I also found the comments pretty inflammatory, which makes me wonder what the engineers had said to get the conversation to that point. I don’t like to make judgement without the full context

Without the whole slack context, the pentesting comment might have been part of a whole chain of comments trying to discredit AI, and the CEO is trying to push for AI. I wouldn’t jump to saying the CEO is against pentesting in general until I had more information

as mentioned in another comment, it’s possible to make it secure and maintainable if you manage AI properly. Managing AI is like a product manager managing a team. It’s up to you to push for security and maintainability, but AI can absolutely look for vulnerabilities and holes and code smells if you ask for it.

which may still be worth it to secure a strong position in the market. You have to look at what competition Proton is facing (Google Workspace)

I never said speed was all that mattered. But from my experience, and my other friends in the industry, it is possible to achieve speed while maintaining quality. security, and maintainability. Because these are all things that the AI can look for too. Just look at how many vulnerabilities AI is finding nowadays. Just like any other product manager, you can bring up concerns, ask the AI to look into them, and validate the AI’s claims. Just like you would manage a team of engineers. Which is of course still faster than writing everything yourself.

If all you ask the AI to do is produce lines of code, that’s all it will do. But AI workflows can be far more complex than that.

“skill issue” comments are rarely productive. I have many friends that also work in the industry that feel the same, even if they are against AI. I trust their opinions (and my own of course) over yours.

Without the entire slack exchange, it’s not clear whether Andy Yen was responding exclusively to the call for pentesting, or towards broader comments about AI code.

they hacked the website. People who use Binance are storing their money there, instead of on a self-custody wallet

it’s hard to trust the word of Chinese/Uyghur people when the Chinese government is famous for suppressing information and “disappearing” people they don’t like. So western sources will have to do

His words are aggressively out of touch, but I will say that I agree somewhat. I tried going back to handcrafting code for a bit and it really does feel slow. Like, “absolutely no way to compete in the current market” slow.

just increase carbon taxes until these companies switch to green energy

It sounds like this case is actively being investigated by legal authorities, and whether or not Destiny knowingly possessed CSAM is still not determined.

I think the responsible thing for the internet to do is to wait until clearer facts come out, instead of casting judgement early and making the situation way more messy.

how clusters decide which members are reliable and which should be deemed faulty.

I believe you’re talking about RAFT. That requires trusting all nodes, so it’s not any different from how CAs already work. After all, the issue at hand is a compromised CA.

Thanks, I wasn’t sure if it mattered that the leaked keys in this case were for intermediate certs and not root certs (afaik)

I’m too lazy to read the court docs but I’ll just say this:

IF what you’re saying is true about the case being about a revenge porn case involving a (pretend) 19-year old girl, and the above commenters are claiming it as CSAM or sexting involving minors, then this is gross misinformation and you should not be downvoted so hard for calling it out.

That’s fair, but this thread is also full of people questioning the courts. If regular citizens can’t be trusted to judge, and courts also can’t be trusted to judge, who is to judge? (If we trusted all victims of any crime, you can see how that could be easily abused.)

Wasn’t the Gamer’s Nexus video on LG spy TVs, saying that the telemetry traffic is protected by SSL and thus they couldn’t figure out exactly what was sent? Would they be able to use the leaked keys to decrypt the traffic?

DNS requires consensus (on who owns which name). So if by “voting peer system” you are talking about decentralized consensus, then blockchain is one of the only systems of such kind.

If you don’t want blockchain, then there’s no real choice other than a centralized system like CAs.

Tell me then, was the problem solved, the work done by the LLM?

partially

Was it considered good enough for a mainbranch?

Probably, if it took multiple experts to catch the bug.

Or was it faulty/risky and require highly trained experts to catch? Then flagged, and only put into an experimental branch?

As happens with human code all the time

How many ex-Oracle memory experts do you think are available for this work, in which even Linus didn’t catch the race condition?

No idea, at least one.

A competent person like Linus can manage and direct competent code generation, whether that code is generated by an AI or an intern.

Whoa holy overreaction batman.

My comment wasn’t directed only at you, which is why I used the broader term “people”. I was just wondering if people had a legitimate reason to use archive.is over archive.org, considering I overwhelmingly see the former over the latter nowadays.