* Posts by streaky

1804 publicly visible posts • joined 5 Jul 2010

Surrender as a service: Microsoft unlocks BitLocker for feds

streaky
Black Helicopters

If you build it..

.. they will come for the crypto keys.

I mean is anybody actually surprised, for that matter did they really even have much choice?

I don't have TDS or a problem with Elon Musk or anything like that but it is related to my point to him about how honest X is about their new crypto messaging service, the HSMs can be made to give up the keys if whoever is in control of them wants to do so. Which is "fine" - and probably enough security for most people - but they need to be honest about the level of security they provide to people in their marketing too. Keeping an eye out for him calling out MS when X is in the same position..

Cloudflare CEO threatens to make the Winter Olympics a political football after Italy slugs it with a fine

streaky

Invoking "an independent regulator"

.. is the most cowardly, evil, lie in modern politics.

Firstly, they're absolutely never independent.

Secondly, they're usually captured by activists.

Thirdly, government usually retains control over them.

This argument fails on all three - just like it fails on all three with Ofcom in the UK.

I would start with number 4 on his list, right now, today. No jobs or investment for Italy, that's an easy one. I'd probably follow quickly migrating hardware out of Italy too, they've demonstrated themselves as too dangerous to be allowed near your infra. Then escalate from there.

If Trump doesn't also see the necessity of sanctions with US tech under attack for not being pure evil then IDK what we do - remove the ability of governments to see or oversight the internet entirely? It can be done.

What if Linux ran Windows… and meant it? Meet Loss32

streaky

Back in the day..

.. When Wine wasn't that complete.. we'd replace big chunks of it with real parts of windows to make it work right, particularly the libraries.

When the AI bubble pops, Nvidia becomes the most important software company overnight

streaky

Bubbles.

Bubble implies something is inflated, that the thing will crash.

There are two different things going on here. There's the massive _new_ investment in AI infra and there's the steady drumbeat of more AI in more things all the time. AI inexorably improving, people figuring out new and better ways to use it.

That's not crash stuff, generally - there's the Nvidia is valued like AI is going to consume ever-more resources at ever bigger rates and volumes, which I don't see at all - assuming AI models will get larger is contrary to what we're actually seeing, assuming that all AI will be in the cloud isn't necessarily the way it's going to be (again with evidence), assuming that it's going to consume more resources per unit of work done isn't the way it'll be - but the likes of Nvidia are most exposed, not least exposed. They're also highly exposed to competitors like AMD getting in the game, ROCm is starting to get very competent and they don't premium VRAM on GPUs like Nvidia do.

The people who aren't exposed in that way are those using the things to do real things, not the hardware underneath relying on speculation (and per Michael Burry, massive internal nepotistic ecosystem investment) to drive absurd valuations that drop price book ratios of 39 and been as high as 52 (anything over 3 is usually considered high for an example of the sort of fire we're playing with).

The thing is, if Nvidia's market price collapses, and it should (not financial advice) - they'll still have a very real product doing very real work that is very useful to real business and people. It's just market dynamics are weird is all. We just have to be clear what we mean when we say "bubble" - the prices are overvalued (IMO), the tech itself is undervalued and underused and isn't penetrating anywhere near where it will be in a year, let alone 5 or 20. The question is if Nvidia really benefits from that in 18 months or new software and hardware tech ruins anybody long this stuff. It's all related, but it isn't _coupled_.

Software engineer reveals the dirty little secret about AI coding assistants: They don't save much time

streaky

TIL..

People still use Delphi. That's kinda wild.

Also on the primary topic; "it depends" - MMV because how people use it varies. You CAN make it work for you, but you have to know how to do so: it isn't going to just work out the box, it's hard to know if it ever will work out the box.

Think about how a human developer approaches a fresh codebase, let's say you start a new job at a new company, maintaining a 10-year-old system. It might take you 3 months, 6 months, to fully get up to speed. The docs are probably a mess. The test suite is probably broken. It might not have been engineered right in the first place. It might be a system that, IDK, talks to other systems that are hard to model.

If you start a ticket that requires you to get deep into the guts of it in week two you're going to have all sorts of issues, you're probably going to do it wrong - you're relying on your team to catch those errors (they probably won't).

Now consider it from the POV of an AI when you're asking it to work on that same system - you're asking it to do that same thing, but in a matter of seconds. To do what you're asking it to do, with no opportunity to have that 6 months of learning, no support structures, no properly working test suite, no accurate documentation. They'll rip through it, do what they can, but it's probably going to be broken. If there's one legitimate complaint here - and it's probably the root cause - it's that they attempt to "please" the user, that is to say they'll try to please the user by completing the task, even if they don't really know how to. Every time you ask an AI to do something, it starts with its own knowledge and knows nothing about your project.

There are ways to sort all of these issues out, and LLMs are very good at helping you do it. It is an investment of time and work - but a worthy one. You can ask the AI to write its own AGENTS file, its own github PR review instructions, to rewrite the main documentation, all in the repo (you do store the code docs in the repo, not Confluence or something, right?), to properly document how it works, to validate it's own test suite, to build test versions of the systems it talks to. You _must_ check through these yourself, at least initially. Then you can move on to getting the AI to do things for you - and you have it test what it did before even considering telling you that it is finished. When you've done and had AI help you do the groundwork (and you can tell it, by the way, to ask if it doesn't properly understand things) - your 6 months of initial "getting to know the system", but for AI - it will work like a dream.

It'll also help you do things that are above you, if you're remotely intelligent - I have personal projects that I simply don't have the 6 or 7 PhDs I'd really need to write them, where AI has done basically all the work, in a testable and tested way, where the science is sound, which would cost hundreds of grand to have somebody else write. Occasionally at the day job I can ask the AI to do more complex stuff like that, and it will.

It also saves my finger and wrist joints if nothing else, even if it did take the same amount of time in the end - but it doesn't. But AI can do the work of multiple copies of me at the same time anyway, even if that was the case. I sometimes send the AI off cooking personal projects in the background whilst working on day job stuff even, fire and forget..

UK's Cyber Security and Resilience Bill makes Parliamentary debut

streaky
Black Helicopters

Uhm

It should be called "The GCHQ In Yer Stuff Bill" because that's what it does.

You know the best way to keep your datacentre resilient? By keeping the government out of it.

End of.

Researchers want to kill the vibe, propose better model for AI coding

streaky

Re: LLMs learned from the worst

That is simply not the case at all.

streaky
Black Helicopters

I'm Missing Something

This is literally how we write code already.

As for LLMs breaking things - ask the LLM to write test suites and documentation for your project (the two things that LLMs are baseline incredibly good at btw - and humans hate doing) long before you ask them to write code.

Our team, like 90% of code is AI generated at this point and it consistently outclasses humans all day long, because we don't try to fight the AI. Our developers work with it and are massively more productive as a result.

When you have a functioning test suite and documentation you can just let them do their thing, they'll test it before committing, self-review, keep the docs up to date and produce clear well-structured code. Then a human in the loop reviews the PR. Job done.

The actual answer to the question of how we make LLMs be better software engineers is we need diffusion - we need to be able to simulate intent and diffuse noise into code, which is like how AI image generators work, rather than starting at the context and picking the next token. We're a long way off that being mature, though. For now what we have, y'know, works.

End well, this won't: UK commissioner suggests govt stops kids from using VPNs

streaky

Uhm

I use Mullvad because of political repression in my country. The UK.

How about parents parent their kids.

CRAZY idea, I know.

Banning VPNs to protect kids? Good luck with that

streaky
Big Brother

Herp Derp

You'd have to block literally all TLS traffic. All SSH connections. All ecommerce will be gone, you'd have to shut down all government online services.

Put another way - the internet would be gone. And you still wouldn't block VPNs because you'd just dress them up as some other protocol.

They might be able to block the publicly known ones, but there's a whole problem with it'd end up in court and the government would lose.

Salesforce study finds LLM agents flunk CRM and confidentiality tests

streaky

Re: Confidentiality Awareness

No.

If you don't use the steering wheel or brakes on your car you crash into a wall.

If you leave SSH open to the world with password auth you're in deep trouble,

It is not on an LLM to magically infer what you wish it to do. You have to tell it.

That's prompt engineering. This is basic. This isn't any more an LLM's fault if you don't tell it than it's AWS' fault when people leave S3 buckets open to the world.

streaky
Mushroom

Confidentiality Awareness

Why would an agent have confidentiality awareness if you never at any point tell it that it should behave in that way or how to behave in that way anywhere in the prompt?

They eventually add one in but then still give no detail that will help it.

Absolutely embarrassing. A better study title would be "Prompt engineering is hard - and we couldn't manage it".

Here's a protip though - LLMs will do prompt engineering for you, if you ask them to.. They'll also evaluate what you already have and suggest improvements.

Torvalds' typing taste test touches tactile tragedy

streaky

Re: Don't get me started..

I grant you there are some valid excuses - but they shouldn't be taking up the percentage of the keyboard model space that they do..

streaky
Megaphone

Don't get me started..

I could go on for days about the disaster of the modern keyboard design. I won't, but, I'll pose some questions:

Why does tenkeyless even exist? Why does 75% keyboards? You're not a pro gamer who needs to get a keyboard into your flight bag, what are you doing?

How come we can't make a decent wireless keyboard at a reasonable price in 2025? We've been doing it with mice for years and the latency, bandwidth and battery implications are significantly worse for mice.

Why must you put keys so close to the edge of the keyboard that I can't use it on my lap, leaning back in my chair (which is best for my back)? At least the bottom edge anyway.

Do we really even need macro keys? Do gamers really even use them? And if they do, do they really need to be on the left side of the keyboard? Didn't we use to put them at the top?

RGB is nice (at least proper RGB through the keys so it lights up the letters, anyway) - but do we _really_ individually referenceable backlights? (to be fair this is weak because once you have backlights you're 98% there)

Why is it still not possible, no matter how much you spend, to have keys that don't wear smooth after less than six months - and why don't you sell caps at a reasonable price for when they inevitably do?

We're paying a lot of money for, it seems to me, _bad_ keyboards.

I literally last week binned an expensive Razer keyboard that had a failed space bar, and resoldering a new switch in didn't help it. I bought a Cynosa Lite to replace it in a hurry because it's cheap and actually fulfils a lot of my criteria. I wish I could get it with proper switches, but it's honestly the best keyboard I've had in years despite being one of the cheapest, nastiest keyboards I've ever owned. This shouldn't be a thing. I should be able to buy something like it with decent switches for, IDK, 80 quid, maybe a wireless option that works well for 100 or so? (yes, I know about the Ornata V3 - but low profile keys are the worst, it does prove we can almost do it and there's not really a good excuse though).

Trump's wind farm funding freeze is so much hot air, say states as they blow sueball to Washington

streaky

Oh good

Another one of these nonsense APA "plis give TRO and have it apply nationally" suits that won't survive 30 seconds at SCOTUS.

The response to this one writes itself. Some of these judges are extraordinarily corrupt and it isn't going to end well for them.

A court, and certainly not a district court, doesn't have the power to enjoin the executive branch in this way. They'll do it, but they'll look very silly when a competent court vacates it all. There's no irreparable harm here anyway. Appallingly bad lawyering, one wonders how these people passed the bar exam.

California sues President Tariff

streaky

Re: We're out

"I don't see why not"

It's literally the world order that the US themselves built. If it's not based in self-determination, then all hell will break loose.

It'd be an absolute unmitigated disaster for California though, I wouldn't advise it..

streaky

Re: Strongly worded letter

Nah they'll get immediate time with a friendly judge, and Trump will be able to almost immediately appeal it to SCOTUS, which he's entitled to do. They'll send it back saying to the courts "you didn't really mean this, did you? would you like to try that again and do what you were supposed to?" and stay a bunch of the most egregious nonsense, at which point the district court will throw a wobbler, and then it'll end back in SCOTUS. It's a pattern that is emerging in US legal circles - Abrego Garcia is the case closest to going back for it's second run at SCOTUS, which Trump will win again, though there are others - and the second runs they're going to come back with very definitive language that courts at this level don't get to do this.

streaky

States..

Yeah, they don't set international trade policy. That's an Article II power. For good reason too. Here in the UK that's a power held by the PM (though normally delegated to a minister) for the exact same reason. Trump was elected to create trade policy, and his views on trade were well known and understood by the electorate. Contrary to the filing this isn't even vaguely ultra vires.

"Enjoin Agency Defendants (and all of their officers, employees, agents, servants, attorneys, and others acting in concert with them or subject to their control or direction) from taking any action to implement or enforce President Trump’s IEEPA Tariff Orders;" isn't a power a district court in the US has which all but guarantees this is going down in flames one way or another - and Trump can take this directly to SCOTUS.

New SSL/TLS certs to each live no longer than 47 days by 2029

streaky

Re: Sounds more like a money making scheme

But that makes zero sense as a counter-argument. Ignoring the fact it's all OSS and LE is a non-profit, which has legal implications - hell, it was originally sponsored by Moz and the EFF. There's zero margin to be had, if you're right and they do that, where's the money coming from? There might be arguments about the usefulness and other things, but you can't find a profit motive from your scenario.

Even a "it's the NSA and aliens" argument is more rational than a profit argument in the scenario. And there's zero basis for that.

We're not going back to that world, because it's dumb, everybody knew it was dumb but allowed it to go on anyway - if we can't have easy cert issuance for free, it'll be opportunistic encryption or something and it'll be moot.

streaky

Re: Sounds more like a money making scheme

Free automated renewal, free certs, IT'S ABOUT THE MONEY.

Is it, though?

To be clear, this is about browser/web site certs.

streaky

Just use Caddy

No seriously though, even though I think the argument for is moot and possibly a little bit silly, does anybody even pay for certs any more? I thought most people were just using LE these days, at work it's all we use, let alone for home gaming.

Musk's DOGE muzzled on X over tape storage baloney

streaky

Re: leader of the free world

But it doesn't mean that at all. It's about Commissioner independence from EVERYBODY. They're supposed to operate at their own "look how smart we are" level where they're totally untouchable. They exist to protect the Commission's power base, and they do so incredibly dutifully.

Even if it meant that (and to be clear, again, it doesn't), that isn't how it works in practice.

In theory, there's the Parliament as it's own power base, but they can't initiate legislation, they can't fundamentally change legislation, they can't really in any practical way vote against legislation - all because of the Trilogue system. They can argue, they can protest, they can say "this far and no further" - what happens in these sessions? We know not, because they're totally secret and anybody who tells doesn't survive - not that they ever tell. All we know is the Commission _always_ wins - not mostly wins, not usually wins, ALWAYS wins. The EU Commission itself commissioned and published a report about Trilogue subtitled "Where European democracy goes to die". Not a thing has changed since that report was published.

Does that actually sound like checks and balances to you? Does that really sound like European Parliament has real powers?

streaky

Re: leader of the free world

"Head of the European commission is accountable to the commission, which is accountable to the European parliament, which is accountable to European citizens"

It never ceases to amaze me how little people who want to defend the EU know about the EU. I wonder if there's a correlation.

The head of the European Commission is accountable to NOBODY - least of all the European Parliament. Research the European Commission itself publishes makes this incredibly clear. European Commissioners themselves lose their pension if they listen to voters, it's right there in the rules of the road. They have an oath, maybe your should read what that oath says.

Something about, what was it? Oh, right:

"in the performance of my tasks, neither to seek nor to take instructions from any Government or from any other institution, body, office or entity"

The only people who know anything whatsoever about the European Commission and defend that are either incredibly stupid or former Commissioners themselves - usually both at the same time. Probably because they don't want to lost their _incredibly_ generous pension.

The EU is not a democracy, it has never been a democracy and wants nothing less than to be a democracy. It's not even a French and German project to control the rest of Europe - you could forgive it a little bit maybe if it was; it's something much more nefarious than that. Nor is it a corporatocracy despite showing many of the trappings; it's a hybrid of a few evil systems, but leans towards a sort of authoritarian technocracy.

Microsoft is redesigning the Windows BSoD to get you back to work ‘as fast as possible’

streaky

Unintended Consequences

"but your correspondent cannot recall the last time my iOS or Android devices fell over"

Remember that one time the EU pushed diesel because it was under self-imposed pressure over emissions and it worked out really well?

Microsoft could easily stop windows crashes by ending general purpose computing like Apple have by locking people into their platform.

Asking the wrong questions leads to the wrong answers and bad unintended consequences.Also the idea that iOS, Android and Linux doesn't crash is absurd anyway.

UK satellite smartphone services could get green light this year

streaky

Re: Impressive

It's like 1/3 the length of the UK but with line of sight - line of sight being _everything_. The distances aren't that big, it's really about if you have a constellation large enough to handle demand.

We heard you like HBM – Nvidia's Blackwell Ultra GPUs will have 288 GB of it

streaky
Boffin

Re: Are these even GPUs anymore?

They're still at their heart GPUs. The fact they are aimed towards AI workloads etc doesn't really change that. Totally get what you mean though, I just don't think it makes much sense to call them something else when they're not something else. We do [also] have acceleration kit that isn't actually essentially just GPUs specced for AI loads.

Also the example you're looking for is it can't run Deepseek R1 - it has like half the RAM needed. It's massive for most models though. Remember that AI revolution?

Also they don't hold a monopoly, just there's zero price competition between the three major players. Maybe some day somebody will find out why.

The biggest microcode attack in our history is underway

streaky

Re: What is this article about again ?

You're using words you don't understand, might want to look into that, maybe read a book or something.

streaky

Re: What is this article about again ?

They certainly voted for everything they're doing right now, they were incredibly clear about their intent. Yes.

streaky
Mushroom

Re: What is this article about again ?

The aim is to take over and control

Wow, imagine a government doing *exactly* what it's electors elected it to do.

How HEINOUS.

I worry for you people, seriously.

We meet the protesters who want to ban Artificial General Intelligence before it even exists

streaky

Climate Alarmism

It's the same thing as the current crop of climate alarmists who are completely detached from reality. I wouldn't even be surprised if it's the exact same people pushing that agenda.

It's not mentally healthy to believe these things with absolutely no evidence and if anything the evidence reaching a completely oppositional conclusion.

They'll start claiming "the science says" then "all science agrees" (by the way, phrases like these are completely oppositional to first principles of science which is how you can spot people who aren't really scientists a mile away, huge red flag - if science agrees, it wouldn't be science: it would be politics - I'm very reassured by the fact that not all scientists believe that the sky is blue and water is wet, and nor should they) next, ignoring the fact they're totally false as they are with climate science - the science doesn't say, and all science doesn't agree, in fact some of the most learned people in climate science totally disagree.

Same thing happened with the coof - some of the world's most learned epidemiologists and virologists etc completely disagreed - and have been proven right FWIW.

Why do we keep doing this? AI isn't going to kill people (of its own accord, anyway). AGI might not even be possible anyway. See a therapist.

Your days of driver sync via Windows Server Update Services are numbered

streaky
Boffin

Re: Patching by subscription

Certainly no free tools as they won’t pay the MS tax to unlock the API.

Am I misremembering or didn't this all become how Microsoft essentially got away from their antitrust prosecution? I could google it, but I'm working from (25 years ago) memory - they were forced to unlock and document their APIs properly as part of it. Going back on that would seem to be highly problematic.

As long as you can patch at the local system level via other tools, it'll always be possible to force Microsoft out of the patching, and have tools that give you control over the process.

As somebody who wrote software that does this in a way that Microsoft would prefer wasn't a thing, the biggest threats IMO are the monthly roll-ups, the way they're engineered is highly problematic despite MS' claim that they exist to make things easier.

Microsoft trying to force themselves out of their most profitable sector: it's the servers, stupid - would seem to be a bad idea.

They'll get away with it as long as it's just drivers, and they don't prevent other driver install methods - it's when it becomes actual OS updates that people will (rightly, by the way) run away screaming.

'Maybe the problem is you' ... Linus Torvalds wades into Linux kernel Rust driver drama

streaky

Re: Fair comment by Linus

Basically, if you think C should be consigned to History then you should be looking to also consign OS’s written in C to history and be designing something new more suited to the purpose of running Rust software.

Yup. People who don't understand this comment don't write software - doesn't matter who's team owns it, it's going to be a pain to maintain; and you don't necessarily even need an OS written in Rust - probably just a new Linux kernel. It is doable.

Projects like Redox do exist though.

US datacenters in for shock as Canada mulls cutting the juice over Trump tariffs

streaky

Re: Yikes

But that isn't how Trump operates. Also the key is the meeting in the middle. He's written about this, he hasn't changed in decades.

It's called horse-trading, it's nothing new - so why does everybody freak out?

streaky
Childcatcher

Yikes

Canada is being a little bit delusional that it thinks it has power here. In every sense.

Canada might be the US' biggest supplier of various things but that's because the US doesn't have many energy suppliers. Give the US the opportunity to develop their own supply further still, and they're going to do it. You don't want these sorts of things to become permanent if you're Canada, it'd be the end of everything.

Clearly Trump wants a deal on something, the smart play will be to meet him halfway like he's looking for. He's a political used car salesman (and I mean that in a good way) - if you annoy him he'll sell you a badly welded undeclared cut and shut and you won't like it. Everything he does is transactional, not ideological and you can use that to your benefit if you're not ideologically-driven. Even Mexico has got this figured out. If you come back at him with ideology not transaction, you _will_ lose.

DeepSeek or DeepFake? Our vultures circle China's hottest AI

streaky
Black Helicopters

Re: "The biggest short in history"

Pretending the SEC ever looks at the tape to figure out who did what.

Not on the cards.

If they do, they won't get to it until 2045 - and that's not a hyperbolic guestimate of when. If they do it'll be a speeding fine that's just a fraction of what they made.

The good news is hedge funds and pension funds lost a lot of money last week and retail investors bought the dip and made a lot of money when the market realised it was being dumb.

There are actual reasons - Nvidia is a half trillion dollar company tops, accounting for potential future growth, not the > 3 trillion company the market thinks it is.

China's Salt Typhoon recorded top American officials' calls, says White House

streaky
Black Helicopters

SS7

It's been broken for decades.

The US has known it has been broken for decades. The US government has held many hearings on it being broken for decades.

The US likes that it has been broken for decades - else they'd have done something about it. As would many other countries.

Hoisted by your own r'tard and whatnot.

(Also something something China's grip on the ITU).

All bark, no bite? Musk's DOGE unlikely to have any real power

streaky

Well DUH

What, you mean the executive branch of the US can't just legislate?

IDK why somebody would write an article like this stating something so plainly obvious.

GOOD NEWS! Trump controls the other two branches of the US govt - whilst I wouldn't expect him to always get everything he wants, I'd imagine he'll get a lot of it.

AWS boss: Don't want to come back to the office? Go work somewhere else

streaky

Re: The missing piece

Well, quite, get better HR and have them worrying about real problems not imagined ones.

streaky

In all fairness I don't think that's valid - operational C-levels in my experience tend to be the up at the crack of dawn, if not first in the office something close to it types. Which is fine - but they also do a completely different job and don't tend to get called at 11pm or worse to fix problems.

streaky

Culture..

"We've observed that it's easier for our teammates to learn, model, practice, and strengthen our culture; collaborating, brainstorming, and inventing are simpler and more effective"

Your culture is bull, give me an interesting problem, pay me a fair wage and - most importantly - leave me alone.

By the way, citations to Atlassian: you'd think they'd know a thing or two about this sort of thing.

Our company hasn't yet, but I have a long-standing contract that says I'm WFH from before covid so boohoohoo if my employer ever pulls a dumb stunt like this, won't affect me. They're (rightly) terrified of doing it with software folk though.

GCC 15 to keep Itanium support for now, after all

streaky

So you're saying there's a chance?

Meme quotes aside.. It would be cool if we could look at CPU arches again given how x86 is even more absurd than it was when AMD bent humanity over that one time.. The number of (major/security) bugs that have happened since that simply wouldn't have happened on Itanium is nuts.

Patch now: Critical Nvidia bug allows container escape, complete host takeover

streaky
Childcatcher

Somebody Else's Computer..

As opposed to rolling your own distributed global datacentre infrastructure?

Datacenter CEO faked top-tier IT reliability cert to snag $10.7M SEC deal, DoJ claims

streaky

Genius

I'm no expert, but it seems like defrauding a US federal law enforcement agency with criminal enforcement powers seems like a bad idea.

I mean if you do the thing they're supposed to be law enforcing against you're going to get a speeding fine and nothing even close to what they're supposed to be doing - but actually directly defrauding *them* so they are the direct victim as opposed to, y'know, people who own stock in things, pension funds etc, it won't end well for you.

'Hyperscale customer' to take massive datacenter site near London

streaky

Re: Lets think about this.

RR are basically 500MW.. But, *per reactor*. SMR sites are unlikely to be single reactor sites because of licensing, security etc (and yes - grid infrastructure); they're going to be made up to 2.5GW, 3GW+ with multiple units.