What a weird idea. “We were fired, so let’s give thousands of dollars to the AI providers to copy existing software”, how can that help anyone? Why not use that energy to build new ideas that compete with the existing ones, instead of this focus on cloning what is successful? That feels so anti-hacker mentality to me

You can run trigger in your own infra. That has very little to do with the libraries used for your web app

Trigger and friends exist precisely because Node is not a serious backend runtime so you have to reach for bolt-ons for every little thing. No matter if trigger is open source or managed, it's an anti-pattern. Erlang/Elixir, C#, Go etc all handle this sort of async natively, literally out of the box. Mature frameworks like Rails, Django have pretty easy to use officially libraries as well. This has been a solved problem for literally decades.

That has nothing to do with node. You have a lot of situations where a dedicated job queue makes sense

The reason people are using these paid queue services is because Node sucks. Isn't it better to use an open source library or adult backend stack which solved this problem 30 years ago?

Trigger is literally open source. That has nothing to do with how mature the node ecosystem is. If you want in-process queue systems you have a lots of other mature options. Trigger is a dedicated queue system, it runs in its own process and can be used from any language through its API. You seem to talk confidently about a topic I don’t think you understand.

Go has lots of mature in-process queue systems, yet River exists, because in lots of situation it makes perfect sense to have your job queue in its own process

Have you actually tried using the open-source self hostable version of trigger? It seems to only exist in order to check a "we're open source yay" box.

It's missing lots of features like sleeping on waits, warm starts etc.

Yeah, I understand this topic really well, actually: https://github.com/agoodway/pgflow

Security has never been a priority in the software world

I think maybe my lens is slightly skewed because I have only worked in security software? This is shocking to me.

The sycophancy I would say

If they tried to stop terrorists from making biological weapons in the same manner, the headlines would call that useless and ineffective because you're trying to stop already bad actors with something ineffective and trivially bypassed. This is no different, and shouldn't be treated any differently.

Sure, that’s still a block. A client side block is obviously a block

They're literally describing how it's not actually a block just a minor inconvenience

A block would be a bit harder to circumvent

It’s a client side block… which is of course a block

What when China starts doing the same?

They won't. No reason to.

If it doesn’t it’s the best argument against model being conscious

Click on the timestamp of the comment, then “flag”

Yeah, not what I meant...

That’s so low. That’s the level of bounty I awarded researchers when I was managing the bug bounty program at a small startup, it’s just ridiculous coming from a large company like OpenAI

But on the other hand, you can use AI now to find those vulnerabilities.

If that is so, why doesn't OAI have a swarm doing this around the clock?

Surely with all their security programs, they would run testing on the ChatGPT implementation.

I speculate that the AI didn't find this and that human effort and intuition for where to look were needed to find this vulnerability.

Who says they don't? And if they don't, maybe its because others are using their hard-earned money to buy tokens from them to do it, so they don't really have to.

AI evangelists would’ve latched on to it already and would be using it to preach the good word.

Having bit the bullet, I found OAI's models actually quite helpful and most of their offering half-decent. But their whole German website was incredibly concerning and the only reason I went for it was people claiming they're not far behind Anthropic on coding and generally superior for everyday tasks like coming up with recipes to cook from your leftovers.

Like half of the website was dysfunctiona and translations incredibly bad to the point of being nonsensical. That is if you were able to read them at all, because many just went off screen. Like, that's what your evil competitor does to your website after hijacking the domain, not you yourself, ffs

thats reasonably the state of anthropics code output as well - not much care and polish

They should have paid in tokens?

A bounty amount is related to the blast radius and overall impact, not the effort required to find the issue

The S1 actually said it has $855B of commitment. Above $1T of you take in account some that don’t have fixed prices like extra TPUs and the Broadcom agreement. And that they will also build their own infrastructure, on top of that.