• 0 Posts
  • 57 Comments
Joined 3 years ago
cake
Cake day: July 4th, 2023

help-circle




  • An issue I’ve seen brought up in the open source community is that they have audits that look at the number of untriaged issues and time to resolve serious issues that their funding depends on.

    I’m in software, but not open source, so it seems like they don’t have someone aligned with their team who they can sit down and say “either we need more resources, cut scope for new features, or accept quality / security issues coming up” to, its kind of this weird game of politics they end up needing to play to get any kind of funding for full time maintainers.

    That’s the main reason they can’t just ignore issues that come up in their backlog, especially security ones.



  • Security vulnerabilities are different, especially when they also put a 90 day disclosure period in it which is more severe for a security exploit.

    That disclosure bit, not in the article, is really what tipped this all over the edge. If it was just hey, here’s a bug then its really just flooding the backlog for the maintainers who need to triage that. Disclosures are often used so people are aware that they’re using libraries that the maintainer has refused to patch, but in this case its really just holding the maintainers hostage so they end up wasting their time going through irrelevant issues.

    Also, many of these libraries get security audits to make sure they are actually triaging and working through their backlogs, so could lose actual funding they get.

    Ideally, they would either use their supposedly capable and powerful AI code gen to just make a fix and send over a patch, or at least use LLMs on their own end to triage the issues and only send over the most sever X periodically.



  • I wouldn’t say that’s a blanket true statement.

    There is plenty of opposition to immigration that is racist, but there are also legitimate issues of immigration growing a population faster than infrastructure and housing supply can keep up, or wealthy immigrants displacing more working class neighborhoods to take advantage of power cost of living.

    I don’t think blanket enabling of all immigration everywhere is a policy that would be a clear positive for the world.







  • People who are smart in one or two domains often overestimate how smart they are in other domains. They develop a mental model, confirm it quickly, and never re-asses it.

    The issue with AI, is we’re probably hitting our first real S curve with the current technology’s performance but a lot of people who bet big are only see the exponential part and assuming there won’t be a level off, or that the level of is far away.

    There is no Moore’s law for AI.