No argument there. I'm just fed up with people pretending that the problem is with boring utilities and civilization; rather than with CEOs and their circles.

It's especially irksome when it comes from the areas of 'tech' that are frankly kind of lightweight in a technical sense. Somehow the hardware side manages to go from 800nm to 5nm without sounding off their meds about it; while dudes who manage to pay someone to pay AWS to serve some javascript to a webview on an iphone are babbling about how how disruptive their innovation is.

Realistically email hosting is probably a safe-ish business. The required software is already more or less commodified(and the sort of people who pay extra for Proton rather than just using gmail or whatever their ISP points them to are the ones who specifically Do Not want you churning the UI all the time), just not desperately entertaining to administer; and the major challenge(even if you just ignore the amount of admin required to stay on top of security risks when internet facing and hope to get lucky) is achieving the necessary scale and stubbornness to get decent odds of delivery on the various major recipients of email who, at least initially, shoot the spammer and ask questions later or never if novel senders start popping up.

You could already DIY-mailsever in a fairly short span of time well before it became viable to ask a bot to do it; people just prefer not to because babysitting postfix just so that you can get rejected by the various services people you are tryign to reach use is not terribly rewarding.

It's not necessarily a glamorous or high margin sort of business; adequately competent hosted email isn't a wildly differentiated product; but people tend to not enjoy changing email addresses/repointing DNS/migrating mailboxes; so it's not a super cutthroat commodified market where people switch every quarter for the absolute lowest price. If you don't do anything particularly obnoxious or try to push price hikes there's a decent amount of inertia.

However, and this is what makes this guy's ranting seem so unhinged, it's precisely not the sort of business where you'd expect some sort of "AI transformation"; or a bunch of panting about whether the stack has velocity. Proton's config is a bit more fiddly than average, because it is supposed to provide better than 'just trust me bro' privacy assurances; but they do operate the fax machine of the internet age. We call it "email". And their customers are paying them for mailserver stay up; not the agentic everything app.

I'm not sure if this guy is butthurt because he didn't manage to score a nobel during his science time; or because he's not looking at an altman IPO; but the fact that he is screaming like a lunatic about “ruthlessly smash everything that stands in the way of AI velocity" when he runs something that is, as a feature, supposed to be a deeply boring utility suggests profound temperamental unsuitability.

It seems ironic, and a little telling, for the CEO of a company whose whole purpose is "mailserver stay up; securely" to be screaming at people about " Don't be the professional fax machine operator in the internet age".

Dude, you aren't some kind of randroid superman hero of industry. You run a kind of boring utility company. Which is fine; civilization runs on boring utilities quietly handled by competent people. Problem is that you don't seem to be fine with it.

Normal industry: Your factory has an expensive milling machine and a cheap stamping machine. Thankfully, customers actually seem to prefer stamped parts for most cases and you can produce those quickly; so you keep stamping out parts and rolling in cash.

Tech industry: As above but your entire c-suite believes that the milling machine with turn into mecha-jesus and end history; so you are bulldozing everything you can to build more milling machines.

It seems likely that the answer to this question is 'yes'; but it seems like a mistake to be distracted by it when we are talking about people who are, busily and intentionally, building 'AI' products against the public.

It's mildly comical when they attempt to emulate humanity; but the important bit isn't the cluelessness; it's the malice.

I suspect that this would be more tedious(and potentially less flattering); but you'd think that the metric you'd really care about for the juche-computer would be component availability.

Going by cost is interesting if you are trying to get the attention of balance-of-trade types and tariffs and dumping hawks; but it's an almost perfectly wrong measure if you are trying to catch any "oops, turns out that only the Chinese vendors so hungry they are considering offshoring to Vietnam still make a random passive or unexciting tolerances switching IC because it's a zero-margin part with no real room for differentiation that everyone who could got out of years ago" type situations.

If it's a real, drop-dead, 'national security' problem some of those are probably less serious, if there's a much fancier TI part that is overkill for the job but could be subbed in for only 3-4 factors of ten more; but if you want to keep economically viable civilian production open or it doesn't have a direct upmarket analog that could get really awkward; even if you've ensured that all the fancy logic ICs, copper, and gold are geopolitically friendly.

That's basically the Nexperia story, slightly simplified. Philips decided to private equity semiconductors generally; NXP decided to shove a bunch of the boring parts out to WingTech; then 'oops' European manufacturers who need diodes and ESD protection parts they thought were cheap jellybean stuff have cars piling up on the line because they can't get them.

Obviously losing a really cutting edge capability isn't preferred; but it's also the sort of thing that people notice because those tend to be pretty valuable; while low and middling capabilities, including ones that are sophisticated enough that you can't just throw money at restoring them fast, are things that are voluntarily surrendered because getting rid of low margin products makes line go up.

This seems like a great pick if you want to be absolutely sure that your computing stays between you, the techbros, republican loyalists in 'national security'; and possibly an Israeli software partner or two.

At least no chicom lithium stealing your thoughts.

"with some employees complaining about issues with style, paragraph formatting, blank pages, and challenges with tracking changes." sounds like they got the replacement they were looking for to me.

I didn't mean to imply that it is a single monolithic application, it does consist of several, but the relations must be pretty tight for there to be an article not even about language-independence; but about support for a single additional language, one often targeted by "C but cleaned up" efforts,

I was honestly surprised to see this myself. Regardless of its reputation for being more monolithic than classic init systems it still is, and has to be, capable of interacting with basically any flavor of service you'd want a service manager to manage; and I would assume that it doesn't include a d-bus implementation in order to not be capable of abstracted inter-process communication.

No doubt there are considerations at work here that I'm not smart enough to grasp; if you aren't having a bad time handling x.509 certificates you probably aren't doing it carefully enough; but I would not have expected it to be remarkable at all for a certificate-wrangling component to be implemented in a different language than some of the other components.

I assume that this is more pragmatic than just waiting for Sam to finish lying about transcendent AGI; but it feels a little dissonant to have the botmongers going back and forth between praising the glorious natural-language suitability of their progeny and putting together an entire platform, with more apparent effort than they have dedicated to human UI/UX considerations since sometime in win7(excluding dark pattern R&D) to aid you in discovering your sins against bot comprehensibility and fixing them.

I'm not really qualified to deliver a good holy war; but it does seem like there may be something to the criticism that monolithic integration has gone a bit far if supporting one utility being written in a different language is a special feature rather than a matter of the rest of the system not knowing or caring what is on the opposite side of an interface so long as it can act as expected.

You can't really beat the fundamental economics of software development: expensive to do right but cheap to copy means that you really, really, want to share a problem with as many other people as possible(unless your whole business is being uniquely good at solving whatever the problem is; but that typically isn't the case for this sort of software). Applies to both proprietary and FOSS: relatively mass-market software is often pretty cheap for what you get; really oddball niche stuff is frequently both pricey and terrible; while your life is going to get steadily more miserable if you are personally responsible for handling backports and fixes for some internal fork of a long-EOL version of an OSS package.

The big difference, at least potentially, is that, while it tends not to be economic to DIY, licenses that give you the right to DIY also give you the right to pay someone else to do it for you; or to form a coalition of people with similar problems and have everyone pitch in to pay someone to do it for you. You still need to either eat the cost of maintaining an internal fork or putting together some sort of coalition of people with similar problems to be the openJDK 8 forever pals and share the cost of maintenance; but the vendor can't just stop selling you licenses if they want you to move to their cloud offering or whatnot.

Random intermediate CA. They got a couple of commonly used root CAs to sign for them; and everything just works from there.

That's the problem. It's relatively easy to fire a certificate issuer; but it can get surprisingly fiddly surprisingly fast to ensure that all your stuff actually distrusts one(unless you are responsible for basically nothing but a a handful of in-support major browsers and are OK with the choices their vendors make, in which case it will be handled for you relatively quickly; and was in this case). Basically any network connected widget is going to have at least one trusted root store embedded in it somewhere, possibly not updated anymore; and a number of software packages either bring their own or only partially track the OS-provided one.

You also have very little control over what other people do; both what CAs they chose to get certs from and what...questionable...partnership decisions the root CAs you do chose to trust. It's not technically secret; but unless you are practically a full-time PKI nerd you probably didn't know until after the fact that Comodo, now Sectigo, had quietly trusted eMudhra for you.

I fully admit that this might be a 'me' problem, not a them problem; but I just don't understand why this agent monitoring setup was so vulnerable and is being treated as so novel.

Sure, the monitoring of whatever goes on inside the LLM is comparatively new and exotic; but when you set it loose on the internet it's going out through one or more of your WAN links, presumably with your router and firewall and so on in the way, and is mostly doing HTTP(s) stuff. Keeping an eye on what an internal host is doing when you can insert whatever trusted roots you want for TLS MiTM and you 100% own the pipe that it is using to communicate is not necessarily a desperately enjoyable task; but it would have been a relatively banal requirement a quarter century ago.

I'd also think that, when you are spending $$$$$ on the exercise in Nvidia compute gear, and it's a test of a 'frontier model' whose behavior and capabilities you are trying to better characterize and refine, allocating the handful of terabytes necessary to just store a full packet capture of the session in case it is relevant would be a no-brainer item.

Is there something I'm missing that makes this case more complex? I'm not talking about the 'grubbing around in the LLM's vectors and such' side; just the "a host is doing HTTP stuff through a WAN link we control, can we observe what it is doing?" aspect.