiconductors generally; NXP decided to shove a bunch of the boring parts out to WingTech; then 'oops' European manufacturers who need diodes and ESD protection parts they thought were cheap jellybean stuff have cars piling up on the line because they can't get them.

Obviously losing a really cutting edge capability isn't preferred; but it's also the sort of thing that people notice because those tend to be pretty valuable; while low and middling capabilities, including ones that are sophisticated enough that you can't just throw money at restoring them fast, are things that are voluntarily surrendered because getting rid of low margin products makes line go up.

This seems like a great pick if you want to be absolutely sure that your computing stays between you, the techbros, republican loyalists in 'national security'; and possibly an Israeli software partner or two.

At least no chicom lithium stealing your thoughts.

"with some employees complaining about issues with style, paragraph formatting, blank pages, and challenges with tracking changes." sounds like they got the replacement they were looking for to me.

I didn't mean to imply that it is a single monolithic application, it does consist of several, but the relations must be pretty tight for there to be an article not even about language-independence; but about support for a single additional language, one often targeted by "C but cleaned up" efforts,

I was honestly surprised to see this myself. Regardless of its reputation for being more monolithic than classic init systems it still is, and has to be, capable of interacting with basically any flavor of service you'd want a service manager to manage; and I would assume that it doesn't include a d-bus implementation in order to not be capable of abstracted inter-process communication.

No doubt there are considerations at work here that I'm not smart enough to grasp; if you aren't having a bad time handling x.509 certificates you probably aren't doing it carefully enough; but I would not have expected it to be remarkable at all for a certificate-wrangling component to be implemented in a different language than some of the other components.

I assume that this is more pragmatic than just waiting for Sam to finish lying about transcendent AGI; but it feels a little dissonant to have the botmongers going back and forth between praising the glorious natural-language suitability of their progeny and putting together an entire platform, with more apparent effort than they have dedicated to human UI/UX considerations since sometime in win7(excluding dark pattern R&D) to aid you in discovering your sins against bot comprehensibility and fixing them.

I'm not really qualified to deliver a good holy war; but it does seem like there may be something to the criticism that monolithic integration has gone a bit far if supporting one utility being written in a different language is a special feature rather than a matter of the rest of the system not knowing or caring what is on the opposite side of an interface so long as it can act as expected.

You can't really beat the fundamental economics of software development: expensive to do right but cheap to copy means that you really, really, want to share a problem with as many other people as possible(unless your whole business is being uniquely good at solving whatever the problem is; but that typically isn't the case for this sort of software). Applies to both proprietary and FOSS: relatively mass-market software is often pretty cheap for what you get; really oddball niche stuff is frequently both pricey and terrible; while your life is going to get steadily more miserable if you are personally responsible for handling backports and fixes for some internal fork of a long-EOL version of an OSS package.

The big difference, at least potentially, is that, while it tends not to be economic to DIY, licenses that give you the right to DIY also give you the right to pay someone else to do it for you; or to form a coalition of people with similar problems and have everyone pitch in to pay someone to do it for you. You still need to either eat the cost of maintaining an internal fork or putting together some sort of coalition of people with similar problems to be the openJDK 8 forever pals and share the cost of maintenance; but the vendor can't just stop selling you licenses if they want you to move to their cloud offering or whatnot.

Random intermediate CA. They got a couple of commonly used root CAs to sign for them; and everything just works from there.

That's the problem. It's relatively easy to fire a certificate issuer; but it can get surprisingly fiddly surprisingly fast to ensure that all your stuff actually distrusts one(unless you are responsible for basically nothing but a a handful of in-support major browsers and are OK with the choices their vendors make, in which case it will be handled for you relatively quickly; and was in this case). Basically any network connected widget is going to have at least one trusted root store embedded in it somewhere, possibly not updated anymore; and a number of software packages either bring their own or only partially track the OS-provided one.

You also have very little control over what other people do; both what CAs they chose to get certs from and what...questionable...partnership decisions the root CAs you do chose to trust. It's not technically secret; but unless you are practically a full-time PKI nerd you probably didn't know until after the fact that Comodo, now Sectigo, had quietly trusted eMudhra for you.

I fully admit that this might be a 'me' problem, not a them problem; but I just don't understand why this agent monitoring setup was so vulnerable and is being treated as so novel.

Sure, the monitoring of whatever goes on inside the LLM is comparatively new and exotic; but when you set it loose on the internet it's going out through one or more of your WAN links, presumably with your router and firewall and so on in the way, and is mostly doing HTTP(s) stuff. Keeping an eye on what an internal host is doing when you can insert whatever trusted roots you want for TLS MiTM and you 100% own the pipe that it is using to communicate is not necessarily a desperately enjoyable task; but it would have been a relatively banal requirement a quarter century ago.

I'd also think that, when you are spending $$$$$ on the exercise in Nvidia compute gear, and it's a test of a 'frontier model' whose behavior and capabilities you are trying to better characterize and refine, allocating the handful of terabytes necessary to just store a full packet capture of the session in case it is relevant would be a no-brainer item.

Is there something I'm missing that makes this case more complex? I'm not talking about the 'grubbing around in the LLM's vectors and such' side; just the "a host is doing HTTP stuff through a WAN link we control, can we observe what it is doing?" aspect.

I don't know if you're a russian bot or some deluded idiot, but it amuses me to do a breakdown of your post.

NATO turned what was originally intended to be a mostly peaceful show of force like the temporary invasion of Georgia into a war of attrition.

First of all the "peaceful show of force" "temporary" invasion of Georgia involved a few hundred dead in the first two days, and another 5000+ civilians killed in the ethnic cleansing after that, all for a land-grab to seize control of territory covering half of Georgia's coastline that Putin wanted.

Secondly, the "peaceful show of force" "temporary" invasion of Ukraine involved hundreds dead, ballistic and cruise missile attacks on all of Ukraine's largest cities, and Putin publicly admitting the goal of overthrowing the Ukrainian government... and that's just within the first 36 hours. Within two and a half months Russian officials began admitting the intent to permanently annex parts of Ukraine, proceeding with a constitutional amendment a few months later claiming to annex vast territories that Russian had not remotely taken control of, and which Russia is not remotely capable of capturing. Donetsk alone has a population of over a million, two million if you include the metro-area. Russia spent months and many thousand of lives to capture, and later lose, villages in the range of low tens of thousands.

Remember WWI when the lines were pretty much static for years and then suddenly it was all over?

Yes, I remember. As I recall it wasn't exactly "sudden". As I recall... Russian casualties were around five million killed, wounded, or captured, the Russian economy was collapsing, Russia was running out of food, and Russian literally lost it's own capital to civilian rebellion. A few months later the Russian government collapsed and surrendered vast territories including Finland, Estonia, Latvia, Lithuania, parts of Poland and Ukraine to Germany and its allies (known as the Central Powers). Right about that point the U.S. joined the war reinvigorating the Allied Powers. Germany&friends knew they couldn't win a protracted war. They attempted a quick win, and, in short, they failed. The Allied powers steadily beat them down, with the allies eventually breaking through the lines and progressively liberating territory. With the Allies steadily advancing and the war obviously lost, German forces began rebelling and Germany surrendered.

That's what's happening here. Russia has most of Donbas plus a buffer zone in some other regions that directly border Russia. Ukraine is throwing men at the front lines for Russia to kill but is running out. Territory held is largely irrelevant compared to the number of men killed and weapons destroyed.

So much to unpack there, but it's amusing how you cite "territory held is largely irrelevant" given that the tide has turned and Ukrainians are now the ones breaking through lines and liberating territory from Russian occupation. It's not much yet, but all the map trackers show the reversal. Russia is now officially loosing more territory than they gain. Russia WAS slowly gaining small bits of land, largely through sending meat waves of untrained ill equipped soldiers at Ukrainian lines until the Ukrainians ran out of ammo and had to fall back. However now 7 out of 10 Russians killed are killed by drones. The "no man's land" between the two sides is now many kilometers wide. Any Russian trying to advance gets hit by a drone. Russia has also losing on average 1 air defense system every day, and rapidly depleting. Russian supply lines are getting pummeled by drones. Russian refineries are getting pummeled by drones, with progressively worsening fuel shortages for both the military and for the increasingly rebellious population. Cheap advanced Ukrainian drones are taking out expensive crappy Russian drones, including Russian's new jet-drones. Practically every country on earth is asking Ukraine for their military drone tech, the Russians can't remotely match it. Russian's economy is also fucked, but that topic pretty needs a separate book to cover.

Interesting side notes on weapons destroyed. Russia is destroying it's aircraft almost as fast as Ukraine is, between incompetence and maintenance failures and friendly fire shooting down their own aircraft. Also the nation that is the biggest donor of tanks to Ukraine is... Russia. Ukraine captured countless Russian tanks intact because the Russian military is so abysmal incompetent and corrupt. And as I mentioned, Russian air defense units are depleting. The war is now approaching 5 years, longer than the entirety of WW1. Ukraine is a small fraction of Russia's size, and Russian is literally losing and headed towards another soviet-union-style collapse. The biggest shock to the world of this entire war is just how worthless Putin has made Russian military, through systemic corruption and systemic incompetence.

Polls show the Ukrainian population isn't interested in surrendering. They are defending their homes. It's simple, the war will end when all the soldiers go home. When Russian soldiers go back to their homes in Russia, and when Ukrainian soldiers go back to their homes in the currently occupied parts of Ukraine. Although that's not likely to happen until Putin either expires or is overthrown. Not only is he fanatical enough to drive his country to collapse in the attempt, he knows if he did end the war in failure he'd get killed or overthrown for it.

Anyway, pointless reply to a bot or a useful idiot. But maybe some random passer-by will find some bits interesting. I don't know about the rest of the world, but mainstream US news rarely mentions the Ukraine war anymore, and certainly not in any detail.

-

Are you going to mention how our own economy has changed as it has increasingly fallen under the sway of finance guys and MBAs? Because the claim is significantly more specific than "the US from 1950 to present sucks"(because the hyperfocus on finance and MBAs who think that all activities are fungible is significantly newer than the postwar US economy generally) and it's some of the trends you see in an exceptionally favorable economy as they displace other flavors of management that are most damning.

Even aside from how unhappy site operators are about the egregious botherd scraping behavior; it's hard to see why vendors would be enthusiastic about this situation.

It's overwhelmingly the case that vendors hate returns and chargebacks; and generally try to avoid situations where those are more likely to arise. An error-prone mechanism that acts "on behalf of" in a way where it does have the user's credentials and payment information but may well not have their authorization in a legally binding way when it decides to order 100 of something seems like the last thing they would want to deal with.

Maybe someone will manage to ram through glorious-agentic-future and it will become de-facto mandatory to cater to people who have abandoned ordering from websites in favor of prompting bots to order for them; but until that happens it's hard to see merchants reputable enough that they are interested in keeping their ratings and relationships with payment processors in good order wanting to touch the situation. Now, scammers who already hop between expendable presences as soon as dissatisfaction catches up with them; those are probably quite interested in the future of prompt injection based advertising.

My suspicion is that the reality predates the symbolism; but it looks jarring because even autocrats are often media-savvy to a degree and often don't want to look stereotypically autocratic, so real world examples normally avoid laying it on quite as thick(except for special occasions where it actually matters; eg. because a 'war' is something that congress does but a 'police action' need not be).

Trump seems to have no interest in avoiding autocratic cliches and saying things that sound vaguely lifted from The Godfather; so he actively leans into it. Presumably a handy loyalty test. Complying with the style guide is not an assurance that someone will just eat perjury charges covering for him or whatever; but if you want to find people whose dysfunctional relationship with authority dominates their personality demanding that they comply with laughably stupid things and having them fall into line isn't a bad start for something that is easy, cheap, and legal.