The Register Home Page

* Posts by doublelayer

11428 publicly visible posts • joined 22 Feb 2018

Taiwan gets chippy about US request it shifts manufacturing

doublelayer Silver badge

Re: Pretend I am a Martian.

In principle, nothing. In practice, it's easier for TSMC to do it because they've spent a long time learning how. Apple designs chips but doesn't manufacture them, so they would make mistakes that TSMC made in 2002 and now designs around. That means a TSMC-run effort is going to have a quicker trip from the first brick to profitability. It's not just them, as other companies have some experience and could also manage it, but look mostly at those who already manufacture because they're going to have the easiest time avoiding mistakes. As Intel demonstrated, that's not a guarantee that they will succeed and failures can be very costly.

Judge dismisses Arm's last legal claim against Qualcomm in licensing spat

doublelayer Silver badge

You say that as if any part of the chain could quickly replace ARM with RISC-V. They can't. Qualcomm can't make similarly fast chips with it; they would need to spend a lot of time designing them, which they don't have experience with. They couldn't just buy someone else who knows how to do that; the existing designers are good, but not that good. The people who buy ARM chips couldn't just pivot to RISC-V because the software they want to run on it doesn't support it. The people who write the software can't just recompile for that quickly. Any change of that nature would take a long time.

Which is why ARM thought they could get away with this. If people are really going to switch to RISC-V, then this is the peak of ARM's power because they can't switch for some time even if they tried their hardest. If people are not trying to switch, then ARM is even more powerful at the moment. This is still true now; if ARM canceled Qualcomm's license now, both would suffer, but Qualcomm would probably suffer more because somebody's got to sell CPUs for smartphones and they're still going to be ARM-based because the existing RISC-V chips are nowhere near fast enough and Android's ejected RISC-V from the main project until it settles down more, to say nothing of the many other ARM-only systems people spend lots of money building.

Oracle will have to borrow at least $25B a year to fund AI fantasy, says analyst

doublelayer Silver badge

Re: does that mean

No, that's not what those numbers mean. If OpenAI tried to host that many GPUs in house, they would end up having to build all the same stuff that Oracle is going to build, and it would probably cost them more because they couldn't easily sell unused capacity to someone else.

Oracle has some money they can spend on building these, especially if you include payments that OpenAI is to give them during the project. That assumes, of course, that OpenAI is able to come up with those payments which they probably aren't, but that's a completely separate problem. That money is included, and since some of it is coming from OpenAI, OpenAI could not count it as savings.

Greg Kroah-Hartman explains the Cyber Resilience Act for open source developers

doublelayer Silver badge

Re: Explain the Basis of Article-Claimed Non-EU Jurisdiction!

I have to guess at what you mean by that comment. Do you mean that people don't sell FOSS, therefore that the previous comment doesn't apply to it? Because it's really not that simple. Is there a donation button on the project site? Congratulations, that's monetization, even if nobody's ever donated. You're covered. Did you need to have some system to coordinate things between multiple contributors so you set up a project website, even if it's an informal group of people? For example, did you ever write something like "Copyright 2025 [project] Group" above your open source license? That's organization. You're covered.

As the article says, you're not covered if it's just you, developing something for no reward and putting it up somewhere. There are several projects that work like that, but so many more who have had even the smallest amount of either of the things that qualify for the CRA.

doublelayer Silver badge

Re: Theory vs real world

Exactly. In practice, I have a feeling we'll be fine because open source authors won't be the primary targets, nor will anything be automatic enough to sweep them up. From the letter, the situation is not so rosy as described in the article. The Linux Foundation and Mozilla can easily comply; they've got hundreds or thousands of employees and millions in the bank. The same thing applies to any small project with a single maintainer or perhaps worse, two part-time maintainers who don't have an agreement on which of them is in charge. They've got to do the same things and can face the same penalties.

doublelayer Silver badge

Re: I wonder..............

How does it make it any easier to bring charges against them? If you know they wrote the software, you have all sorts of charges over developing a tool for crime and at least accessory charges in any time that was run. If you don't have proof they wrote it, CRA violations don't apply. If they're trying the argument that the code they wrote was never run anywhere, so theoretically you can't charge them with computer misuse, then CRA charges also don't apply because it only counts if it was obtained by someone in the EU as a product, though fortunately for us that argument is unlikely to work on the actual charges. Not to mention that, by the letter of the law, the parties that could have been harmed by the CRA charges are most likely to be other criminals who deployed the malware rather than the victims.

This law does nothing to help catch ransomware criminals and is so pointless as an additional charge that nobody's likely to bother with. Additional charges tend to fall into one of two categories:

1. It's another severe thing which increases the sentences, therefore giving criminals an incentive to cooperate. That doesn't apply, because the sentences on ransomware tend to be much higher than any CRA violation would be.

2. If they're found not guilty on the big charges, they might be found guilty on the small one at least. That's definitely not going to happen because the kind of proof you need to show a CRA violation is the same as that needed to prove complicity.

Google's dev registration plan 'will end the F-Droid project'

doublelayer Silver badge

Re: Users should have the right to run whatever software they want on a computer they own

It's not entirely clear. It's possible that local installation of unsigned apps over ADB will still be supported, but it's also quite possible that you will have to register with Google. They have stated they intend to waive the rather small fee for this process, but it still means identity verification to Google's satisfaction before you can distribute anything and periodic checks or your permission will be removed.

The sweetest slice of Pi: Raspberry Pi 500+ sports mechanical keys, 16GB, and built-in SSD

doublelayer Silver badge

Re: The distinctly long-in-the-tooth Pi Zero 2

I'm not sure it's a great fit for the educational part of the market. For people like us, both professionals and hobbyists, who already have at least some experience with this area, setting up the Pico toolchain isn't very hard. It's not going to be so easy for a student getting some early experience with a board. There isn't anywhere near as many hardware peripherals for the Pico as were created by many suppliers for normal Pis, meaning more parts of a system have to be built from scratch, and neither is it as easy to get prewritten software to run because there are three different recommended environments for the Pico and code written for one won't run in another.

The Pi Zero has the advantage that nearly everything written for a larger Pi will run on it. That includes hardware control but it also includes OS and software components. If a student wants to build something that controls hardware but also connects to the internet, either for very remote control or to take action based on data retrieved, it's going to be easier on a Zero when they have the full set of Linux tools to rely on rather than a Pico W where they get WiFi and have to build everything else themselves. For example, connecting a Pi to a VPN involves installing and configuring the VPN client, of which there are multiple open source ones with clear online instructions, which will teach the user some things about how networks are built. Connecting a Pico to a VPN involves writing the client yourself, almost certainly failing because you'll use a lot of RAM unless you already know quite well how the cryptographic part and the networking part work. I might be able to do that. The average student won't. A VPN isn't that unusual a component because it's a safer way to connect something for access outside the local network, so there are many things that rely on it, for example if you want to monitor the aquarium from school.

The Pico is a useful product and I'm glad that they made one, but if education is still a significant goal, I think the Zero is a lot more important. I'm not sure how much they're still focused on education though, so they may have different priorities.

doublelayer Silver badge

Re: Raspberry Pi laptop

Not correct. This thread was originally a comparison between this thing and a refurbished Thinkpad. Such comparisons are frequent, and I should note that I was not the person suggesting it. I'm not going to buy either, but the number of Pis I have around here would indicate I'm not so negative on them as DrewPH was. You could have ignored this, but you chose to respond, accepting that a comparison like that could be made, but using invalid methods to do so.

You tell me, and presumably the person who thinks a refurbished Thinkpad is better, to mind our own businesses while participating on a public comment board. You have the choice not to respond or, in fact, to reject the comparison based on actual reasons. I agreed to one of yours: the GPIO. If you used the GPIO from a 500, that's a perfectly good argument for why a laptop can't do that for you, although we do have USB-connected GPIO options based on Raspberry Pi's microcontrollers which could be used in place. You chose to participate in a debate about whether the 500 was better or worse than a laptop. "Mind your own business" is not relevant to such a debate, especially when it now appears you're using it to defend your use of an argument that had no validity which you originally wrote. You argued ARM was better, I asked you why, and your only response has been that you want it and I should stop asking. You can do anything you want because you want that, but that does not argue that it is better.

doublelayer Silver badge

Re: Raspberry Pi laptop

My primary objection is that didn't make any sense. If I tell you that my laptop is better because it's got a Idnic-brand trackpad controller and yours has a different brand, you would have reason to ask why the difference in controller brands makes any difference when you generally don't know or care which it is, and if I can't point to one, you would conclude that my comparison is flawed. The ISA run by a CPU is relevant if one of the following applies:

1. You have software that only runs on one of those. The only such software I have with that limitation is limited to X64.

2. There's a difference in power consumption or battery life as a result. The 500 is not particularly power efficient when compared to laptops and, being a desktop, you're probably not running it off a battery.

3. There is some other feature that the ARM chip provides which the compared one does not.

You can choose to run anything you want for any reason you want, but if you're making a comparison, adding limitations that don't have any effect just to make your preferred choice the only qualifying option doesn't make any point. If having an ARM chip in there delivers some benefit which the comparison with an X64 chip wouldn't get, then tell us. Otherwise, it's as useful to the comparison as only considering computers whose case is red; you can decide to only buy red computers if you want, but it's not going to prove to us that red ones are better.

doublelayer Silver badge

In that case, I have good news. They have exactly what you are asking for. It's called a Raspberry Pi. I know this because that's what I've done. You could have all the power that this box has by buying a 16 GB Pi 5B and connecting the hardware that allows you to connect an NVME drive to it. You could have done that before this thing was ever released.

I don't really understand why people like the 400 and 500 so much, because from my perspective, it's basically the same as my Pi with a keyboard of my choice plugged into it. There's one more cable, but it's not like the 500 works wirelessly anyway. The only explanation I have seen is nostalgia, which I have to assume is not the only reason people choose that model or they wouldn't have successfully made three different versions of it. Still, the keyboard part is optional because the core product is still the computer board itself.

doublelayer Silver badge

Re: Raspberry Pi laptop

I think this machine is quite well-priced. I was expecting to see a higher number given the components they added to it, given that assembling a similar setup from a Pi itself would be a similar price at best. That said, when you're actually comparing those things, are they all actually relevant to you? GPIO I get, although if I had a keyboard-shaped Pi, I probably wouldn't be using those as much as I do on my Pi boards. Raspberry Pi's support is very important when comparing them to any other ARM board, because I am tired of having custom kernels that only work with a distro of the manufacturer's choosing, but when I compare that to X64, it falls short because I can generally expect that I can use any distro I like because the firmware and other low-level components are standard. With the Pi, I still have board-specific images with individual patches, and while having those is a lot better than not having them, not needing them is better than both.

And as for it being ARM, do you get an advantage based on that ISA or are you just mentioning the difference to eliminate that other option? I would understand it if you have something compiled for ARM which you can't get recompiled for X64, but do you really? If not, why is that a factor for you?

Microsoft cuts off Azure phone surveillance support for Israeli military

doublelayer Silver badge

Re: Phone numbers or content of calls?

Phone calls are not end-to-end encrypted and have never been. There are encrypted voice services available which can work over mobile data. Someone with tower-level access can record call content. I don't know whether they have, though it seems likely that they might have, but they can.

doublelayer Silver badge

Re: Moving 8,000 TB

I'm not sure there's much of a choice. They can wait a week, and if they're moving it from Azure's in NL to AWS in NL, they've got plenty of network capacity there and can probably transfer faster than that.

There is a hardware option, with Microsoft having a method to order big boxes with 525 TB of storage capacity. They could order sixteen of those. The problem is that, once those arrive, you still have to transfer it into something else and each of those boxes theoretically maxes out at 120 Gb/s bandwidth if you use three different cables and have something that can handle the other side, but Microsoft estimates that the 100 GbE link will have about 60 Gbps in practice. Theoretically, that does mean you can have 1920 Gbps transfer speed by parallelizing that, but that's going to use quite a lot of cables and upload capacity, and I've only looked at getting the data out of Azure, not what is involved to get it from those boxes into AWS. Once you add getting the boxes shipped to the datacenter where the data is, copying data onto those boxes, shipping them to where you can receive them, shipping those to where AWS will take them, copying the data into AWS, and any more administrative overhead required to get that much hardware in the right places, that speed difference might not be so noticeable.

Many employees are using AI to create 'workslop,' Stanford study says

doublelayer Silver badge

Having done a little, though undoubtedly much less of that than you did, I have concluded that the specification problem indicates that the goals of that research are flawed. It tends to boil down to making two programs and then mathematically proving that they always do the same thing since specifications that are so detailed that you can prove a program exactly follows them tend to also be detailed enough that you can compile them to running code, and even that is prohibitively difficult for anything very large. Using programs that produce one mathematical result from a finite set of inputs can work with that, but those are the programs for which a small set of test cases usually already verifies that they are correct, where verification is not perfect but is good enough for almost anybody.

In production, the kind of correctness that has the most effect involves interacting with other systems. For a program that connects to a network, offers a bidirectional API, and controls some machines, we want to know that nothing bad will happen if the machine breaks in various ways, if unusual network traffic is sent, etc. These are not compatible with mathematical proofs in most cases, since "nothing bad" can't be encoded to a set of numbers.

Callous crims break into preschool network, publish toddlers' data

doublelayer Silver badge

Re: FFS.

You may want to review how many people the businesses that did these things on paper employed just to manage paper and how many you would need for the increase in clients and activity since then. Paper is not cheap. You might also want to review how many mistakes were made with paper that wasn't easily organized or modified. Paper isn't easy after you have enough of it. Once you have a point of comparison, only then can you decide whether it's worth making that change anyway.

Google to merge Android and ChromeOS in 2026, because AI

doublelayer Silver badge

Re: This Should Have Happened Years Ago

"I immediately came away wondering why Google would bother with [...] an OS that tethered you to an internet connection and became practically useless offline."

A few reasons:

1. They thought something super locked down could be sold to schools, and they were right.

2. They already have a lot of control over web standards, and this would make anything they put in them the requirement if you wanted Chromebook users to be able to execute your code.

3. They have a bunch of online software and little offline software, so making people unable to run a competitor's offline version means more people will end up using theirs instead.

4. The more time online, the more ads you will see and the more data they can collect to claim that they can target those ads.

Japanese city passes two-hours-a-day smartphone usage ordinance

doublelayer Silver badge

Re: Overreach

This doesn't feel important because the law's symbolic and unenforced. The city has no way to tell how long you used your phone or what you used it for, therefore nothing happens to you if you ignore them. Consider how you would feel if this was an actual law and they required or got your usage data in order to enforce it. Would your opinion change?

In my opinion, although I would be willing to ignore it as it stands because I can't fight everything, I do see it as an invalid law which is needlessly paternalistic. This kind of thinking is how you end up with things like the OSA, and there are many politicians who think they do have the power to make and enforce such things, from time limits to not allowing moderation of stuff they like (currently not legal there). If it wouldn't be acceptable if they were more serious, it isn't now.

Workers fear for their jobs as JLR's latest shutdown extended

doublelayer Silver badge

That would depend on the definition you use for state-backed attackers. Although there's still argument over attribution and UK-based ransomware operators appear to be the leading suspects, Russian ransomware groups have been named by some people. Even if it was them though, it's not clear whether it's fair to call those Russia waging a cyber-war. If these are criminals doing it for personal financial gain, even if a government isn't arresting them, does that make it an act of war if their government isn't suggesting targets or providing resources? I'm not sure I have an answer, but there has to be some level where that doesn't apply, otherwise a prosecutor missing somebody turns that criminal into a government-endorsed mercenary.

OpenSSF warns that open source infrastructure doesn't run on thoughts and prayers

doublelayer Silver badge

I agree with you, and so does Perens; in fact, he specifically added a term in that license forbidding users from referring to "post-open" software as open source, and while that term doesn't specifically mention "free software" as also forbidden, he would agree to that. When this was first discussed, he and I had a discussion about that in these forums.

Why it's associated is simple, though. Perens had a lot of interaction with software under many licenses, including many versions of the GPL, and he has decided that this has failed and should be replaced with his post-open thing. I disagree with him on that, I think for similar reasons that you do. I see licenses such as this one, and there are many ones with a similar spirit that have been created by companies abandoning real free or open licenses, as effectively proprietary licenses but pretending not to be and not pretending too well. I would like to advocate for more support for true free or open software, but because of how those licenses work, that support would have to be voluntary. If you make it involuntary, it's no longer open, because you have to remove freedoms to do it and those freedoms is why I view software as different. I would, in most cases, rather have an actual proprietary thing over that; at least they're not lying to me about my rights and, since it's owned, there's probably a clearer relationship I have with them.

doublelayer Silver badge

Re: Can p2p distribute the infrastructure cost?

It can be, although mirrors are much more common than P2P directly. The reason why mirrors are better is that the files being downloaded are usually individual and relatively small. If the user's downloading a file which, compressed, is 1.3 MB, the overhead of tracking peers and sending a manifest which is probably about 100 kB from a centralized system anyway doesn't save much if any time. Mirrors, both public and internal, can distribute the load geographically and are quite common. When assets are particularly large, P2P is very common.

Red Hat's distribution model is mostly unrelated. The contraversy with them is the license terms they add to the GPL, effectively punishing people who exercise their rights under the GPL. Red Hat has enough money from revenue to cover their own distribution and the public infrastructure for things like CentOS is something they can afford from some of that.

Feds put finger on H-1B lottery scale to favor higher earners

doublelayer Silver badge

Re: Tidy-up

As I understand it, it used to be relative to the wage level for the job concerned, so the candidates were supposed to have offers above what a typical person doing the same job would do. Now, it's specifically only aimed at the highest wage levels regardless of job. Therefore, you should see more H1B candidates getting in for those jobs that paid well already and fewer or none for jobs with a lower general level, regardless of the relative availability of US residents capable of doing either job.

doublelayer Silver badge

Re: Tariffs on imported goods, fees for visas...

Generally, it isn't that hard to have work done in one country have results in one or more other ones. If you wanted to add another layer of laws which exists to detect that a person outside the US is doing work which is earning money in the US, you'd introduce even more paperwork than if you wanted to tax offshoring jobs. At least when you're taxing offshoring, there are specific people whose employment and unemployment can be tracked. It's still hard, but there are only so many of those. If you're tracking work, you'd need to identify which countries benefited from each email and PR I wrote today. I'm not even sure what you would do with the result if you could calculate it.

Don't panic: H-1B visas will cost companies $100K only for new petitions

doublelayer Silver badge

Re: demand for staff

That depends whether a new filing requiring a new payment happens when they switch employers. If it does, then there's no demand shock, but anybody is now more locked into their current employer because it's a lot more expensive for them to change jobs. One of the criticisms of the previous system was that they were already locked in because, unless they found another employer very quickly, they would be required to leave.

Slack threatened to delete nonprofit coding club’s data if it didn’t pay $50k in a week

doublelayer Silver badge

Re: Slack...

It's possible, but I wouldn't be surprised if the situation actually looked like Almost a hundred thousand users -> These people must be loaded -> We've been undercharging them -> Send a higher bill when their term is nearing expiration, possibly completely automated.

doublelayer Silver badge

Re: Amazon

A lot of places I've worked use one piece of software for text messages and another one for video ones. The only time I've seen it done differently was with Teams users who did both with that. Why should that be the case; after all, Slack can do video calls and most video platforms can do text chat? I can see a few small reasons, but most of the time, I just have to use what they set up and am not asked to judge it (programmer, not IT).

doublelayer Silver badge

Re: Slack should ..

Funnily enough, I think they already thought of that, having said "This can become a pretty expensive piece of labor, if you are not a hacking club and cannot do it inhouse." I think their comments were meant more generally.

Word to the wise: Don't tell your IT manager they're not in Excel

doublelayer Silver badge

Re: Revenge? Not reallu=y but still sweet.

Intermediate calculations absolutely aren't fine with anything like that. Let's use a simple example. Let's say someone borrowed half a million pounds at a 7% annual interest rate, paid monthly. If we calculate the monthly interest rate correctly, you end up paying exactly the amount specified. If we calculate it with four significant figures, you pay £41,433.35 too much. Let's take it up to 6 sig figs. Now, you pay £486.41 too little, which you might be fine with but the bank won't be. To get that below a pound inaccuracy, you need 9 sig figs. To get it below a penny inaccuracy, you need 11. If this is a larger loan or a different random interest rate, those could end up being even larger.

doublelayer Silver badge

Re: Excel

How far? Because they were checking a spreadsheet against a calculator. Calculators can have bugs too. Do it on paper and the chance that someone misreads a handwritten character or makes a mistake somewhere along the line significantly increase. Where does it end, because it's eventually got to?

doublelayer Silver badge

Re: "Surely an IT manager should know the difference between Word and Excel?"

I expect the office workers to change how they work to accommodate reality. In the case where it is easy for me to change that reality, I will do it to save them the effort, but when that is not possible, they can often change more easily than reality can. Using your example although it's not the strongest for my point, I do expect that they will work around the way the power grid works. If they need a bunch of power-hungry things, I will still tell them not to put them on a single circuit and have a single switch that starts them all up simultaneously because the grid doesn't respond well to it. Why not? Technically, someone could put the electrical infrastructure in place to handle that kind of spike, but that's harder and more expensive than expecting them to remember that they have multiple switches they have to use for subsets of the equipment. I think they should be and generally have been capable of remembering that and doing it.

I expect to be able to tell people when their work needs to change to deal with some situation. An IT manager should already understand much of this, but if, for some reason, the CFO absolutely needs to change their behavior because of something related to load balancers, I will explain what change they should make, because it's likely to be smaller than changing how load balancers work. If I can easily change the load balancers so this is not a problem, I'll do that instead, but this is not likely.

doublelayer Silver badge

Re: "Surely an IT manager should know the difference between Word and Excel?"

And if that's the level of difference we were talking about, I'd agree with you. But it's not. The difference between "spreadsheet" and "table" is much simpler, even if they both have cells. Tables are for displaying things in a grid without making you format the grid. Spreadsheets are for taking automatic action on interrelated data, some of which may be displayed to you in a grid. I could see an argument for having embeddable spreadsheets within documents, but they would still be a different thing than tables.

OpenAI says models are programmed to make stuff up instead of admitting ignorance

doublelayer Silver badge

Re: Is this not just how they work?

This is weird, because I agree with everything in this last comment. I just have trouble making that work with your first one:

It was designed to do one thing: return plausibly human-like textual responses to textual queries, based on a corpus of human-generated text. That's all. And they do that well. They work according to their stated design aims.

They are sold as being able to do a lot more than that. They don't. Therefore, I hold those who sold it responsible for their lies.

doublelayer Silver badge

Re: Is this not just how they work?

Your argument requires that the products people can buy have a "stated design specification". What is the "stated design specification" of ChatGPT? All the text the average user sees defining what it is is from marketing, not a technical spec. The reason is that there isn't and never has been a specification for what that product is, not from the creators, not from the marketers, because they don't have one. One of their components is a thing that guesses words, but that's not the only part in the product people are buying. They're buying the whole thing.

To continue the toaster metaphor, one of the parts in that does not have the stated design specification of "make toast". The part that does most of the work has a stated design specification of "produce heat when electricity is passed through". Whatever you do with the heat from that part is your decision. The customer expects the toaster to make toast because that's what the whole system does. Complaining that it doesn't is not fixed by pointing out that the heating element does exactly what it was intended to do. Those developers who build this software fall into two groups:

1. Developers who primarily work with the word guessing part and are talking only about it. These people are not lying, but their papers about the word guessing part are not talking about what people are actually buying.

2. Everyone else, who knows full well that what they're telling people their software does is not what it actually does. There are many people employed to work on other components of an LLM-based system. They don't get to argue that customers are just buying a word guesser when they're specifically employed to make it more capable. And, some of the time, they do. The word guesser is rather bad at doing any mathematical calculations, but some wrapper around it can make it capable again. Not efficient, but at least correct. That's a thing they intended and a thing they sell. That is part of the stated design specification to the extent they have one. Developers know this, and that includes developers of the word guesser part. As soon as they make a point relevant to the product rather than just that component, they are as culpable as the rest.

doublelayer Silver badge

Re: Is this not just how they work?

I can blame it on the writers of the software who consistently lie about its capabilities. By your logic, I can't blame software or hardware for anything at all because they all do a perfect job of doing what they do. Even a broken toaster does the job of setting the kitchen on fire in a very efficient way. In some respects, you're right, because neither are animate so neither controls what it does, but we're splitting things up too far.

When we blame software, we're blaming the entire infrastructure around it. If I have a problem with Mac OS because it lies and says an unsigned package is corrupted and incompatible, that's not blaming the if statement in the code; it's blaming the Apple engineer that wrote it and the management chain that told them to. The LLM does not do what it is being sold as doing or what its creators say it can do. The component works as it was set up to work, but that's not the level that users think they're interacting with the software because A) they're right, they're interacting with that component through a thick layer of other software and B) the writers did not say that was the intended purpose.

Microsoft Surface 7 laptop: Nice hardware, shame about the OS

doublelayer Silver badge

Re: You can blame Microsoft

Not if you consider the report from mrdavidsanders who uses the same hardware you do running the same software the article's talking about. If we accept both statements as true, then the difference is the Surface, not the operating system. If we assume one of the statements is false, we don't have anything other than our own prejudices to tell us which one to disbelieve.

Sorry, but DeepSeek didn’t really train its flagship model for $294,000

doublelayer Silver badge

"How do you calculate the cost of 1000 Chinese man-hours vs 1000 Silicon Valley man-hours ? Do you count them at the same rate ? If giving the end result in dollars, one would expect you did."

Of course I didn't. If you measure the cost in money, you compare the hours based on how much you had to pay to get the hours. If you accomplished it with workers getting paid less, then your cost is less. I'm not sure why that wasn't obvious or why you assumed it would go the other way when monetary cost was the specific branch.

Or you can try counting labor hours, keeping in mind how mythical those are. It won't help too much with total cost because there are a lot of inputs that aren't labor. Counting money already didn't cover everything but at least it was somewhat easy, and by restricting yourself to counting hours, you're just making it worse. For example, there were at least three stages in a simplified development of this thing: 1) write some software to work with the training data and manage the GPUs used to train it, 2) run that and produce a core LLM component, and 3) write more software around it to add things like "reasoning" capability and the general guard rails. Only some of step 3 could be written while step 2 was running, but they probably didn't fire everyone while waiting for the result of step 2. The hours put in during step 3 were more valuable than those put in during step 2, but they were probably paid the same.

doublelayer Silver badge

You only need to include those prices when you're comparing to someone who has, or alternatively, you can exclude those prices from theirs as well. To do otherwise is announcing that you are infinitely more cost-efficient as I am at repairing lawnmowers because you had a spare blade and I had to buy one. The spare blade, incidentally, is the only cost that's at all relevant, since you could repair a lawnmower equally well without decorations in your house or indeed the house.

People misinterpreted the announced price as the price for training the model they were using. They compared that to the cost of training other models. That number was not for all the training, thus their comparison was bad. They had two options:

1. Include the cost of training for both models. This gives a relatively standard comparison, going from raw training data to completed model.

2. Try to remove all but the reinforcement part of both models. If they do that in slightly different ways, the proportion of the above cost could be completely different, meaning you have a faulty comparison.

3. Include that for one but exclude it from the other. You have no comparison at all.

doublelayer Silver badge

It's not hard if you're comparing two things accomplished using the same methods. Yes, different amounts of human labor were used, but in both cases, those humans were payed salaries or wages for their work. If you're just comparing based on how much currency had to be removed from your bank account for the goal to be accomplished, it's not that hard a comparison, because Chinese companies still pay workers and electric bills.

If you were trying a larger cost, complete with externalities, it would be much harder. Comparing different power sources including environmental impact or government subsidies could add complexity. However, it would add almost as much if you were comparing two projects in the same country which could easily have used completely different power sources. The labor calculation is a little easier as long as the people building the product were paid, which Chinese workers are.

ChatGPT joins human league, now solves CAPTCHAs for the right prompt

doublelayer Silver badge

Re: Late to the party

That depends on exactly what kind of captcha was circumvented. They kept changing the types to break the people who automated solutions. Of course, those with the worst intentions tended to be people who expected to make some cash from whatever they were being captchaed over, so they found the most reliable option of all: find someone who has an internet connection but doesn't expect to be payed very much and see how cheaply you can convince them to sit there and answer captchas all day when your software tosses them over.

Alleged Scattered Spider teen cuffed after extortion Bitcoin used to buy games, meals

doublelayer Silver badge

Hiding from law enforcement really isn't that easy. Among other things, there are relatively few countries that don't have an extradition treaty with the US and the UK, and they can still definitely extradite you anyway without a treaty if they feel like it. You have to find one which won't extradite you, treaty or no treaty, and most of the countries willing to do so might not be where you want to live. Alternatively, you can find one willing to not be very clear on who you are so that you can be there and not be found.

For example, Russia doesn't have an extradition treaty with either country and is well-known for not extraditing criminals there, but they don't do it because the Russian Constitution says that Russian citizens can't be extradited by them, no exceptions. They might not anyway if they didn't want to, but if the people we're looking for are citizens, they definitely won't. If you're not a Russian citizen, getting into Russia is no guarantee of anything. You can be an Edward Snowden, for whom granting asylum is a way to annoy the countries Russia's annoyed with, you can make a case that you'll be useful, or you can be a person Russia doesn't want to deal with. In the latter case, you're getting deported out of Russia to make them not your problem, either to the country requesting your extradition because they're trying to be helpful or just to your country of citizenship, which in this case would be the UK.

Pigs will fly: Uber Eats to trial drone delivery

doublelayer Silver badge

Re: EMP weapon == free drone

Three questions:

How expensive do you think EMP weapons are? Let's call that X.

How expensive do you think the parts of a drone that an EMP weapon would destroy are? We'll call that Y.

Now, with D being the price of a drone you just buy and P being your value of not being in prison for shooting off an EMP weapon in densely populated areas, do you think that X+Y+P < D?

How and why Linux has thrived after three decades in Kernelland

doublelayer Silver badge

Re: Licenses

The metaphor doesn't work. Code itself can't take actions. There's no such thing as locking code up, and to the extent that I can imagine such a thing, I can do it very easily with GPL software. I've made modifications to GPL software which you can't read for the simple reason that I never gave either the code or the binary to anyone else. That's as basemented as anything else could be. That happens all the time for businesses that run the stuff in house or, in the case of GPL2, in hardware products they sell. And exactly the same thing happens to them; modifications don't integrate well with their private ones and they often end up behind the times.

The freedoms involved are on people. Users, developers, etc have different rights and responsibilities. GPL is a more restrictive license in that it requires more from developers than something like MIT does, but those restrictions are designed to increase the quantity of software using that license. Each dev chooses what level of restrictions and freedoms they feel suits their concept of how they are happy to let others use their code with the restriction that, if they used someone else's, their set of choices may be reduced.

doublelayer Silver badge

Re: It's quite well known that Linus Torvalds himself doesn't enjoy public speaking.

You may not, but there are plenty of people who do. No amount of pretending that what you want and what they want must necessarily be the same will change that. There are people who are willing to purchase proprietary software if they don't have an open source alternative, even though they won't have the right to modify and distribute. There are even people who will choose to purchase proprietary software instead of using the open source variant, sometimes for justifiable reasons (it has features we need, the open source one doesn't, and I'd rather pay for what I need now than try to write it in myself) and sometimes for worse ones (something vague about support or security).

If you want Linux to take over in corporate environments, you have to deal with the fact that many such people work in them. Expecting to change every business from running proprietary applications atop Windows to only ever using open source is going to be much harder unless you're making the open source software whenever it doesn't already exist. I've done that to a few small things before, but I'm not signing up to do it for everybody.

doublelayer Silver badge

Re: Licenses

Your objections either make no sense or are simply incorrect.

"I think that applies to any OSS licensed code."

Incorrect. If, for example, something is released under the MIT license, I can add code to it, not release it to anybody, and be totally fine. It takes extra license terms to require that I release modifications under the same license or provide source.

"There’s nothing in GPL that makes one donate code back, even if you onwards distribute a binary."

You're drawing a distinction between "donate code back" and "release code" which does not exist and did not happen in this case. There is no requirement to upstream code, as in making sure it's included. There couldn't be; that would be infeasible if upstream doesn't want your code. That's also not what happened. The code that had been written was not released publicly until lawsuits were threatened, and when it was released, it was merely published, not added to the mainline kernel by its original devs. Someone else copied it and integrated it with modifications. The important part is that, once it was released at all, it was released under a license that allowed someone to merge it into code run by others and continue to maintain it. GPL requires that you release code if requested by someone with the binary, and it requires that you use license terms that let it be merged back. Not everything does.

doublelayer Silver badge

Re: It's quite well known that Linus Torvalds himself doesn't enjoy public speaking.

The promoters you're referring to weren't corporate sales. Bill Gates probably did do that at some point, but when he was selling Windows 95 to people, he wasn't having board room talk. He made some speeches for large audiences, and I don't actually think they were very charismatic. That is not why Windows was adopted in offices and Linux wasn't. If you need people who can do corporate sales, Red Hat had plenty and they now have even more because IBM does mostly that, Canonical can find some, and I'm sure some Linux kernel people could manage it if they wanted to which they don't. A single figurehead who is good at speaking isn't the same thing. People didn't buy Oracle's database software because Ellison made a nice speech.

doublelayer Silver badge

Re: Licenses

Because, when someone wanted to use Linux, the network stack wasn't good enough, so they had to write their own to make those things work together, they had to release that code or break the license. Once they released the code, it could be included and built upon by everyone else. The first good implementation could be used by everyone rather than kept as a proprietary advantage. Similarly, Linux provided enough good implementations of other stuff that someone wanted to use it for networking equipment rather than build all those other parts from scratch. Both sides got something simpler which they were able to reuse, but if the license had been more or less restrictive, that might not have happened.

Trump admin says tech companies are abusing H-1B visas, slaps $100k a year to allow entry

doublelayer Silver badge

Re: "tech companies have more money than God"

"I don't imagine the chap wandering around Gallilee and reputed to be the deity's terrestrial representative or embodiment had two denarii to rub together let alone bags of shekels."

If we're arguing this theologically, he was connected to omnipotence, so if he wanted to, he would have. Also, this is the guy who received gifts of gold, along with rare stuff that presumably could have been sold, upon birth. I don't remember stories of him using either method to spend money, but that's not sufficient evidence that he couldn't have. If we're arguing it historically, it becomes much trickier to identify any particular person or what his resources would have been, again insufficient evidence to prove poverty.

British spreadsheet wizard will take mad skillz to Vegas after taking national Excel crown

doublelayer Silver badge

Re: QA probs

True, but that's not very different from most other options that would be considered. A custom application with plenty of logging and code in version control is much better, but basically nobody is considering both options. Those who have available programmers that can be assigned to build that aren't going to decide not to bother using them, and people without them aren't going to hire that team and do the setup when Excel seems to get the job done. These are generally two different types of team or organization, and the one choosing Excel doesn't have a similarly convenient way to do it. Those who understand the problem may try to set up change tracking so that they can audit any changes made, but that isn't simple and it has some gaps.

Nice try, sinners: Pope nixes idea of AI pontiff blessing netizens

doublelayer Silver badge

Re: Any prompt engineers here?

Of course. You can, and it actually does a reasonably accurate job if you're looking for details. If you had a long manual, prompting it on that manual then asking questions can often generate relevant data. There are two remaining problems.

Reasonably accurate doesn't mean always accurate. It messes up less when told to answer the question using this known-correct data and refuse the question if unanswerable from that data. It still messes up sometimes. It depends on your tolerance for trial and error.

And that's not what people would use this for. This would attempt to get the opinion of the bot on new things which have no defined answer. Based on what I've written here, what do you think I think about the moral responsibility of parents, to pick an unrelated question from another article I read today. That's the kind of question that AI avatars would be asked, and now we're no longer talking about something with a factual answer. And if we are, for example if the training data did include some statements about parental responsibilities that could be paraphrased or quoted, it'd still be one level away from pure guesswork when the user requested specific instructions relevant to their situation.

UEFI Secure Boot for Linux Arm64 – where do we stand?

doublelayer Silver badge

Re: Also my question - why?

Perhaps I'm not understanding what, other than simple, you want your bootloader part to be. The rest of the system should probably be handled separately; expansion busses are completely unrelated. From your initial argument, I understood that you wanted directly booted operating systems with no bootloader in the middle. Now your complaint appears to be with the load speed due to loading from slower storage. I don't know what problem we're trying to solve or why this is what we're doing about it.

If load times are the issue, I'm not sure the place you're looking at is the right one. Mostly, I don't care about boot times. So it takes my machine 20 seconds to turn on from cold. I can live with that. I could live with it at two minutes, because I rarely turn it off. When I do, well plenty of things I do require me to wait for upwards of two minutes occasionally. But I have dealt with a situation that might be a closer fit to your desires, namely building an embedded device. I was trying to build this around an embedded Linux stack, but users aren't exactly going to be pleased with an item that takes 30 seconds to turn on. I started to figure out how much stuff I could remove from the boot process, either entirely or at least postponing it so something user-facing would come up while those parts were still being loaded in the background. The firmware loading process was one of those annoying things I couldn't easily remove. However, the firmware loading process was at most 2 seconds and often much less. Copying a smallish kernel image into RAM and branching to it turns out not to be that intensive. Loading that kernel and running through the hardware discovery and initiation process is the slower part.