• 0 Posts
  • 57 Comments
Joined 3 years ago
cake
Cake day: June 10th, 2023

help-circle
  • I theoretically have Diun setup, but realistically I just run my Ansible playbook weekly and have most containers set to latest. The exceptions being things that sometimes need special steps when upgrading such as Immich or critical stuff I want special attention such as Athelia/Authentik, for those I subscribe to their releases via RSS so I can update them easily, which usually is just changing a value in my Ansible configuration, but if extra changes are needed I can adapt them.



  • Not exactly bait and switch, but a long time ago I was looking for a job, had an interview that I aced, I can’t overestimate how much I aced it:

    • There was a “coding challenge” that was supposed to take half an hour and I finished in 10 min
    • They asked a question and my answer was so complete that I could see them turning pages and skipping the next follow up questions
    • One of the few times they got to ask me a follow up question which was very related to the work I would be doing the answer was "I would just do the same I’m doing for my master thesis, and proceeded to explain how I have solved that problem on my thesis and later I found out it was roughly the same way they had solved it on their use case.

    Then they told me “our initial salary is X, but that’s for Juniors, which you clearly aren’t, we’ll finish this round of interviews and contact you”. They contacted me a week later and offered me a Junior role paying X. I can’t really said they baited and switched since they didn’t change the offer, and what the other person told me was more informal. Since I needed a job and they have accepted me part time while I finished my masters I accepted thinking that once I went full time I would get a raise. Nope, they said they only did reviews and raises annually, and I had started right after that. I worked my ass off for that year, proving to them that I was worth the raise. Got to my annual review and was told everything is excellent, we’re bumping you to Junior 2 with a whooping 5% increase in salary…

    That’s when I decided fuck them. They want a Junior, they’ll get a Junior. I started to listen to podcasts and YouTube videos during my work and dragging my feet, taking weeks to do what I would have done in less than a day before, and still outperforming all other juniors. I quit before the next year for unrelated reasons, and went through training a replacement who, let’s just say, was really a Junior.




  • Because a pixelated circle being upscaled is a circle, but a pixelated circle being turned into a high definition pie is no longer a circle, and that’s especially problematic if the circle was just a cross hair or some other random circle like thing the AI thought was meant to be a pie.

    Yes, both things are the same, but that’s like saying you had a tiny spider in your house and you were okay because it killed mosquitoes in your house, so you should be okay with having a colony of bats since they are also animals and eat mosquitoes. Yes, both are the same, but the scales and the amount of intrusion are completely different.


    • Monty Python’s Holy Grail, Life of Brian and Meaning of life (in that order of rewaches). Although I haven’t seen them in years, now that I live somewhere where weed is legal I should do that (never seen them stoned)
    • Primer, which if it’s not on your list here you either haven’t seen it or haven’t understood it
    • The Mummy and Harry Potter (especially the first couple). They’re one of my wife’s comfort movies so we watch them every once in a while if she’s feeling down
    • LotR, although it’s more of an event to rewatch them.
    • Stargate, every few years we rewatch the TV show when we have nothing else to watch, we do that with some other TV shows as well as it’s good background noise to just relax. And since it starts and ends with movies we’ve watched those several times.
    • Pink Floyd’s The Wall and Daft Punk’s Interstella 5555 are awesome music albums so I have watched those several times
    • Hair, similarly love the musics

    And although I haven’t seen them too many times (but at least twice) Memento is a great movie if you haven’t seen it. Also I haven’t seen it multiple times but The Strangers is a great horror movie.



  • Honestly, this is what I would do in your situation:

    1. Update your resume and start responding to LinkedIn messages and possibly looking at least possibly.
    2. Take those workshops for LLMs, there might be useful stuff to learn there, auto-completion, code search and examples of how to use certain features are very good uses of LLMs.
    3. Don’t be overly vocal about it, but point at issues when you see them, e.g. those large messages that you’re expected to read point out how they’re way longer than need to be and how using LLMs to give you a summary said the wrong thing (even better if you have an actual example of this, by for example invoking TLDR bot or something similar on those messages every time they come up)
    4. Look at code that was vibe coded in areas you’re working and start creating tickets for the stuff you see, unless they’re vetting everything the LLM produces (which would be slower than writing it yourself) there will be issues there, start documenting those. The thing most managers and other “AI enthusiasts” don’t get is that LLMs are trained with stack overflow and thousands of random GitHub projects written by inexperienced devs for every one good piece of code, so they have thousands of bad or incomplete examples for every good one. This means they end up not doing things like verifying you’re logged in to use an API, sanitize SQL queries, etc. Because when you ask how to do something in stack overflow you will get an answer that is not meant to be used literally things like `query = f"SELECT * FROM {table_name}"`` is an okayish example on how to build queries with validated data, but it’s a TERRIBLE example to use with user provided data, but the LLM doesn’t know that, it just copy pastes the code that gets things from a table where it needs it.
    5. Prepare yourself, using LLM to write code has a short lifespan in most companies, but the damage takes twice as long to clean up. If you stay you will be seen as the naysayer and might even get fired for it, but eventually this will blow up so gigantically that they’ll start to regulate or even ban LLMs. And then there will be lots of garbage to clean up. In your shoes I might look elsewhere while possible as I wouldn’t want to be associated with the company that had all of their data leaked or similar, because if they’re using vibe code in prod it’s a matter of when.



  • NFTs actually are an easy concept, a dollar bill is a Fungible Token, because all dollar bills are the same, you can change one for another and it all works out because both represent the same thing (one dollar). A deed to a house is not fungible, you can’t just change one deed for a different one because they represent different things. NFTs are just that, Non Fungible Tokens, why some people wanted to own a digital token representing ownership of a publicly available digital image is what can’t be explained.



  • There are several criticisms I could make to the methodology and other parts of this study (and there are LOTS to make here). But let’s for a moment assume it is correct, let’s imagine that vaccines really do cause a 250% risk increase to ADHD or asthma. Even if that were true (which it isn’t, for example: almost every person diagnosed with ADHD has an undiagnosed parent with it too, leading to the conclusion that it’s not that the cases have increased but that diagnosis has.) vaccines would be a GREAT idea. The study doesn’t go into details (because it’s trying to make the data prove what they want instead of analysing it) but let’s look at one single vaccine, and compare this single vaccine with the whole of the accumulated hypothetical dangers of vaccines. Let’s talk about the BCG.

    BCG is the vaccine that prevents tuberculosis, also known as white death or consumption. Before vaccines TB accounted for 25% of all deaths in Europe, this means that for every 4 people who died, one of them was by TB. Do you think COVID was bad? COVID was only 6% of deaths at it’s peak. But hey, maybe you don’t believe in COVID, let’s compare it to actual numbers, in 2018 (before the pandemic) approximately 8.1 million people died in Europe, of those only 259,000 were TB, if we subtract those we get 7.76 million, scaling that back to pre-vaccine days that takes us to 2.6 million deaths per year related to TB (there’s probably some overlap of people’s who died of other stuff and would have died of TB in that hypothetical scenario, but still) even being very generous that’s an extra 1 million deaths. 1 million preventable deaths per year in exchange for a few extra cases of asthma and ADHD seems like a goods exchange. Also have you stopped to consider that maybe since people don’t die of TB they live long enough to have asthma diagnosed?






  • I liked it the first time I played it, but then I decided to play it again to choose different things and realized the horrible truth that it’s all magicians choice. Who do you save A or B? You choose A then A survives and B dies and A is angry that you let B died, you choose B then you fail to save them but A saves themselves so A survives and B dies and A is angry that you tried to save B instead of them. It doesn’t matter much what you choose, the game will do the same.


  • But what is a trusted provider? How can you trust it? How sure are you that you’re not being MitM? Have you fully manually verified that there’s no funky flags in curl like -k, that the url is using SSL, that it’s a correct url and not pointing at something malicious, etc, etc, etc. There are a lot of manual steps you must verify using this approach, whereas using a package manager all of them get checked automatically, plus some extra checks like hundreds of people validating the content is secure.

    To do apt get from an unknown repo, you first need to convince the person to execute root commands they don’t understand on their machine to add that unknown repo, if you can convice someone to run an unsafe command with root credentials then the machine is already compromised.

    I get your point, random internet scripts are dangerous but random internet packages can also dangerous. But that’s a false equivalence because there are lots of safeguards to the packages in the usual way people install them, but less than 0 safeguards to the curl|bash. In a similar manner, if this was a post talking about the dangers of fireworks and how you can blow yourself up using them your answer is “but someone can plant a bomb in the mall I go to, or steal the codes for a nuclear missile and blow me up anyways”.