If you are hiring a developer your chances of finding one who is not incompetent is vanishingly small. The correct approach is to train them to be competent, and set standards. This should begin with requiring the bug tracker to be emptied out (or decreasing bug count, if the total number is currently overwhelmingly large), and there are plenty of online and in-person resources for training developers to learn how to write secure code.

Security vulnerabilities happen in every language. Anyone who thinks the language will make them safe is an idiot. What I mean is, you are an idiot, cmseagle 1195671.

The problem as I see it is coming up with good standards. We do have standards in some places, for example, SOX requires changing passwords every three months as best practices. But that is probably not actually best practice, so the wrong thing was codified.

How do we get the right things codified is the question.

My take was that he could have stopped it if he wanted to, but the bureaucratic machine was already in motion, and he would have had to put some effort into stopping it. I'm glad we didn't bomb Kyoto but maybe Xi will.

Wow, I hate both sides.

This guy claims that the crime reports just got routed to a different department. Probably not reliable, but neither is an opinion page in NYT

It was easy. I asked, "ChatGPT, are there any security bugs in this code?"

My code is now proven secure, get with the program.

This. Most companies don't follow best practices when it comes to good code (for example, they have a bug tracker that is always growing, never empty). They don't try to write secure code, they don't have trainings in secure code, they don't penalize insecure code (although they should in a lot of cases). That is why most corporate programmers can't write secure code.

History shows that incompetent developers cannot write safe code. There are examples of programmers writing safe code.

People who make excuses for unsafe code are usually crappy developers, and that is what I think of you. You're a crappy developer if you can code at all.

They aren't brittle. I've looked at them. The code is fine, but it uses an older style that is annoying to newbies.

If I were going to rewrite something in Rust, I would look at Firefox, not Coreutils which I would consider a waste of time.

And meanwhile, you keep presenting nothing more than absurd pedantic deflection from the means that LLMs actually use to achieve tasks, trying to mislead people into thinking that they're just disguised probability tables, ignoring the actual consequences of your derailment of the conversation from actual mechanisms to an exponentially-exploding model of the consequences of said actual mechanism, and even in your pedantism, failing to understand the difference between a Markovian state (the physical hardware state) and a Nth-order autoregressive process (the linguistic processing).

First of all, congratulations on constructing the most blatant false dichotomy Slashdot has seen this year. You genuinely seem to believe the only two options that exist in human parenting are:

1) Striking a defenseless human being who weighs a third of your body weight.
2) Being their "buddy," never setting boundaries, and letting them run feral.

If the only tool in your parenting arsenal to enforce a boundary is physical force, that isn't "discipline", it's an intellectual and emotional failure on the part you, the adult. Hitting a child is the lazy shortcut for an adult who threw an emotional tantrum because they ran out of words and patience.

And as for your demand for "logical and factual" explanations? Modern society didn't "fail to justify" why we stopped hitting kids. You just chose to plug your ears and ignore five decades of research. For example, the Gershoff & Grogan-Kaylor meta-analysis, looking at 50 years of data from 160,000 children across dozens of peer-reviewed studies, found NO evidence that physical punishment improves compliance or long-term behavior. None. Whatsoever. What it did find, consistently and across every demographic, was a direct correlation with increased aggression, antisocial behavior, anxiety, depression, and impaired cognitive development.

It teaches the exact opposite of accountability: striking a child doesn't teach them why an action was wrong; it teaches them fear of getting caught, resentment toward authority, and the core lesson that might makes right - that when you’re bigger and angry, you use violence to impose your will.

Take crime trends, and examine your thesis: if removing physical punishment created "unaccountable grown-ass children wreaking havoc" then violent crime in the west should have skyrocketed as corporal punishment collapsed over the last forty years. In reality, violent crime has fallen dramatically since its peak in the early 1990s.

there is a fundamental difference between a spanking and a beating.

Try that defense anywhere else in civilization. If you hit your spouse to "correct" them, it's domestic battery. If you hit an employee because they rambled or disobeyed you, it's assault. If you hit a dog with a board for chewing a shoe, it's animal cruelty.

The only context where people like you defend physical violence is when the victim is a small child who can neither defend themselves nor escape. You rebrand assault as "tough love" solely because the victim is powerless.

the single motherhood rate went from 20% to 70% in the last half-century.

I mean, why not add some completely fabricated statistics to top it off, sure! (21% of children in the United States live in single-mother households, not 70%). But why let basic demographic facts get in the way of a misogynistic rant designed to distract from the fact that you think hitting children makes you a tough guy?

The only lesson you're teaching is "be violent".

Because what it's doing is clearly not the same thing,

Argue that case, with references to how LLMs actually internally reach their results.

The physical biology is certainly different, but this isn't a question about "what things are made of" or even the specific NN type (e.g. smooth vs. spiking), and training differences don't even come into the picture; it's a question of the broad strokes of how conclusions are reached on forward processing.

Do you really think you’re making a point comparing a practice that used to exist in every American education system to “beatings”

Because what you're talking about literally is beatings?

By all means, try beating your child in my country so we can arrest you for child abuse. Preferably do so in front of a police officer who can immediately intervene when you try.

And your sole argument for it is "people used to do it". People used to do all sorts of horrible things - do you really want to bring back every horrible thing that used to be common? Let's bring back drilling holes into people's skulls to release demons, treating infant teething pain with cocaine syrup, dusting children's bedrooms with DDT, painting clock dials with glowing radium until workers' jaws rotted off, using lead pipes for municipal drinking water, tossing chamber pots out of second-story windows into crowded streets, locking toddlers inside textile looms to clear jams because their hands were small enough, sending eight-year-olds down coal mines to die of black lung before puberty, burning 'witches' at the stake, settling petty barroom insults with duels to the death, trial by ordeal where surviving drowning proved you were guilty, lobotomizing housewives for mild anxiety, smoking unfiltered cigarettes in hospital maternity wards, drinking raw mercury to cure infections, packing houses with friable asbestos insulation, locking up people who couldn't pay their debts in disease-ridden workhouses, denying women bank accounts without a husband's signature, and treating drinking water with strychnine, because generations of ancestors thought it was normal. Brilliant argument there, no notes.

I mean, isn't this obviously the solution?

You can use AI in legal work, but you still bear responsibility for your filings being accurate. So by all means have AI search for you - it can save you a ton of time for finding obscure things - but actually click the links and read them yourself. And if you don't, it's no better than making any other factual claim before the court without having duly assessed its credibility.

Why invent a new "aithink" verb when we already have "think"?