jj4211

joined 2 years ago
[–] jj4211@lemmy.world 1 points 14 minutes ago

I was told there would be no math

[–] jj4211@lemmy.world 7 points 19 hours ago (1 children)

I know you are kidding, but if a monthly toll dividend payment went out to taxpayers even for a pittance, lots of folks would probably cheer the conquest happily.

[–] jj4211@lemmy.world 1 points 19 hours ago

I don't know what you are getting at, of the people who come over from China and Taiwan that I talk to, no one believes that the two are one "nation" with different opinions on who is the authority. They may believe there's not a distinct cultural identity but none think the "no, there's only one China and onlywe are the real China" is a thing in practice, just a political formality.

The ones from China do say they wouldn't push their luck expressing that publicly, and one went so far as to borrow a computer to log into without any association with them because they were paranoid about using their laptop issued to them with the Chinese employer preload. He wanted to read some Wikipedia the way an American sees it while he was over on business.

Tangentially, another one from China was super excited to try to get someone to get him a gun to shoot. We did manage to hook him up with a gun range.

[–] jj4211@lemmy.world 7 points 1 day ago

Hey LLM. I'm thinking of deducting my Corvette as a business expense for my landscaping business, is that a good idea?

What a creative way to lower your tax burden! This totally makes sense and you can be confident that your decision will be well received.

(Others can take the LLM tone better than me, and I don't have the patience for LLM verbosity).

[–] jj4211@lemmy.world 10 points 1 day ago

I wonder if I counted...

So I did the tax prep using a free offer from TurboTax. Everything seemed traditional.

Then, at the end it generated an AI summary of my return. I didn't have a choice, it just did it. I have the "unhelpful" feedback because:

  • Despite saying it was "explaining" the numbers and why, all it did was just list the numbers from the fairly straightforward table right above the AI response in a more awkward form, not explaining anything.
  • Further, despite the seemingly easy task of "Take a table of figures and repeat them in prose", it still screwed up and messed up and of the figures that all our had to do was repeat verbatim.

So AI was forced into my tax prep and did nothing substantive (thank goodness) and flubbed the cosmetic role it tried to play.

[–] jj4211@lemmy.world 3 points 3 days ago

He had the persosctive that once you hop between source code files that constitutes a security boundary. If you had intake.c and user data.c that got linked together, well data.c needed its own sanitation... Just in case...

I suspect he used a tool that checked files and noted the risky pattern and the tool didn't understand the relationship and be was so invested that he tortured it a bit to have any finding. I think he was hired by a client and in my experience a security consultant always has a finding, no matter how clean in practice the system was.

Another finding by another security consultant was that an open source dependency hasn't had any commits in a year. No vulnerabilities, but since no one had changed anything, he was concerned that if a vulnerability were ever found, the lack of activity means no one would fix it.

It's wild how very good security work tends to share the stage with very shoddy work with equal deference by the broader tech industry.

[–] jj4211@lemmy.world 4 points 3 days ago (1 children)

In this case, there was file a, which is the backend file responsible for intake and sanitation. Depending on what's next, it might go on to file b or file c. He modified file a.

His rationale was that every single backend file should do sanitation, because at some future point someone might make a different project and take file b and pair it with some other intake code that didn't sanitize.

I know all about client side being useless for meaningful security enforcement.

[–] jj4211@lemmy.world 11 points 3 days ago (5 children)

Yes, recently we got a security "finding" from a security researcher.

His vulnerability required first for someone to remove or comment out calls to sanitize data and then said we had a vulnerability due to lack of sanitation....

Throughout my career, most security findings are like this, useless or even a bit deceitful. Some are really important, but most are garbage.

[–] jj4211@lemmy.world 2 points 4 days ago

I think the missing part in that is the "Miata"-ness. A fun little car with a bit of oomph to it and being ok with short range for the sake of a more fun/light drive. That has the light and affordable down, but doesn't really approach the 'fun' part of the miata appeal.

[–] jj4211@lemmy.world 1 points 4 days ago

Another facet I hope the H shaped battery would mitigate is the weight. Might have to further wait for viable solid state batteries to match the ICE for cornering. Yes the reving and shifting fun is lost, unless you go like the Ioniq N and just give the driver the toys to feel like they have revving and shifting...

I too would probably be fine with 100 miles for a 'fun' car or even commuter car. Though that's a luxury many households can not afford, a designated car for 'road tripping', so I'm not going to expect too much attention to this scenario...

[–] jj4211@lemmy.world 1 points 4 days ago

The thing is they do make the parts, but it's a custom job and generally changing from a mass-manufactured EV to a hand-crafted car. The savings in reusing the reusable portions of the car are more than offset by the labor associated with putting them in. So it's only really reserved for 'classics' with some iconic design, and even then the person risks enraging fans of the car who find it heretical to rip out their engines.

[–] jj4211@lemmy.world 2 points 5 days ago* (last edited 5 days ago) (1 children)

Problem with the theory is that people believe in LLM strongly enough that whatever pressure there is within a market to be vaguely similar evaporates. SQL certainly has dialects, but at least the basics are vaguely similar, as an example.

Working with a vendor that is oddly different from every other vendor in the space and we applied pressure to implement more typical interfaces. Their answer was "just have an LLM translate for you and use our different and frankly much weirder interface". When we did cave and use it and demonstrated the biggest LLMs failed, they said at least they give you the idea. Zero interest in consistent API with LLM as an excuse.

On the write your code for you, it has to be kept on a short leash and can be a nightmare if not overseen, though it can accelerate some chore work. But I just spent a lot of time last week trying to fix up someone's vibe coded migration, because it looked right and it passed the test cases, but it was actually a gigantic failure. Another vibe coded thing took 3 minutes to run and it was supposed to be an interactive process. The vibe coded said that's just how long it takes, if it could be faster, the AI would have done it and none of the AI suggestions are viable in the use case. So I spent a day reworking their code to do exactly the same thing, but do it in under a second.

For the jira ticket scenario, I had already written a command line utility to take care of that for me. Same ease of use instead of using jira GUI and my works torturous workflows, but with a very predictable result.

So LLM codegen a few lines at a time with competent human oversight, ok and useful, depending on context. But we have the similar downside as AI video/image/text creative content: People without something substantial to contribute flood the field with low quality slop, bugs and slow performance and the most painful stuff to try to fix since not even the person that had it generated understood it.

view more: next ›