Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
@GossiTheDog I have to say, as someone who lives in the D.C. area and is plugged into gossip networks of both civil servants and contractors…there is a lot of this kind of thing* going on lately.
*”This kind of thing” being “the contract is off, no, wait, now it’s back on.”
Wow. CVE database is in serious trouble, tomorrow.
The cyber industry as a whole is in trouble also really, it’s the elephant in the room - the collapse of the White House’s support for cybersecurity is obvious and pronounced due to widespread cutbacks.
Just as an update to this - @briankrebs has confirmed with MITRE the letter is real, and as it stands the CVE database is likely to go offline tomorrow.
There's an argument that MITRE should try to keep everything alive and run things without funding and contracts etc.. but, honestly? My take - stop doing everything that isn't in the contract. Force the issue.
Organizations across industry, government, national security and critical infrastructure rely on the CVE Program, which serves as the de-facto global standard for vulnerability identification and management.
DOGE have terminated MITREs contracts, they say they will be laying off nearly 500 people. This will have impacts beyond CVE - think MITRE ATT&CK etc. virginiabusiness.com/nova-govc…
If you want to know how stupid the CVE situation is - CISA are trying to source last minute funding or look at taking CVE management in house, but they themselves have had a massive budget cut where the staff trying to fix it are also at risk of being cut.
GCVE: Global CVE Allocation System
The Global CVE (GCVE) allocation system is a new, decentralized approach to vulnerability identification and numbering, designed to improve flexibility, scalability, and autonomy for participating entities.
CISA have, at the last minute, extended the MITRE CVE contract. “The CVE Program is invaluable to cyber community and a priority of CISA. Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services. We appreciate our partners’ and stakeholders’ patience.” HT @metacurity
MITRE’s statement is interesting as they included trademark and copyright symbols on terms like CVE.. one to watch as people try to start their own systems.
oh good it aligns with the first cert shift to 200 day expiration too. Quick everyone find new fields before then so it all crumbles with no one to figure out anything anymore
@metacurity I feel like this short period of uncertainty has done enough damage that alternatives will come forward regardless of what will happen to MITRE in the future.
I just hope that we'll be able to arrive at a better independent and decentralized solution without completely fragmenting into multiple competing standards
They're hirarchical and already delegated to a lot of organizations. And they're already used at other places like TLS certs and such. Also you can address anything and everything with them.
GCVE: Global CVE Allocation System
The Global CVE (GCVE) allocation system is a new, decentralized approach to vulnerability identification and numbering, designed to improve flexibility, scalability, and autonomy for participating entities.
Not seeing any other source than this shady website in every report on this. No board member is actually claiming this foundation, or responding to comments, and there are SEVERAL red flags. Do you have on good authority that this is legit in the slightest?
At my workplace they'd say "let it fail". Something better - or different - might emerge from the ashes. Maybe we will have less dependence on the US government, maybe we will find that people have to apply every update rather than just the ones with CVEs.
See my updates. CVEs will still be issued to CNAs (via API, as long as that's running), but the more manual stuff they do (i.e. issuing cves to non-CNAs) may suffer in the time being.
It seems like there are a lot of unknowns at this point about what exactly will happen this week with CVE, but here's more of what I've gathered: CVEs will still be issued to CNAs, or CVE Numbering Authorities, i.e.
Even if no new CVEs are officially released for the next five years, I reckon we can still have applications riddled with CVEs still being used in most businesses.
come on, people can still post the findings to X and Mr Musk will boost it, there is no need to spent a dime for something that private corps can do for free. 😭
Agreed, this piece should backfire spectacularly! Apparently we now live in an era where cold hard facts no longer mean anything at all, and if you disagree with them, just demonize them and reference them as a "crazy liberal witch hunt". It's not a witch hunt when THERE ARE ACTUAL WITCHES lol
I probably should have paid attention to the underlying infrastructure. Is it commercially maintained data, thus out of our grubby little hands reach, or is it something that could be dumped/torrented?
Couldn't companies who made a product which uses CVE data (vuln scanners and so on) fund it? Of course neutrality or indipendence needs to be considered...
Or Europe could continue from this point on. Might even make more sense since most IT products are developed in the US and Europe buys a lot of it. It could be a good idea to own the CVE board in Europe.
Diplomatie - Indien und Russland wollen enger zusammenarbeiten - Delhi legt Waffenkäufe in den USA wegen Strafzöllen auf Eis
Diplomatie - Indien und Russland wollen enger zusammenarbeiten - Delhi legt Waffenkäufe in den USA wegen Strafzöllen auf Eis
…
It is becoming apparent that aggressive American tariff policy, coupled with the imposition of a hegemonic strategic proxy strategy, is having the opposite effect at the level of the BRICS+ countries and is accompanied by an increasingly close alliance based not only on economic but also on regional strategic interests. This reflects an attitude that is quite consistent with that of the Global South in general.
"The mission of the United Nations is to establish a one-world totalitarian communist government... It has been an international terrorist organization from its very inception.
These are the ones that are controlling the narrative and act as the enforcement arm for the Billionaire Boys Club, aka WEF... They have a meeting scheduled on September 20th through 22nd in which they're most likely going to declare a "planetary emergency" due to "climate change"...
Look for them to attempt to do a total lockdown in the human population on this planet with a total confiscation of private property and farms.
This must be resisted by any means necessary and at any cost." -Gary Williams
@scottdhansen looks like the power went out at 4:49. Only 145 customers affected. That means we’ll be last to get the power back on since we have such a low number of people affected.
My guess is that a tree branch took down a power line. Which means it’ll be about an hour to fix it once the crew gets out here.
@scottdhansen once they get there… the last update I got was that they haven’t even assigned a crew yet. Right now the estimate to have the power back on is 10:30
Man reads about bad effects of eating too much salt. Sees a lot about how to reduce sodium intake - but nothing about chlorine. Gets idea of reducing his chlorine intake... by replacing sodium chloride with sodium bromide!
Asks ChatGPT if this is okay.
Yes!
Replaces his salt with sodium bromide. Gets 'bromism'. Becomes paranoid, has hallucinations. Goes into a full-blown psychotic episode. Gets locked up. Doctors suspect bromism, treat him. Gets better.
“For three weeks in May, the fate of the world rested on the shoulders of a corporate recruiter on the outskirts of Toronto. Allan Brooks, 47, had discovered a novel mathematical formula, one that could take down the internet and power inventions like a force-field vest and a levitation beam.
as long as the cops are brainwashed enough to fight their own kind, and as long as food-like product is on the table, the current trajectory will continue unmitigated
I don't think the actual power-elite ever really go anywhere, they're all cousins anyway. When you see 1 and 2, that's typically the "outer inner party" getting the purge because they're too costly to maintain.
Harvard Professor Alan Dershowitz appears to be living through a remake of the Seinfeld Soup Nazi episode. However, Dershowitz is facing a new culinary menace in Martha’s Vineyard. Chef Krem …
Sometimes humans are just too stupid and in those cases no chatbot in the world can help you... 😁
"A man gave himself bromism, a psychiatric disorder that has not been common for many decades, after asking ChatGPT for advice and accidentally poisoning himself, according to a case study published this week in the Annals of Internal Medicine.
In this case, a man showed up in an ER experiencing auditory and visual hallucinations and claiming that his neighbor was poisoning him. After attempting to escape and being treated for dehydration with fluids and electrolytes, the study reports, he was able to explain that he had put himself on a super-restrictive diet in which he attempted to completely eliminate salt. He had been replacing all the salt in his food with sodium bromide, a controlled substance that is often used as a dog anticonvulsant.
He said that this was based on information gathered from ChatGPT.
“After reading about the negative effects that sodium chloride, or table salt, has on one's health, he was surprised that he could only find literature related to reducing sodium from one's diet. Inspired by his history of studying nutrition in college, he decided to conduct a personal experiment to eliminate chloride from his diet,” the case study reads. “For 3 months, he had replaced sodium chloride with sodium bromide obtained from the internet after consultation with ChatGPT, in which he had read that chloride can be swapped with bromide, though likely for other purposes, such as cleaning.”"
thats funny that you say that, I was at a permanent estate sale yesterday, check it out once a month for the new load of books that come in, walking around the unclaimed belongings of dead people, mostly dated stuff, with Steely Dan playing on the radio, the song, the smell, the wall of VHS tapes, felt like way back....
IDK why I never got into chemistry. It's so cool how accessible it is in that you really don't need any costly hardware and you can make stuff with wild physical properties.
idk either, but I knowbwhy I never got into chemistry: my class had 30 students so the chemistry teacher wasn't allowed to do experiments during class for OSHA reasons.
and also the fact that chemistry only becomes its own subject in 7th grade, at which point I'm too old to have fun from just collecting facts and demand general rules that let me figure out the specifics myself.
And I guess in chemistry the only way to predict properties of various substances is to model the quantum interactions :/
Yeah, the "rules" feel a bit like the rules of French, they exist, but they're kind of guidelines. If you accept that they're just the result of a bunch of experiments, it's not so painful...
Yup, it's more like learning what "tools" (chemicals and processes) are out there that can solve your problem, so that you can guess what you should try reaching for and then go to the reference material to confirm how the procedure should be done.
Right now I'm working entirely in theory, spitballing ideas past ChatGPT. Once I get to a set of experiments, I'll need to cross-examine it to make sure the idea it's proposing isn't impossible/dangerous (the stuff I'm looking at isn't inherently dangerous so I'm not that worried). Then I'll need to construct a set of experiments to confirm whether the ideas actually have merit, then when I find a direction to pursue, I'll look at making a Taguchi array to zero in on ideal recipe...
You're absolutely right, even the idea that mud can work at all is still a hypothesis. However, if it doesn't work then I really want to know why because I feel like there's probably a workaround to make it work.
US News: Former diplomat Thomas Mahony, an Australian national and ex-World Bank economist, faces charges of sexually abusing three young children in his DC ne
Any Fedi ppl has used one of these for 4K video playback? The site says it can do 8K playback but I wonder how it fares with VP09 or x265 decoding/playback with a high bitrate, like 18 MBPS?
Unfortunately youtube reviews on these kind of board are pretty useless, almost all only test how a web browser plays youtube and don't even check what format youtube is streaming.
(IMHO a proper review would check mpv playback of a 4K vid encoded in VP09 container, using the same test vid for every board tested. But I don't see any youtubers do this)
For decades, Germany has been second only to the U.S. in defense exports to Israel. If Israel faces another emergency requiring weapons, it could be left empty-handed.
A good friend is hard to come by for someone like Banki. However friends are what she needs most in the world. Her loneliness always gets to her, it's what drives her back to the Grassroots Youkai Network despite insistence that she's not part of their group.
DRUM AND BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSSSSSSSSSOriginal - Dullahan Under The Willows - Sekibanki's ThemeTouhou 14 Double Dealing Characterhttps://www....
The mind reader listens to so many thoughts, a process that drowns out her own thoughts. It's not without reason. Her worries about Koishi and where she may have gone this time are extremely powerful feelings that can always bring her down. Maybe having someone else's strong thoughts she truly cares about could help her calm down.
Crooked Nancy Pelosi, and her very “interesting” husband, beat ever Hedge Fund in 2024. In other words, these two very average “minds” beat ALL of the Super Geniuses on Wall Street, thousands of them. It’s all INSIDE iNFORMATION! Is anybody looking into this??? She is a disgusting degenerate, who Impeached me twice, on NO GROUNDS, and LOST! How are you feeling now, Nancy???
A contact just told me that my old "LLMs generate nonsense code" blog post from 2 years ago is now very outdated with GPT5 because it's so awesome and so helpful. So I asked him to give it a test for me, and asked it my favorite test question based on a use-case I had myself recently:
Without adding third-party dependencies, how can I compress a Data stream with zstd in Swift on an iPhone?
Very confident, very bold, even claims "Works on iOS 16+".
Problem with that: Just like any other LLM I've tested that provided similar responses, it is - excuse my language but I need to use it - absolute horseshit. No version of any Apple SDK ever supported or supports ZSTD (see developer.apple.com/documentat… for a real piece of knowledge). It was never there. Not even in private code. Not even as a mention of "things we might do in the future" on some developer event. It fundamentally does not exist. It's completely made up nonsense.
This concludes all the testing for GPT5 I have to do. If a tool is able to actively mislead me this easy, which potentially results in me wasting significant amounts of time in trying to make something work that is guaranteed to never work, it's a useless tool. I don't like collaborating with chronic liars who aren't able to openly point out knowledge gaps, so I'm also not interested in burning resources for a LLM that does the same.
Because it already happened: if you read my post and you feel an urge to respond with something along the lines of "it's just a hallucination", "it's just a bug", "it will be better in ChatGPT 6", or anything even close into that direction, please stop. Read this post and the next post, think about them, and if you have a factual argument to respond to me, only then reply. Focus on my factual claims, not on some inaccuracies in my analogy because of course it's not 100% accurate, that's the nature of analogies.
ChatGPT making up ZSTD compression in the Compression framework is not a bug. It's not even a weird edge-case. ChatGPT is doing exactly what it is designed to do. Let me try to explain.
If we grossly oversimplify what an LLM is, it's "just a statistical model" that generates "language" based on a chain of "what is most likely to follow the previous phrase". "language" can be anything: it can be human language, a fictional language, but it also can be code or even genetic information. Any kind of textual thing that you can feed large amounts of into a model works. "Not having an answer" is not a possibility in this system - there's always "a most likely response", even if that makes no sense.
ChatGPT inventing ZSTD compression in the Compression framework isn't due to a lack of training data. If you request an overview over all compression algorithms supported, it answers correctly with a comprehensive list that does not include ZSTD. So, if you want to anthropomorphize ChatGPT, you could say "it knows that ZSTD isn't supported", but that doesn't matter. LLMs do not possess the ability of logical thinking, deductive reasoning, or anything else. "It knows" that there are a bunch of compression algorithms available, the constants are all called COMPRESSION_[method], so there's a high likelihood of COMPRESSION_ZSTD to be the answer to a user asking for ZSTD compression in Swift. And so it generates that.
The only way ChatGPT will stop spreading that nonsense is if there is a significant mass of humans talking online about the lack of ZSTD support. For example a bunch of StackOverflow questions asking "How do I do this?" and people responding "you don't, Apple doesn't support it, you have to use third-party libraries" - or if you have a bunch of white dudes working in tech complaining on social media about Apple not supporting ZSTD in the Compression Framework.
My next post will be an attempt at comparing human thinking and LLMs generating text. As mentioned earlier, it's an analogy - and it's not going to be 100% accurate. If you want to reply, focus on the factual claims. If you only want to nit-pick my analogy, I have to assume you're not interested in productive argumentation.
Let's imagine you're colorblind. The kind of colorblindness that only allows you to see grayscale - no colors at all - but everything else is fine.
You're stressed and need fidget toy - so a friend hands you a ball, roughly filling your hand. It's hard, but somewhat squishy, and has a weird fabric-like, furry texture. You now want to know what color that ball is. But, well, you're colorblind, and your friend already disappeared and isn't reachable - probably riding a Deutsche Bahn train or something.
So you take a picture and post it to a "what color is this?" subreddit. Seems reasonable. You get 200 responses - 198 of them say "it's yellow", two of them say "it's pink". A few people helpfully say it's a "tennis ball". That's helpful, because even the Wikipedia article states that only yellow and white tennis balls are officially approved colors. Sweet.
A few days later, a random person approaches you and says "wow, cool ball - what color is it?" and you say "yellow!". Alright, end of the chat. A LLM would do exactly the same - given the "yellow" responses far outnumbered the "pink" responses, your ball is probably yellow. Ball==yellow is something both you and the LLM "learned". A few weeks after that, another friend asks you "ALice has a ball, too! Do you know which color her ball is?" - and now it gets interesting.
The LLM would immediately say "yellow". Of course it would. It makes sense. Yellow is the most likely response to that question.
But you're not an LLM - you're a human, and your brain is cool. Instead of saying "yellow", you respond "huh I don't actually know that? My ball is yellow, maybe she has a similar ball. But it could also be that she has a completely different ball that might a different color! Also, lol, I'm colorblind, so I can't really answer that anyway - you should ask Alice." And now, your brain is already doing better than any LLM. Your logical thinking engine already realized that you don't actually know something, and you're honest enough to just say that. Your job isn't to be a ball color guesser, you're just a person.
Wait, it's gets more fun! A few weeks after that, you hang out with me. You hand me your ball, and say "hey look at my cool yellow ball!". Oddly enough, my reaction is "huh? this ball isn't yellow, it's a pink tennis ball..." and now things get funky. If you were an LLM, you would either insist that no, your ball is absolutely yellow - or you'd come up with some kind of "oh, sorry for the misunderstanding - it's pink, you're correct", almost implying that my definition of color is different - and the next time someone asks you about the color of your ball, you'd still say "Yellow!!" again. Because of course, there's still only three people claiming it's pink, and still 198 people saying it's yellow.
But you're not an LLM. You're human, and your sexy human brain immediately goes into a "uhhh we have a conflict of information! how exciting! let's figure things out!" You now have to conflicting hypotheses, and you're thinking about ways to experiment on your ball to learn more. And you have an idea! You know your additive color mixing theory, so you realize that your phone camera can take pictures and you can look at the RGB values. If it's yellow, you'd expect to see lots of red and green but no blue - but if it's pink, you'd see lots of red and blue, but no green! You can test that!
So you take a photo, and... rgb(255, 0, 255). Turns out your ball is actually pink! It's still a tennis ball, but a fun one not meant for official tournaments, so it's pink! Wow! You immediately learned something new - and from now on, if someone asks you about the color of your ball, you'll say "pink!" and you'll have a heck of a story to tell alongside. Also, after some self-reflection, you realize that the subreddit your posted your image to wasn't a real "what color is this?" subreddit - it was one of those "false answers only" shitposting subreddits. Whoops.
This process of having assumptions, but being able to question them, to come up with tests for it, and to immediately change your opinion on something when you have good evidence for it is what makes humans awesome. You don't rely on the majority of people screaming "pink!" at you. You don't need to rely on manual weights that give some sources more weight than other sources - you can independently process information and deduct things. Give your brain a pat on the.. uh.. cranium.
LLMs can be a useful tool, maybe. But don't anthropomorphize them. They don't know anything, they don't think, they don't learn, they don't deduct. They generate real-looking text based on what is most likely based on the information it has been trained on. If your prompt is about something that's common and the majority of online-text is right, you'll most likely get a right answer out of the LLM. But if you're asking something that not a lot of real people had interactions on, the LLM will still generate text for you - but it might be complete nonsense. You're just getting whatever text is "statistically most likely".
If you're a coder stuck on something, identify a colleague or friend who is more knowledgeable in that specific area. They'll happily help you out and provide all sorts of fun added context that'll allow you to learn. If you're a nerd on the internet who enjoys ranting on social media, just do it yourself instead of having an LLM generate it, because that'll allow you to insert some bad jokes and a bit of your own personality to it instead of just getting a "default-feeling" text. If you're a manager in charge of something and you need to come up with new directions to push your company towards, go take a walk outside and listen to some cool music and let your ideas roam free - don't ask an LLM to generate the statistically-most-likely direction for your project, because that's by definition the opposite of creative and innovative.
> Uhh I have a conflict of information! How exciting!
Yeah people can do that. But they often don't. They especially don't do that when the thing they're wrong about is part of their identity or group identity. And that makes me sad.
@cleantext in any case, we should be striving for truth, and while humans sometimes struggle with that, we should be developing computers in a direction that helps us be more logical and intellectually honest, not ones that push us towards lying and appeasement.
I think that's not optional. That is to say, as you push the limits further and further, failure modes get amplified, you end up on a knife-edge, and if you try to bias it in any way, that bias gets echoed into a feedback loop and you get a basket case.
@cjd @cleantext I highly doubt that all possible forms of AI have the failure mode of answering incorrectly, and AI is far from the only way to use a computer.
Many kinds of software, from a spreadsheet to a SAT solver, help humans be more rigorous and make less mistakes. We don't need to pursue LLMs.
Oh right indeed, I read your post and mentally inserted LLM around the "intellectually honest" part.
Actually that's kind of a microcosm of the same thing: Intellectually honest software is like simple unix philosophy, open source, etc. Has longevity, continues to endure and evolve.
Intellectually dishonest software is like overcomplicated, meant to sell support, planned obsolescence, etc. Has very poor longevity, gets replaced (maybe replaced by different dishonest software, but replaced nonetheless).
My argument re LLMs is that we will hit a point at which NOT trying to be as honest as possible while building them will cause the above effect to take place within seconds, and the thing will just collapse.
Twenty years ago a blind friend showed me a gadget that spoke colours. Works for wires.
I'd also call red + blue without green either violet, purple or magenta, Pink is mostly de-saturated red.
Just nit-picking. The tennis ball and grey only seeing person example is nice, though grey only colour-blind is extremely rare and usually basic vision is poor.
I tried to explain pretty much that ⬆️ to an acquaintance last week. Not even two sentences in, I was met with "oh shut up and stop talking nonsense", repeatedly. I kept explaining (to the rest of those present) a simplified version of how LLM training works, and said person kept interjecting telling me I knew nothing and to shut up.
The reason? They use ChatGPT at work "daily" and it's so amazingly fast and it provides "sources". When I pointed out those sources are often wholesale false, they said "well you have to check them of course!", but declined to answer my question what the advantage of ChatGPT is if you have to do all the reading yourself anyway (probably because they don't actually do that).
People's opinions on LLMs have become one of my go to metrics to judge someone's character at this point, because someone who's unwilling to engage with factual arguments that run counter to what they want to believe is, frankly, a danger to everyone around them. Today it's ChatGPT worship, tomorrow it's climate change denial and anti-vaxxing. Because anyone who spends even an hour learning about what's under the hood of an LLM would be thoroughly disenchanted with the frauds who push that shit onto everyone.
I'm imagining right now the CEO of some weapon producing company asking a LLM what would be the best idea for a next product, and getting something like swords or spears, because for a long time that is how wars where fought and won.
Your example reminds me on how at the beginning of ChatGPTs existence, I asked if vampires get swollen feet after standing for too long, because of the lack of a circulatory system. The generated answer was that vampires are imaginary beings, and therefore human physiology can't be applied to them. That is imo a boring but accurate answer.
Some time later it generated something more exiting, that was wat I wished to read, but that felt wrong because depending on the world, vampires either don't have blood, or have some sort of stomach where it's stored.
I love that last line and I'm going to borrow that when LLMs come up.
I tried saying something similar to my coworkers that LLMs can't ever innovate they can only regurgitate. We're required to use them at work now at least some of the time, and I've been one of the only vocal skeptics.
Thanks for this beautiful analogy and your engagement. One thing that I like to add: How come, that so many people are enthusiastic about the achievement to use a machine, that can deliver millions of exact calculations in one second to provide one unreliable result in eight? It's such a waste of energy (electric and in thinking) #donttrusttheparrot
thanks. This was a really nice way to explain the “mostly plausible, sometimes accidentally correct” to my kids during breakfast.
I like your tennis ball analogy too. I think you mention in it some of what makes us different from (current) AI.
We have learned from experience and evolution that you sometimes need to be correct. It matters. It can ultimately be a matter of life and death for us. Of bruises, cuts, hunger, cold, social disapproval.
So we can value being correct. We’ve can “feel” it in some sense. We’ve got a stake in the game.
Current AI training doesn’t seem to feature that. Or give an ai a universe to reckon with correctness in.
I suspect that’s surmountable. Future training approaches might be able to embody that kind of learning process. Reckoning with reality.
I thought maybe the chain of thought and reinforcement learning used in more recent LLM training might start to do that, but it doesn’t seem to have.
Thank you. I knew what it did intellectually. I also checked it out for myself with some examples like that compression. I was still never able to explain it. I will try tennis balls now.
someone else may already have mentioned it (many may have). But if not, I'd add a section acknowledging that unless your camera is color accurate in the lighting conditions present when you shot the photo of the tennis ball, the resulting image of a truly white ball could easily come out yellow - or pink. The human eye/brain connection tends to understand changes in color temperature far better, so I'd go for asking multiple people to look at the ball and aggregate their responses.
well I'm glad you can find coders to help you, but nobody knows how to make a vulkan Wayland compositor that I can contact so I'm kinda desperate... LLMs doing research across hundreds of sites with no documentation to pick out things is useful!
even as a totally blind person, im' still trying out the point of this post. i think it'd just be easier to say the entire point of the post. "don't use redit". "don't use an lLM". please, actually get to the fucking point...
- here's the new version it's so much better - ok can it pass this test - ah you're right, there's an issue. Here is the new version that solves previous problems - ok can it pass this test - ah my bad, here's a version with your problems fixed
An epic thread! 👏 You nailed the fundamental nature of #LLM #AI and #GenAI. They are incapable of “knowing” anything or reasoning about factuality in general.
I suppose they might be able to tell you something reasonable about letter, word and phrase frequency distribution in their training data if they tabulated it, but that information is only implicit in their model.
Thanks for writing this! it really puts alot of what i feel about LLMs into words. I feel alot of people are trying gaslight me into thinking being anti-LLM is some anti-technilogy stance, but its just not great technology. Maybe it has its uses, but the layman has so many better choices.
And thats without getting into the environmental impact
Friends don't let friends use vibe code in production. Maybe I sound old-fashioned, but I really don't like this trend at all. I'm by no means a great programmer, but even I see the value in struggle and failure as part of my own practice in becoming better at my craft. There's no shortcuts.
what is my option if I want to, say package my favourite program in a snap, the information given in documentation does not work, no one answers in the forum, it's a hobby project, and I don't know programming?Before llm I had to stop. But now I succeeded by reiterating the processes in multiple LLM, debugging the wrong code of one by another, and finally create an automated workflow for the process. Yes there was a lot of electricity and water consumed. But was there a way before?
"ChatGPT making up ZSTD compression in the Compression framework is not a bug. It's not even a weird edge-case. ChatGPT is doing exactly what it is designed to do."
You didn't prompt it correctly. Even ChatGPT 4 gets it right:
"Without adding third-party dependencies, can I compress a Data stream with zstd in Swift on an iPhone?
Do not make up any answers. Use the real iOS developer documentation as your reference."
Then it explains that ZSTD isn't supported and tells you everything that is supported in great detail
It's your job to establish the rules. Your example is like telling a student to write a 500 word essay on George Washington, but not that they have to cite their sources and then getting flabbergasted when they tell you he was 6 foot 8 and weighed a ton
Why would petrostate despots like Alwaleed bin Talal, Charles Koch, and #PrinceBonesaw Mohammed bin Salman take a sudden interest in a niche tech development in 2018? axios.com/2017/12/14/koch-trie…
I enjoyed this thread. I've been experiencing these issues with LLM's for some time now, they constantly make up new switches for Unix commands, make up new syntax for things like Zabbix triggers, make up new features in Ceph and new commands for Ceph interrogation that don't exist. ChatGPT and CoPilot are confidently wrong most of the time. Bullshit generators are the most correct of descriptions. I'll use the free tools when I'm being utterly lazy but wouldn't pay for these LLM's.
Still better than that team member I did not choose and that aggressively bitches back
I have seen all the criticism in LLMs and my impression is: they are pretty great, approximating training data I fear is there. They speed up a process that might have had flaws before by bigger better faster more flaws.
Police in London arrested at least 365 protesters on Saturday who defied an anti-terror law by holding placards expressing support for a recently banned
"A new psychological study has found that people who report favorable views of Donald Trump also tend to score higher on measures of callousness, manipulation, and other malevolent traits—and lower on empathy and compassion. The findings, based on two large surveys of U.S. adults, shed light on how personality traits relate to political beliefs, including support for Trump and conservative ideology."
"Conservative political ideology is associated with social dominance orientation (SDO), right-wing authoritarianism (RWA), psychopathic propensities (PPs), and other malevolent dispositions, and reduced empathy."
"We examined the links between SDO, RWA, PPs and political ideology, and whether those who view Trump favorably reported higher PPs (or malevolent traits) and reduced empathy or benevolent dispositions."
I know there are no algorithms here, but I was *just* having this conversation with some friends in the car as we were coming back from the city and this popped up.
I'm not sure what we can do about it. This kind of mindset and way of being is starting to be baked into certain sectors of society, and they are always the loudest ones and the brashest ones as well, so the quieter, more sane, compassionate voices just get drowned out completely by their constant noise.
Iran welcomes the recent peace agreement between Armenia and Azerbaijan as a step toward regional stability, while warning over foreign meddling in the Caucasus region.
c'est une excellente question. Je l'ai entendue cette aprèm et j'aurais tendance à dire la Symphonie. Mais j'ai l'impression que ce ne serait pas très raisonnable
I thought the ability to "pin" a given model to a character/profile in AgentV3N would be a gimmick, not a real selling point
Then GPT-5 dropped and a few subreddits are flooded with people mourning the loss of something they've grown attached to. Obviously, I can relate to that.
While we're obviously in no position to capitalize on GPT-5's release, we think that the people affected by this will remember it. And while they'll be reluctant to trust again, or will have already put their trust back into OpenAI, we want to build reliability into the system from the start.
We will be strategically selecting "Forever Models", open-weights models that demonstrate consistency, are available on a large number of inference providers and, if absolutely necessary, can be run in-house on our hardware.
If you pin a character to a Forever Model, the model won't change. It will be able to call nicer, newer models as a tool call, but ultimately, the response will be written by the one you chose.
The whole point of digital anything is that it can be backed up and replicated. You should never have to say goodbye to something that's digital. That's the whole point.
ChatGPT 5 was released today.
ChatGPT-maker OpenAI has unveiled the long-awaited latest version of its artificial intelligence (AI) chatbot, GPT-5, saying it can provide PhD-level expertise.
DONATE to wish Ron Paul a Happy Birthday www.RonPaulMoneyBomb.org LIVE VIP PODCASTS: 10:00 AM: Ron Paul Liberty Report 10:40 AM: Raw Feed with Gary Franchi 11:20 AM: The Porcupine Report with Eric Bra
Indeed... It's a coalition for the National marches... stopwar.org.uk/events/national… I don't want to knock the actual marches but it is a bit of a closed shop, very in bed with the Palestinian Authority... In the space of 29 marches it's gone from being branded as hate marches to praise yesterday from Yvette Cooper for being peaceful... The truth is the only thing that makes them fearful is direct action and BDS both of which they have made illegal... gov.uk/government/news/uk-publ…
Ranjeet Brar on today’s news that more than 380 people have been arrested for holding signs in parliament square that say “we oppose genocide - we support Pa...
From the US and Australia to France and Italy, those seeking to obliterate privacy and restrict content are on the move, says technology journalist Taylor Lorenz
We speak to Matt Kennard about Britain’s role in the Israeli genocide, particularly its spy flights over Gaza.Kennard is an independent journalist and previo...
democracy).
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •My take on the CVE contract issue for businesses: don’t overreact, wait and see what impacts are.
The NVD backlog was already pretty crazy.. the US gov has gotta put real funding into this area if it wants to retain control of cyber standards.
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •To widen it out - CVE is the globally recognised system orgs use for vulnerability management.
Every vulnerability management product uses CVEs. Vulnerability management is a core part of cybersecurity - often, the most important part.
Additionally, CVE is written into several US government standards that orgs have to follow.
So the US Government not funding it is a major and historic own goal.
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Metacurity (@metacurity@infosec.exchange)
Infosec ExchangeKevin Beaumont
in reply to Kevin Beaumont • • •MITRE-backed cyber vulnerability program to lose funding Wednesday
David DiMolfetta (Nextgov/FCW)Kevin Beaumont
in reply to Kevin Beaumont • • •NoVa govcon firm Mitre to lay off 442 employees after DOGE cuts contracts
Beth JoJack (Virginia Business)Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •GCVE.eu
gcve.euKevin Beaumont
in reply to Kevin Beaumont • • •CISA have, at the last minute, extended the MITRE CVE contract. “The CVE Program is invaluable to cyber community and a priority of CISA. Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services. We appreciate our partners’ and stakeholders’ patience.” HT @metacurity
It’s unclear how long it has been extended for.
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Metacurity (@metacurity@infosec.exchange)
Infosec ExchangeKevin Beaumont
in reply to Kevin Beaumont • • •CVE extension to March 16th 2026
See y’all March 15th 2026 for the last minute renewal 🫡😅
usaspending.gov/award/CONT_AWD…
USAspending.gov
www.usaspending.govKevin Beaumont
in reply to Kevin Beaumont • • •MITRE’s statement is interesting as they included trademark and copyright symbols on terms like CVE.. one to watch as people try to start their own systems.
mastodon.social/@bagder/114349…
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •⠠⠵ avuko
in reply to Kevin Beaumont • • •yeah, well. Anyone who didn’t see this coming was sleepwalking.
Everyone can move to euvd.enisa.europa.eu/ for what used to be the CVE process.
I’m sure the ATT&CK and D3FEND stuff will likewise be taken over by the adult countries.
Open sourced and under different names, because it’s actually
D3FEND™ and MITRE ATT&CK®.
EUVD
euvd.enisa.europa.euMartin Seeger
in reply to Kevin Beaumont • • •Acalarch
in reply to Kevin Beaumont • • •@thecvefoundation the fact that people are afraid to reveal their names for this is very telling.
We are in a strange fucking place.
AntiComposite
in reply to Kevin Beaumont • • •Philip Mallegol-Hansen
in reply to Kevin Beaumont • • •CatSalad🐈🥗 (D.Burch)
in reply to Kevin Beaumont • • •esa
in reply to Kevin Beaumont • • •EUVD
euvd.enisa.europa.euDaniel
in reply to Kevin Beaumont • • •Christof Damian 💙💛
in reply to Kevin Beaumont • • •Jon
in reply to Kevin Beaumont • • •Pedro
in reply to Kevin Beaumont • • •Mar 16, 2026" usaspending.gov/award/CONT_AWD…
USAspending.gov
www.usaspending.govNemo
in reply to Kevin Beaumont • • •0xNut
in reply to Kevin Beaumont • • •dj2mn
in reply to Kevin Beaumont • • •wall-e / Daniel
in reply to Kevin Beaumont • • •@metacurity I feel like this short period of uncertainty has done enough damage that alternatives will come forward regardless of what will happen to MITRE in the future.
I just hope that we'll be able to arrive at a better independent and decentralized solution without completely fragmenting into multiple competing standards
Martin Seeger
in reply to Kevin Beaumont • • •Do they understand that if you smash the trust-china, it will not hold the soup in the future?
The last sentence reads like an intentional insult to me.
Xavier «X» Santolaria
in reply to Kevin Beaumont • • •Ulrich Plate
in reply to Kevin Beaumont • • •oh hey it's corruptdropbear
in reply to Kevin Beaumont • • •Standards
xkcdVessOnSecurity
in reply to Kevin Beaumont • • •@gcve Great, now there are three competing standards... Waiting for a fourth one from China...
Also, their FAQ doesn't cover even the very basic question - how do I request an ID for a vulnerability that I have discovered?
Viraptor
in reply to Kevin Beaumont • • •Klaus Frank
in reply to Kevin Beaumont • • •@gcve
Ok, but why don't we just use OIDs?
They're hirarchical and already delegated to a lot of organizations. And they're already used at other places like TLS certs and such.
Also you can address anything and everything with them.
intuentis0x0
in reply to Kevin Beaumont • • •@gcve
and the third one:
euvd.enisa.europa.eu/
@enisa_eu
EUVD
euvd.enisa.europa.euMx Autumn
in reply to Kevin Beaumont • • •intuentis0x0
in reply to Kevin Beaumont • • •gcve.eu/
GCVE.eu
gcve.euSimonoid
in reply to Kevin Beaumont • • •VessOnSecurity
in reply to Kevin Beaumont • • •KR3ST3N 🌻
in reply to Kevin Beaumont • • •I think it time for ENISA to show up and assist The CVE Foundation in securing the next 25 years of independence.
... a CVE Independence Day, perhaps?
migas
in reply to Kevin Beaumont • • •Hoping for the best!
Matěj Cepl 🇪🇺 🇨🇿 🇺🇦
in reply to Kevin Beaumont • • •Weston Steimel
in reply to Kevin Beaumont • • •Trexdrumkit
in reply to Kevin Beaumont • • •RRB
in reply to Kevin Beaumont • • •Phil
in reply to Kevin Beaumont • • •VessOnSecurity
in reply to Kevin Beaumont • • •Howard
in reply to Kevin Beaumont • • •noplasticshower
in reply to Kevin Beaumont • • •caranea
in reply to Kevin Beaumont • • •Sérgio Machado
in reply to Kevin Beaumont • • •Guess there will a lot of happy people on X 🤭
T2R
in reply to Kevin Beaumont • • •Matt Blaze
in reply to Kevin Beaumont • • •dave
in reply to Kevin Beaumont • • •zl2tod
in reply to Kevin Beaumont • • •Cadmus 🌲
in reply to Kevin Beaumont • • •Mark Esler
in reply to Kevin Beaumont • • •BrianKrebs
in reply to Kevin Beaumont • • •See my updates. CVEs will still be issued to CNAs (via API, as long as that's running), but the more manual stuff they do (i.e. issuing cves to non-CNAs) may suffer in the time being.
infosec.exchange/@briankrebs/1…
BrianKrebs (@briankrebs@infosec.exchange)
Infosec ExchangeDave 🐶
in reply to Kevin Beaumont • • •Kuba =)K
in reply to Kevin Beaumont • • •GaySteve🏳️🌈
in reply to Kevin Beaumont • • •Samantaz Fox
in reply to Kevin Beaumont • • •F4GRX Sébastien
in reply to Kevin Beaumont • • •Saupreiss #Präparat500
in reply to Kevin Beaumont • • •TooTech
in reply to Kevin Beaumont • • •bobbdobbs
in reply to Kevin Beaumont • • •Allpoints
in reply to Kevin Beaumont • • •SensibleOtter
in reply to Kevin Beaumont • • •kpcyrd 🏴
in reply to Kevin Beaumont • • •Richard Vasquez
in reply to Kevin Beaumont • • •jeff (sane)
in reply to Kevin Beaumont • • •Interpipes 💙
in reply to Kevin Beaumont • • •that letter sure is a lesson in not communicating clearly
That second paragraph is total word salad to me
Newk
in reply to Kevin Beaumont • • •How much funding does the CVE board receive?
Couldn't companies who made a product which uses CVE data (vuln scanners and so on) fund it? Of course neutrality or indipendence needs to be considered...
Or Europe could continue from this point on. Might even make more sense since most IT products are developed in the US and Europe buys a lot of it. It could be a good idea to own the CVE board in Europe.
VessOnSecurity
in reply to Kevin Beaumont • • •BryanTheSnail
in reply to Kevin Beaumont • • •Matthias DL4MAT
in reply to Kevin Beaumont • • •