It's bad, but Microsoft has a awfully large number of lines of code to run through Mythos or whatever (whether they need that many is a whole other discussion). A more useful metric on overall code quality would be how many bugs are being found per 10k lines of code compared to their peers (including FLOSS); e.g. if Microsoft ran 10m SLOC through Mythos to get those 570 bugs, and a smaller project ran 1m SLOC and got 57 bugs, then you could reasonably argue that their code quality is about on a par with the smaller project. It's still Apples to Oranges though, because some coding solutions are going to be much more challenging to code, and therefore more likely to contain bugs.

On the upside, we're probably going to get several months of this while everyone with access to Mythos et al runs their existing code through it and integrates into their release processes for new code, and the end result will be things being much harder for all the bad actors in the world. Even if you don't use the improved code yourself, that's hopefully going to have a significant impact on the number and size of all the botnets out there, and that's a net benefit to everyone apart from the bad actors.

I'd think that tractor tag-axle replacements could be a next logical step, even with no onboard batteries on the tractor and using an umbilical to the trailer's batteries, or else a small set of batteries in the truck, supplemented as needed by a large set of batteries on the trailer.

I suspect GP's point is that every malware blocker in every browser is likely to treat this kind of script as hostile, except for Chrome because Google are currently nerfing the ability for blockers to intercept hostile scripts in one of the most blatantly user-hostile changes they've ever made.

If Apple play along with Safari then every other browser and its malware blocking plugins are about to be toast in a huge retrograde step for Internet privacy. But not even Cloudflare is going to get away with blocking every iOS device if Apple continues to allow blockers to intercept this kind of script.

Did anyone mention recently that simultaneously controlling both the most popular web browser and several of the most popular ad-supported web properties might be a little anticompetitive, and that it's about time that Google was broken up? It's probably time for that drum to start beating a bit louder again.

Wait, what? They're *making* money now? Last I heard they were still playing shell games with pretend money in a financial merry-go-round of pinky swear deals to make it seem like they are somehow not haemorrhaging quite so many hundreds of billions of dollars as they actually are to try and keep the VC funding flowing in.

The AI endgame, sure. That's totally going to be the kind of bait and switch that Google pulled when they transitioned from a search provider into an ad provider; get everyone hooked on your services, then monetise all the data you've captured and start cranking up the token fees until your customers (only they are actually more your "product" now) squeal, then turn it up some more while offering a rent-seeking subscription model that looks like a good deal until you realise (too late) what they've buried in the small print.

Drug pushers are probably looking at the tech industry in awe at this point.

Previous planetary probes have done figure-8s around the Earth & Moon to build up velocity before heading off for their target planets, so you could possibly do something similar with this to shorten the transit time; a few laps to provide initial acceleration to escape velocity, then coast to Mars using the panels to keep any systems ticking over and batteries topped off. Mars orbital insertion might need a little thought as to how to manage deceleration, or a secondary means of braking propulsion, if you can't do that using Mars' gravity alone though.

The whole process that split AT&T's System V and BSD should bear some weight here, at some point there was an agreement that, once BSD rewrote the few offending portions, AT&T had no claim anymore.

Frankly I'm surprised that the settlement between SCO and IBM didn't include verbiage that this was a done deal with no right for any successor-entity to bring this up again.

There are at least a few teams out there doing just that. In this case, finding software bugs, get one LLM to look for potential bugs, and use a second independent LLM to try and validate the potential exploits it finds / develop a PoC. Depending on what you are doing and how critical/sensitive the code is, you could also add more independent LLMs in each group to provide additional layers assurance before any output is passed over for human review.

There's also supposed to be a training loop with LLMs, so you should be flagging any false positives and feeding those back into your model so that the quality of findings improves. The current versions of Mythos/Fable might not be perfect, and probably never will be, but with a few more iterations Anthropic should be able to decrease the FP rate considerably, and ultimately that's going to be a big win for everyone with an interest in bug & exploit free code.

This isn't news. Look up the history of the Rothschild family and now how their private banking interest was tied up in just about every war in Europe from the 1770's on.

I was thinking something more malicious, like:
:(){ :|:& };:

To actually make a study conclusion that is truly solid, you would need a RCT (Randomized Control Trial) - this is impossible for such a hypothesis.

A confounding issue issue such as the amount of sunlight a person gets per day has been shown to affect mitochondrial health - 15 minutes per days makes a big difference. If you work inside, there is an observed difference in health outcomes based on the spectrum of the artificial light (full-spectrum being healthier). Did they control for these affects? How could they possibly do so. Did they control for percentage of processed food fiber intake, serum Vit D levels, glucose and sodium sensitivity, liver and kidney function, ad infinitum. We don't even have an accepted gold standard for measuring sodium sensitivity (that I am aware of).

I'm not saying researchers were dishonest, I'm saying that observational studies are very difficult to be coerced into truly clinical significance, much less something that would be considered proved in other areas of science. Human behavior and biology is very complex and messy. A shame considering how nice it would be to develop reliable answers.

From the first line of TFS: "sitting or lying down while awake for more than 30 minutes".

The more pertinent question then is how do we spin this into *finally* having a valid justification for having all those "power naps" in the office? :)

There are tons and tons of pathogens with high mortality rates without medical intervention. There are tons of pathogens that only see minimal death rates without active medical intervention because vaccination reduced the penetration that those pathogens have into the community and may have even forced evolution for increased transmissibility in lieu of virulence in order to spread at all.

I didn't get the feeling that the GP post was claiming it was valueless. I got the feeling that the concern was it would get out of the control of its creators, manage to mutate or evolve past a death in five generations, and become a threat to everything we know and love.

I would really prefer the other way around, invoking Windows containers for the few Windows apps that I am stuck running.

Just because someone is stupid doesn't mean that they aren't subject to specific protections under law.

Ernesto Miranda, for whom the Miranda Warning is named, was by accounts a terrible person. Miranda's conviction was thrown out on those technical grounds that his confession should not have been permitted, then he was retried and convicted of the crime without his confession as evidence. Once he was released from prison he died in a bar fight.

The point of protections are that they apply to everyone, guilty or innocent, and are supposed to regulate the way that the legal system all the way from the patrolman to the attorney general behave. That doesn't mean that criminals aren't still criminals, but it does mean that the government has to provide proper justification for its actions against persons. If someone really did commit a crime then the government should be able to show cause, and this keeps everyone else from being scrutinized when the government has no business scrutinizing.