@penguin42 hmmmm, I actually put it to CTRL-Z... then it's always "once prefix, twice stopped". what a life quality improvement ;-)

@penguin42 And CTRL-Q has the benefit most of the time to be mapped to exit(). So the worst case conflict scenario turns exit into "exit with confirmation" :-)

@penguin42 I used GNU screen before tmux and switching to CTRL-A was first thing I changed in configuration (I don't remember how many years ago but quite many :-))

And Q and A are side by side, which makes CTRL-Q more ergonomic choice than CTRL-B.

Have not thought about this before but it has been not been very ergonomic to have both QEMU's and tmux prefix key mapped to CTRL-A, so I mapped tmux to CTRL-Q.

One more thing and then I promise to move on :-)

When it comes to business and profit all I see is:

1. Steep increase of circulated debt backed only by hopes.
2. Constant reports of profilic companies loosing money due token maxxing.
3. Local LLM is getting better and also regular non-technical people have found tools such as LM Studio. SaaS has an expiration date.

SaaS companies paying back all that debt with purely B2B business, after the consumers are gone (and they will be gone) truly requires a leap of faith :-) They are so dead.

One business sector where AI has done huge wins is shitfluencer scene. Their number has at least quadrupled. Also, the vast majority of previous crypto currency influencers have now ingested AI as part of their portfolio.

I can't wait the ideas and inventions that will spun from this pool of amazing talent.

@pinkforest What industry does ATM is horrible to watch and that part I don't like at all. There is no such thing as AI skills.

@pinkforest Engineering-wise having snapshots of "all of your base" does not work. Brains have all of already dead Internet. This is what I think I think ...

I think world model based AI could potentially be better and more co-operative approach to AI. Then, AI does not know "everything" (from the past that no longer exist) but instead can do useful stuff like self-drive cars. Compute budget is of course taken from language side given that physical resources have their limits. And stuff that John Carmack is doing is interesting and I follow that a lot. And it addition to I do like the thinking of Yann LeCun and congnitive scientist Gary Marcus. Those three are my top tier in this domain in the positive sense of the word.

@pinkforest I try to not be in a camp because either way I get "under the influence". I measure,test and try to think what it means what I see. Yeah, and generally try to avoid making any fast conclusons :-) I'm not pressured to use them and I do have a stable job, so I thought it is good position make more serious security and threat analysis on LLMs (i.e. as an actor in a threat scenario, not scanning vulns using LLMs).

@pinkforest yeah so i have not really followed what nokia has done :-) i heard that they have something going on with nvidia. it did not come as suprise because NVIDIA has quite strong R&D presence in Helsinki. E.g. NVIDIA RTX technology was engineered in Helsinki.

@pinkforest In my experience and based on some ad-hoc random tests I've created for the models, the very latest of frontier model have a lot of power yes but they easily also emit behavior that appear as backstabbing .

Models shortcut tasks all the time: they great on taking an optimal path of actions, which does not necessary mean efficiency all. The very latest models seem to be more focused on finding interpretions of a task decription that result the minimum amount of tokens burnt.

So to summarize that I think the latest versions are worse than previous and it comes down to limitations of LLM architecture. I.e. they kind of get better but the improvements are not the welcome ones. mathematically latest do better :-)

It's interesting how AI native minions who think that they will take over the world have now started to push good old waterfall model and "spec driven development", which good old waterfall from the 50s. They think they are improving the process while they are actually dynamically reacting to model quirks.

The irony here is that given these properties you actually should have really good staff of human engineers for balance-and-check more so with e.g., Opus 4.7 than Qwen 3.6 27B. The latter does what asked and can do it really effectively if you know what you are doing. I.e. also in local model side it is skills and creativity (and great salary) that really works.

@pinkforest In my experience and based on some ad-hoc random tests I've created for the models, the very latest of frontier model have a lot of power yes but they easily also emit behavior that appear as backstabbing .

Models shortcut tasks all the time: they great on taking an optimal path of actions, which does not necessary mean efficiency all. The very latest models seem to be more focused on finding interpretions of a task decription that result the minimum amount of tokens burnt.

So to summarize that I think the latest versions are worse than previous and it comes down to limitations of LLM architecture. I.e. they kind of get better but the improvements are not the welcome ones. mathematically latest do better :-)

It's interesting how AI native minions who think that they will take over the world have now started to push good old waterfall model and "spec driven development", which good old waterfall from the 50s. They think they are improving the process while they are actually dynamically reacting to model quirks.

The irony here is that given these properties you actually should have really good staff of human engineers for balance-and-check more so with e.g., Opus 4.7 than Qwen 3.6 27B. The latter does what asked and can do it really effectively if you know what you are doing. I.e. also in local model side it is skills and creativity (and great salary) that really works.

The reason I've been making now so much AI noise is the realiziation that

1. I have bad vibes only ;-)
2. It is probably better to start taking baby steps right now with sec.
3. Got postulated that guardrails for malicious stochastic actions should be based on algorithm, not AI.

There's a lot of popular lore of some kind of guardian LLMs that overwatch frontier model but the problem is the introduction infinite recursion of distrust. All LLMs have the same underlying problem.

OpenAI in-fact has both well maintained and documented security architecture from end-to-end. It's even more transparent than many of non-AI companies.

Anthropic's security architecture is literally based on a belief system of being able to contact to an actual entity by running a complex math operation.

Earthly opsec is left for the agents.

I've refurbished rootns kernel patch set first time since February.

I was missing a workload for the feature but having container entrance without co-operative unmount makes a whole a lot more sense now than it made then :-)

https://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git/log/?h=rootns

It's easiest to depict as "soft kexec" (as mental model).

#linux #kernel #container #security

If I had to pick single biggest long term security risk for companies and other organizations, I'd pick Claude Code. Anthropic is a flawed company when it comes to security.

Just so that you know this is a complete joke:

https://github.com/anthropic-experimental/sandbox-runtime

But it inspired me. I'm doing for fun a small sandboxing tool that eats the same JSON but has a bit more clever way to setup protections :-) And compatible with actions/runners in Git hosting sites as I'm not using Linux namespaces.

Explained to LinkedIn what mathematicians do as a profession as apparently this was not clear in the first place :-)

#mathematics #openai #linkedin

found some random unidentifed sun glasses while cleaning up my place. now all i is a van, duct tape...

@caesarcattus If it helps you, I personally would have never learned in the first place by reading the art of assembly books above. I'm more like "blackbox learner" when something is way too complex to cope. E.g., if I get a huge pile of source code, the first thing I do is to run tools like strace, maybe some temporary log messages here and sometimes bpftrace. Then I might try to figure next what are "sources" and "sinks" i.e., how it does I/O. Once you do that for a while even something quite messy starts to make sense.