Forgot your password?
typodupeerror

Comment Re:Apply Betteridge's Law (Score 1) 49

So, no, this cluster of patches doesn't tell us anything in particular beyond what we already knew: That emergency patches are relatively common.

Considering that Microsoft has been promising this exact same type of improvement since the release of XP Service Pack 3, the words spoken now are worthless platitudes provided to ensure the smoothness of the theft of your money. There is zero reality behind any of their promises.

I'm just talking about statistical patterns. I know little about Microsoft patches. I abandoned Windows in 2001, right around the time XP was released, and have never looked back.

Comment Re:25,000 lines of code (Score 1) 76

The LLM and the compiler and the formatter will get the low-level details right.

Maybe in about 90% if you are lucky. That still leaves about 10% error rate which is way too much.

Not remotely similar to my experience. Granted I'm writing Rust, and the Rust compiler is *really* picky, so by the time the agent gets something that compiles it's a lot closer to correct than in other languages. Particularly if you know how to use the type system to enforce correctness.

Your job is to make sure the structure is correct and maintainable, and that the test suites cover all the bases,

Depends on the definition of "bases". Passing test suite does not show your program correct. And if your test suite is also AI generated then you are again at the problem whether the tests themselves are correct.

Yes, you have to know how to write tests. A few decades of experience helps a lot. I find I actually spend a lot more time focused on the details of APIs and data structures than the details of tests, though. Getting APIs or data structures wrong will cost you down the road.

Also, I suppose it helps a bit that my work is in cryptography (protocols, not algorithms). The great thing about crypto code is that if you get a single bit wrong, it doesn't work at all. If you screw up the business logic just a little bit, you get completely wrong answers. The terrible thing is that if you get a single bit wrong, it doesn't work at all and gives you no clue where your problem might be.

Of course that's just functional correctness. With cryptography, the really hard part is making sure that the implementation is actually secure. The AI can't help much with that. That requires lots of knowledge and lots of experience.

and then to scan the code for anomalies that make your antennas twitch,

Vibe error detection goes nicely with vibe programming. That being said, experienced programmers have a talent to detect errors. But detecting some errors here and there is far from full code review. Well, you can ask LLM to do it as well and many proposals it provides are good. Greg Kroah-Hartman estimates about 2/3 are good and the rest is marginally somewhat usable.

Deep experience is absolutely required. My antennas are quite good after 40 years.

then dig into those and start asking questions -- not of product managers and developers, usually, but of the LLM!

Nothing goes as nicely as discussing with LLM. The longer you are at it the more askew it goes.

You really have to know what questions to ask, and what answers not to accept. It also helps to know what kinds of errors the LLM makes. It never outright lies, but it will guess rather than look, so you have to know when and how to push it, and how to manage its context window. When stuff starts falling out of the context window the machine starts guessing, approximating, justifying. Sometimes this means you need to make it spawn a bunch of focused subagents each responsible for a small piece of the problem. There are a lot of techniques to learn to maximize the benefit and minimize the errors.

My point is that 25k LOC a month (god forbid a week) is a lot. It may look working on the outside but it is likely full of hopefully only small errors. Especially when you decide that you do not need to human-review all the LLM generated code. But if you consider e.g. lines of an XML file defining your UI (which you have drawn in some GUI designer) to be valid LOC then yeah. 25k is not a big deal. Not all LOCs are equal.

Yeah, I am definitely not doing UI work.

Comment Re:25,000 lines of code (Score 1) 76

its during those sprints when I'm pumping out thousands of lines per day that I write the code that turns out to be the highest quality, requiring the fewest number of bugfixes later

yeah, all of us write (or copy/paste) great boilerplate code. that's not really something to be proud of.

we all make mistakes when writing business functions which are never 25k LOC in a week.

Speak for yourself. I wrote Android's Keymaster implementation in less than a month, and it was about that size, and then re-wrote most of it in a week when it turned out I'd made some core assumptions that Qualcomm couldn't match in their implementation. It was relatively bug-free for a decade -- even when a third-party security research lab spent a month scrutinizing it. They found a handful of things, but nothing serious. I was amazed, especially since I'd seen the reports they turned in on some other code.

That's just one example. In my nearly 40-year career I've had a half dozen crazy-productive weeks like that, and usually when working on particularly-complex bits. If you haven't had that experience, that's unfortunate. It's not something I could do frequently (or would want to), but it's a glorious feeling when you're that deep in the zone.

Comment Re:Aerospace FFRDC role? (Score 1) 63

That's the challenge for the source selection/proposal evaluation. It's tough to write independent criteria that allow you to throw out a bid as "implausible". (I remember one where the total travel budget for the 3 year period of performance was 2 people, 1 week, 1 trip per year. This was on the same project where I was on 75% travel. I asked, 'How do we mark this as bullshit?' and was told, "Well, that goes into the overall evaluation criterion for 'cost realism'. That group won the bid, by the way.)

Comment Are they asking for encryption everywhere? (Score 1) 18

Stuff like this seems to be asking for the result is a beefing up of TOR-like networks. You can't levy tariffs on something you can't show happened, and if streaming is taxed, people will just head to the high seas, perhaps have a connection to a private channel that is brokered by a cloud service, similar to how a lot of remote access systems work. Maybe even something like TailScale, but bigger, where people can get keyed access to tagged servers, with the SDN handling encryption, even routing of packets on top of normal ISP routing.

Comment Re:TypeScript? (Score 3, Informative) 39

That surprised me, too. TypeScript is a very poorly-congealed ("designed" seems a bit strong) language.

Of the two popular scripting languages - python and ruby - python probably makes more sense as you can compile into actual binaries if you want.

For speed and parallel processing, which I'd assume they'd want, they'd be better off with Tcl or Erlang, both of which are much much better suited to this sort of work.

Comment Re:I get that they don't like MS office (Score 2) 51

The entire code is there to view. If worried about a backdoor, feel free to do a clone and go examine it.

I am all for office suite, be it OpenOffice, Libreoffice. I prefer if at least 1-2 would get backing/funding/devs to work on it, preferably more than one, but a F/OSS office suite will be a major gain. Especially if it supported storing documents via various cloud providers, as well as document versioning. Microsoft Word used to allow one to have one document with a ton of versions in it, which made it easy to find an "oops", and go back to it, or go back to a line of thinking before it was erased and changed.

This is important, as an Office app is one of the things used the most on the job.

Comment Re:They probably had incompetent people anyway... (Score 1) 63

Clearly you don't use this tech

That's because I know better. You'll figure it out someday as well. It's a little surprising you haven't figured it out already.

I suspect you might know already, even if you don't want to admit it. That's why you're attacking me instead of addressing my claim.

There are other dangers to using AI far worse than just some shoddy code and sketchy documentation, such as cognitive atrophy and loss of brain plasticity, that should concern you as well.

There is also a growing body of evidence that calls the productivity gains into question. Is AI really worth the cost?

Comment Re:Doing the editor's job. (Score 3, Informative) 37

Relativity = gravity is represented by the curvature of spacetime. Curvature is linear, R. The formula treats curvature linearly. As things get closer and curvature spikes, the math just scales at a 1:1 rate

Quadratic gravity = Squares the curvature. Doesn't really change things much when everything is far apart, but heavily changes things when everything is close together.

Pros: prevents infinities and other problems when trying to reconcile quantum theory with relativity ("makes the theory renormalizable"). E.g. you don't want to calculate "if I add up the probabilities of all of these possible routes to some specific event, what are the odds that it happens?" -> "Infinity percent odds". That's... a problem. Renormalization is a trick for electromagnetism that prevents this by letting the infinities cancel out. But it doesn't work with linear curvature - gravitons carry energy, which creates gravity, which carries more energy... it explodes, and renormalization attempts just create new infinities. But it does work with quadratic curvature - it weakens high-energy interactions and allows for convergence.

Cons: Creates "ghosts" (particles with negative energies or negative probabilities, which create their own problems). There's various proposed solutions, but none that's really a "eureka!" moment. Generally along the lines of "they exist but are purely virtual and don't interact", "they exist but they're so massive that they decay before they can interact with the universe", "they don't exist, we're just using the math out of bounds and need a different representation of the same", "If we don't stop at R^2 but also add in R^3, R^4, ... on to infinity, then they go away". Etc.

The theory isn't new, BTW. The idea is from 1918 (just a few years after Einstein's theory of General Relativity was published), and the work that led to the "Pros" above is from 1977.

Comment Re:Aerospace FFRDC role? (Score 1) 63

The hope is to lock in the contract with totally unrealistic cost/schedule, and then make up the financial risks through Engineering Change Proposals. Those ECPs reflect both requirements instability and cost/schedule "rebaselining" instability. I think managing ECPs is what separates the really good Program Managers/System Program Officers from the merely competent PM/SPO.

Slashdot Top Deals

Make it myself? But I'm a physical organic chemist!

Working...