For those unaware, Linus Torvalds this year has deeply cast his lot with the hyperscale LLMs for development of Linux code, dismissing arguments that this is an abdication of responsibility over that code base.

Had to evict a big ass spider from my room today and was reminded of this meme template. At least it's easier to evict spiders than cats, the latter don't fit in measuring cups.

Original post: https://mastodon.social/@heyokyay/117438628570829176

Original post: https://mastodon.social/@heyokyay/117451410809035955

Robert Picardo as Doctor Revell in The Golden Girls s1e18 "The Operation"

There appears to be a few bad actors in the Lemmy community spreading ragebait for personal gain

In fact, the same mechanisms added at the beginning to catch bad human written code are the exact same that catch bad AI code

1. No, the Linux kernel DOES NOT use AI to automatically approve code for inclusion. As far as I can tell, there are no plans to do so
2. The Kernel actually has a huge number of maintainers. As part of the process, all patches are reviewed by a human who provide feedback as part of the process, and patches get bounced back and forth multiple time.
3. Patches don't just magically go straight to master. The maintainers generally have their own branches where it goes to, then it goes to staging trees like Linux-Next. It goes through many eyes, and many tests by the end. The idea that AI code is overrunning the kernel is rediculous
4. Maintainers also check that the code meets coding guidelines and is written properly, and solves the problem they are trying to solve. Yes, they also ensure the code isn't slop
5. LLM's though might be used to identify obvious problems with the code (which they are VERY good at), or even identify code that doesn't follow coding guidelines.
6. The only thing that matters is the human who submitted the code, as they should be checking the code submitted anyway (including LLM generated code)

Writing bad code isn't something new, and isn't unique to LLM's. Coders (and it seems some "journalists") have been writing slop since computers were invented.

The process hasn't gotten less stringent (probably even MORE stringent as there is an additional set of robotic eyes that can also check), and the same mechanisms that were put in place to catch badly written code 10 years ago, are still there now.. With no changes.

From Allrecipes:

Mix:

• 215g AP flour (1-1/2c)
• 15g granulated sugar (1T)
• 2t baking powder
• 1/2t salt

Add and mix:

• 163g milk (I used Oatley full fat) (2/3c)
• 2 eggs
• 1T vegetable oil (I actually forgot this and they came out fine)

Fry in:

• 2 large apples, cored, peeled, and sliced (3c, 325g)

Fry in 375⁰F (190⁰C) oil for 6 minutes. At 5 minutes, some larger ones were still a little raw in the middle. Shallowly fill a cooking spoon, maybe 1/4c each.

When fresh from the oil, roll in:

• 1/2c granulated sugar
• 2T cinnamon

Very easy to make and delicious. Pretty filling too, I mixed up a double recipe but only cooked half which made 10, and three of us are two apiece and were full.

The only question is, do I file them under "muffins", "fruit bread", "cake & pie", or "cookies"?

“I call him Mohamed Al Fayed. And uhhhh— His name is— Abdul, but I think I— call him Mohamed Abdul Al-Sayed.”

This fucking idiot can’t even get the GOP’s infantile smear campaign right. El-Sayed’s full name is ‘Abdulrahman Mohamed El-Sayed,’ and Republicans use that full name as often as possible, because I guess that’s supposed to make him sound more like a terrorist — you know, like that other famous terrorist, Barack Hussein Obama.

But Donny’s too demented to get it right. The name his collapsed cortex shits out instead is ‘Mohamed Al Fayed.’ 

If that name’s familiar, it’s because Mohamed Al Fayed was a billionaire who, during his life, had over one hundred credible rape accusations made against him, his youngest victim being 13 years old at the time. Great guy, right? Well, there was one person who actually thought Al Fayed was a ‘great guy.’

You’ll never guess who it was: Preznit Fuckwit.

Donald Trump gushes over ‘great guy’ Mohamed Al-Fayed’ in resurfaced interview

You know, most of us manage to go through life without having even one dead pedo bestie. Dear Leader has at least two and counting. What a strange coincidence, am I right? Every time we turn around with this guy, new shit comes to light.

via

Archived copy of the article

Washington (United States) (AFP) – White House Press Secretary Katie Zacharia was pushed out Friday after less than a week in the high-profile job, following a series of blunders that added to distractions for her embattled boss President Donald Trump.

"Can confirm," a White House official told AFP, after Fox News reported that Zacharia, 41, was "transitioning out."

The writing was on the wall earlier when Trump made clear he was ready to see his newly minted spokeswoman go amid criticism that she had pretended to be a lawyer and over her one, much-mocked press briefing.

"I said, 'Katie, is this for you?,'" Trump told reporters. "I said, 'Katie, you don't have to do this'... I said to her, 'Honestly if I were you I'd reconsider.'"

Zacharia only began her job five days ago, taking over from the combative Karoline Leavitt, who helped Trump reshape White House coverage by bringing in more friendly outlets and fiercely attacking critical media.

Zacharia had got off to a rocky start with her debut press room briefing Tuesday morning.

It lasted less than 15 minutes, beginning with a remarkably slow reading out of what she said were Trump's many accomplishments -- then taking just three questions from journalists.

She then was plunged into controversy when it emerged that her previous claims to be a lawyer were not true.

The kerfuffle is a distraction for 80-year-old Trump as he flies around the country trying to boost Republican candidates ahead of the November 3 congressional midterm elections, with polls predicting a drubbing.

The Republican leader himself also faces ever-lower polls as Americans sour over the war against Iran, inflation and perceptions of corruption.

...

Hi selfhosters,

I'm considering improving the security of my homelab/server setup and I'd love to hear some more experienced opinions on my plans.

Like most self-hosters, I started out with a single-server setup: I cobbled together some old hardware, slapped on a NAS-style OS, bolted on Docker and started experimenting. As things go, my setup has grown a lot over the years. I'm running a lot on that machine - NAS capability, local DNS via pihole, a Wireguard VPN endpoint (so I can tunnel into the LAN from outside), many private services (accessible only from inside the LAN), but also some public ones accessible from the open web.

Although I've tried to do my homework in terms of security (various hardening measures for SSH and Docker, reverse proxy, proper SSL termination for everything), I realise I've put a lot of eggs in that one basket and I might want to introduce some network segmentation.

I don't think I'm ready for getting a hardware firewall or a router/switch capable of VLANs just yet. What I'm considering, though, is putting my services available from the open internet on a separate server inside my network - a little Pi 5 I've still got lying around. My idea is that if a container on that is breached and if an attacker manages to escape the container to gain root access, compromise would be limited to the few of publicly available services I have on the Pi, thus limiting blast radius. If combined with (software) firewall rules that make the Pi a 'pariah node' (dropping all incoming connection efforts), lateral movement to other devices on the network could be contained.

An alternative would be to finally make the move to Proxmox. Everything would still be running on one physical machine, but I'd create several VMs: there would be one for private, one for publicly available services, and I'd firewall the latter off rigorously so it cannot connect to anything else.

I'd like your opinion on these plans. Which one would you recommend? Are they both sound, or is there anything I haven't considered? Are there other (easy, non-hardware intense) things I could do to improve security even more?