Couldn't this be enforced at the router? Intercept outbound TLS. If the client hello is to a new domain, hold it and start a new outbound connection and see if the server responds with a certificate on the CRL. If so, ban it. Otherwise let the original TLS connection proceed.

That would work with TLS 1.2, but not TLS 1.3. TLS 1.3 sends the certificate after the session key is derived and symmetric encryption is established.

That doesn't stop you from asking for the certificate on a separate connection with your own session key, and terminating the original connection if you don't like the certificate.

Claude please rewrite my entire WordPress site as an OCaml Mirage Unikernel that runs directly on bare metal, no Linux.

I bet that takes a week at most.

While at it, create a custom firmware for the BIOS to utilize the CPU more.

In fact, design an FPGA that runs my wordpress blog about my stamp collection in pure hardware. Make no mistakes.

It is using the search engine. The AI summary is run over the top 100 results for your query (or something)

The problem is they're just running a very dumb, cheap model on the results because running a smart model on every search result page would cost them infinity money.

This is the key part I think most “normies” miss, and it drives me absolutely mad. People take the “first thing on the SERP” as absolute gospel, always have. It went from being a reputable site (Wikipedia was generally top for a long time) to being an extracted verbatim answer (probably from either Wikipedia, IMDB, etc.) to “AI Overview” - the dumbest model ever trained. And people treat its answers as ground truth. I want to tell them “Look, I know it’s rough out there on the net and a lot of the search results are spammy, barely-coherent AI slop anyway. It’s okay if you want to ask AI for an answer instead. So do that! Please ask ChatGPT or Gemini (and ask it to cite the source for its results so you can verify). It will always do better than AI Overviews will. Don’t even use Google Search at this point unless you have to, and if you do, scroll past that slop.”

Ask chatgpt or Gemini with reasoning enabled. It fixes a lot of issues.

For starters, how bad do you think it would be to unplug all datacenters? How many people starve?

Yes. AIs are a lot better at coding than they are at writing. I author less than 1% of the code I push these days, but still write the grand majority of emails and posts. Probably I would do it 100% human if it was high stakes and I expected it to be read by millions.

Yes some of us are having a hard time with it.

All of the years we've spent on immutable by default, strong types and dreaming about the lambda has to matter! The AI that just rips out thousands of lines an hour of imperative and weakly typed code just has to be leading organizations to ruin! You'll see!

We worked hard at honing our craft. It's still meaningful, damnit!

Shouldn't tons of applications linked against musl be crashing all over the Internet if it can express this kernel bug?

Not necessarily. Another key here is that the allocation is triggered from the libc, while the main app uses another allocator.

These kinds of issues with VM are notoriously tricky to replicate. And the main debugging method is "staring intently at the code".

Actually, if you implement a JavaScript runtime at all your choice is either too slow for modern web users or `unsafe` everywhere. Runtime values are often simultaneously either words that encode immediates or pointers to heap blocks and doing this the proper way blows up time and space. Doing it the fast way means you have `unsafe` everywhere and Rust's lifetime model can't help you at all. Everyone chooses the fast way.

Maybe Rust let's you encapsulate the unsafe a little better than C++ but the wins are going to be surprisingly small. If you had to build it today you'd maybe use Rust but the case for rewriting an existing C based runtime in Rust is not that strong.

Also for things like interpreter loops the absence of computed goto in Rust stable is a real performance killer. Explicit tail calls (the `become` keyword in nightly) work but maybe you don't want your big rewrite to rely on that.

> It’s there every time you meet someone new and one of their first questions is, “What do you do?” They’re not asking about your passions, your hobbies, or the mundane human tasks that take up most of your time. They’re asking how you make money. How you turn yourself into income.

For the longest time whenever I'd meet someone at a party I would ask "so, what do you spend your time on?" because I specifically didn't want to box them into asking how they make money. I wanted to hear about their passions or hobbies or even the mundane tasks.

Instead, pretty much everyone told me about their jobs.

Probably because a lot of people spend a lot of time at their jobs :)

I prefer "what do you like to do", personally

GitHub is the worst place to host your code. Except for all of the other places.

Well, GitHub seems unlikely to randomly ban your project if it fits within an entire category of services some admin arbitrarily decided they don't like.

I know which one I'll be sticking with.

This was voted on by the association members, with ~500 votes as far as I've seen. It's not the arbitrary politics of "some admin", rather the arbitrary politics of mob mentality.

codesalem.org

It routinely bans projects for downloading media.

Yeah. Looks like it's either GitHub or self-hosted from now on. At least GitHub has a Sponsors thing. Not that I'm getting much out of it.

So it seems.

Do you just care to provide code, or do you want people to be able to create issues, send PRs, make forks? Open source is social, and self hosting git forges isn't the answer for many projects (especially as spam is a big problem, and has been for years, even before LLMs).

Evidence disagrees.