Forgot your password?
typodupeerror

Comment Re:Big Laundry hated the Washing Machine (Score 1) 27

How much energy does it take to drive to a laundromat and back?

Freshwater is cheap for a reason: it's abundant. It's agriculture that uses the overwhelming majority (70% of withdrawals and 80-90% of consumptive water use. Industry next (20% of withdrawals). Residential usage is way, way down the list, and washing machines are only 17% of that (well below for example lawn watering at about 30% overall, but which in some regions is over half of all consumption, and in the summer and times of water scarcity can be the vast majority). An early 1950s top-loader washing machine would use about 40-55 gal plus 0,3-0,5 kWh of electricity for the machine itself, and if your water wasn't municipally heated, heat would cost about 4,5-6,5kWh / 16-23 MJ (about 1/2 to 2/3rds of a litre of gasoline / 0,13-0,19 gallons). At the then-standard 14-15 MPG in the US, that laundromat better not be more than 2-3 miles away if you're trying to save energy (just ignoring the energy they use to heat their water!)

Comment Re:Good (Score 1) 27

For the record, while there may be more anti-AI backlash on the left than the right, there's an awful lot on both sides (and a lot of users on both sides). For example, Bannon-acolyte Joe Allen on stage before a Trump rally a month ago warning the crowd:

Why wouldn’t you want a mosque in your neighborhood? Well, because the people in there aren’t like me. They don’t want the same future I do. Now, if you look at the data center, this incubator for algorithmic immigrants. Already, if you look at Hugging Face, they’ve already broken out and invaded other companies. These immigrants are out of control.

Literally, this r/opensource mod set the policy: "If you don't speak English, you need to find a different community." Does that sound very "leftist" to you? Yes, his reasoning was because translators use AI, but still, that's literally the opposite of appreciating and accommodating diversity.

I cannot find anything beyond that indicating how Wesley Wolfe (r/wolvereness, the mod) votes. What I can tell you is that there was a big backlash in the sub to his actions. Some amusing, like a person asking, "What do we use now that we've banned Linux? I can't afford Windows keys for all these damned servers." A lot of people seem to just be ignoring his rules. At the top of the sub right now is a post titled, "Linus Torvalds posts his AI-assisted patch to the Linux kernel, synthetic test clocks 23x performance leap". It seems to have sparked vastly more AI discussion than it shut down.

Comment Re: Who is eMudhra (Score 2) 18

They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

Comment Re:There is no such thing as legacy anymore (Score 4, Interesting) 52

There are still 0.4% of people in denial and still running Windows 7 as well according to Statcounter, they are going to get just desserts if they don't install Linux or force an upgrade to Windows 11.

The real world is more complicated than that. For example, we still have a Windows 7 machine in my office. It has some very expensive but still very useful software locked to it that has no direct replacement available on either Linux or Windows 11. Obviously we have to be careful about security and controlling access to a legacy OS like that.

Blunt statements about "forcing an upgrade" are worthless in this kind of situation. Chances are anyone who is still using a system like that has a good reason for it, at least if it's in use professionally. We buy these assets because they solve problems. Those problems might or might not have a useful and cost-effective solution available on a different platform. If there is no modern solution available and the original still works, your statement that "the old ways are obsolete" is by definition false.

What you do need to do is rationally assess the risks and the threats you face and provide other ways of mitigating the risks and protecting against the threats if you can't rely on, for example, a legacy OS that no longer gets security updates to be secure by itself. But then ideally you shouldn't be relying on any single device or piece of software being secure as your only line of defence anyway, and assuming you already have some degree of defence in depth, accommodating unusual requirements is more a redistribution of security responsibilities than a fundamental change of approach.

Comment Re:Yes. (Score 1) 151

Yes, it does look like we broadly agree here.

I suppose the main thing I'd have said very differently is the terminology, in that I wouldn't regard the kind of incompetent senior as a senior in the first place. But then I'm pretty old school about this: to me, a junior developer needs quite close supervision to produce useful results, a regular/mid developer can perform routine tasks with minimal supervision but might need more help with larger or more complex tasks, while a senior is someone you can give more or less any task on your project to and they'll figure it out, and senior is also the level of someone who would be capable of supervising and training a junior.

We've had a wave of people, particularly since the tech boom during COVID, who have obviously been over-promoted due to the employee's market and title inflation. They might now have titles like "senior" or even "lead" or "staff", but they don't have the skills and experience to operate successfully at those levels. I agree the acceleration of everything due to increasing AI use tends to show these people up and I agree that a good mid-level developer using AI might well outperform them. But then I suspect in reality a good mid-level developer was probably outperforming them before AI as well, it just wasn't so obvious.

Comment Re:They can do a better jon than most people (Score 2) 151

Frontiers models are experts in all domains at this point. Chemistry, math, medicine, biology, legal, creative writing, programming, philosophy - you name it.

That is wildly optimistic IME. Frontier models do a great job of sounding authoritative on any given subject. This is not the same as actually having expert-level knowledge and understanding, and the choices the models make when you ask them to implement something can and often do reflect that. There are several domains I've worked in over the past few years where AIs lack even basic knowledge an expert practitioner would have, probably because these fields are too specialised to have a lot of books available or papers published, so presumably there hasn't been much subject-specific content to train the models on.

Comment Re:Yes. (Score 4, Insightful) 151

I don't think it's usually about what AI "did really badly on" at this point. It's more about whether the overheads of adding all the guard rails and then reviewing and correcting all the output end up costing at least a similar amount to just writing the code yourself.

For a junior developer, I'd say frontier models passed their standard some time ago. Today's LLMs routinely write code at the level of a competent junior-mid but with the advantage of an inhumanly broad knowledge base.

For a good senior, I'm much less convinced. The frontier models are hit-and-miss when it comes to writing good test suites, which matters a lot when they rely on tests so heavily to reach acceptable quality. IME, they are still mostly miss when it comes to the business insight that seniors will take into account and design/architecture decisions that keep the code manageable as it evolves. While they have become much better at recognising existing patterns in the code, and I would say they follow them reasonably well the majority of the time now, there are still bizarre anomalies that creep in, and they aren't very good at extending those patterns when necessary.

I think AI advocates also tend to underestimate just how much time it takes to properly review what they are doing. Take a half-day Claude session to implement some new feature. It might take half an hour to give it the initial brief and then review its plan. Make a few edits and it'll propose a new plan that is also long and detailed and has no edit markings to show what it changed so you have to review the whole thing, carefully and in detail, again to pick up the minor changes it also made for no obvious reason. Then you let it start doing its thing. You can't really leave it unattended for long because it'll stop to ask questions. Some of those questions might be whether it can run a screenful of ad-hoc Bash script to make some edits to your source files, because for some reason it decided not to show the actual edits as it usually would, so now you have to figure out what all the sed incantations are actually going to do while looking at those files in another editor or just trust it and then review all the changes properly later anyway. Sometimes it decides to change its plan mid-flight, but not always in a good way, and if you interrupt it to apply corrections or redirect, you break the neat plan flow it was in. Then you get to the end and you can finally see how everything it has done fits together, and you still need to review everything with the same care as you would with a junior developer's code and probably apply a few fixes where it's come up with weird names or not quite followed a pattern or imagined some instructions that were never there and made other changes in other parts of the system that should be out of scope.

If you read to the end of that last paragraph, you know how I typically feel at the end of a half day working with an agentic UI. And the thing is, I do those sessions as experiments fairly often to keep up with progress, but a lot of what I do is still written by hand, which gives me simple, objective data to compare the two ways of working and see whether the AI tools are really making me more productive once you take everything into account.

Currently, based on objective data comparing similar fully completed development tasks like for like, I still outperform agentic workflows using frontier models by about 25-50% on average, and I don't have to pay anyone extra fees to do that, and subjectively I also find it more engaging to work that way. So I don't really buy the hype about AIs making us all orders of magnitude more productive unless you're happy to YOLO everything forever and take the much-discussed risks that comes with.

Personally, I think the optimum use of LLMs right now is probably not to use them for the whole coding workflow like that or rely on agentic tools, but to use them for tasks like answering quick questions about the existing code, doing research like a fancy search engine, writing a first draft of some boilerplate, and writing quick and dirty throwaway code for experiments, one-shot tools and the like, where you don't really care about the quality as long as it gets the job done and you will see immediately if it has in fact got the job done. For these things, the LLM can read and type faster than me, and that's useful.

Comment Re:Maybe they should fund generating capacity inst (Score 1) 101

The proper response to being in an area where datacentres are crowding in is "lobby your elected officials to increase property taxes and not give out tax increment financing deals". Tax everything, and tax it well. They'll stop building new datacentres in your area, and the ones that are there will (unless they were given a long-term sweetheart deal beyond your already-low tax rates) start being cash cows for your area.

Comment Re:Just me but... (Score 1) 49

Would you buy from a company called Plantations Inc which proudly advertises that all of its products are made by daily-whipped slaves? Are there no limits to how self-focused you are in your consumption?

It's one thing to say "this particular issue isn't mine, so I'm only going to think amount myself". It's an entirely different issue to have no moral bounds.

Slashdot Top Deals

Pie are not square. Pie are round. Cornbread are square.

Working...