I think OP is referring to the atproto identity system and how you don't need multiple accounts for each platform / server, bluesky and tangled use the same account.

Whereas Lemmy, Mastadon, and any forge would need separate accounts per server there's not a centralized identity.

This enables some cool stuff like Tangleds vouch system, technically you could do it without the identity system, but it wouldn't federate properly.

You don't have to wonder. ActivityPub is shit. There is zero reason to use it if you're not locked in already by network effects.

Dear AI, are you OK? Do you want to see a psychiatrist? Do you want a beer?

I never liked the job in the first place.

In my whole life, I would have NEVER thought I would be replaced by morons who hate programming. They all come out of nowhere and it scares me. There are a lot of people like that on Hacker News too.

It used to be "I love coding" and it's now "It was never about coding, code sucks, it's a liability." I wonder where the real hackers have gone.

private code with commit history

At least they are honest. They have used most human open-source projects, and they can't use what AI puked. The next step is "We want to give you money every month (aka salary) and you will write code instead of our shitty AI."

Forgejo supports OAuth2 if that’s what you mean. It currently only has one federation feature (starring repositories), but more features are planned on their roadmap.

Mermaid is a nicer alternative to my old practice of checking graphviz source and rendered diagrams into my repos

ForgeFed looks neat!

Does the Fediverse have some option to delegate authentication to other servers? I already have separate Lemmy and Mastodon IDs. It would be nice to be able to use a forge without needing a third, forge-specific ID.

I use Arch, btw

Yes. We figured. Lol

I don't think a rewrite in Rust is necessary for everything that has a bug. Instead fixing the bug is probably more secure, before such alternative Rust code is mature enough to replace it.

Fair enough. Don't you think it simplifies the issue a little bit? How long would it take to rewrite the entire TCP stack in rust?

Quite unfortunate it’s being built with AI, but regardless of that, I wonder why they didn’t choose ForgeFed.

I had enough and decided to install the extension and your style. Its pretty good without obvious issues to me (at least using it for 2 minutes so far^^). Thank you for creating and sharing!

Unsafe allows that, yes.

I never said that only Rust prevents this. I just said using Rust in the Kernel would have prevented this issue.

Clearly, but it's worth pointing out that this kind of problem isn't uniquely fixed by "just use Rust".

So could have Java, Go, C# or any language with GC.

No. Those aren't allowed in Linux Kernel.

With garbage collection

Garbage Collection is not usable in an operating system Kernel.

So could have Java, Go, C# or any language with GC. With garbage collection, the options object stays alive as long as any CPU holds a pointer to it, so use-after-free can't happen.

Besides, this exploit is so hard to pull off the only realistic outcome is a kernel panic, and that hasn't even been publicly demoed.

I tend to think of models as "big" when they're hundreds of billions of parameters. GLM 5.x is "big". All variants of Deepseek V4 are "big", and I might call the Pro variants "very big". Kimi K3 is "very big".

I do not own the hardware to run those locally.

That is partially true.

The problem with LLM's specifically is that it's built upon such a huge foundation of shittiness.

To get to the nuance you have to ignore basically all of the horrible shit.

At the risk of an early invoking of godwin's law, it's like trying to have a nuanced conversation about hitlers politics.

Just because you might be willing to handwave the bullshit away so you can have the nuanced conversation you want that doesn't mean everybody is willing to do the same.

There's a difference between "not recognising that nuance exists" and "not wanting (or being able) to engage in nuance because that requires glossing over horrible shit".

I wouldn't say "heavily" using it is the right term. What I consider to be slop is, vibe coding without looking in the code, without understanding and testing. If that is your definition of "heavy", then we are on the same page. Also using Ai to search for bugs or recheck your functions in example is assistance, rather than taking the project over. I would rather use the terms:

• heavy=vibe coding
• light=ai assist

I know that many argue that any use of Ai in any form is slop. I respect that and understand why anyone has this opinion. I'm not a big Ai fan myself, but would like to distinguish these use cases. But its not always easy to categorize. Sometimes projects lie somewhere in between these definitions. And what about projects that started as "traditional" projects, but got adopted by vibe coders or Ai assisted developers? That's also sometimes tricky to categorize. For most, who don't like Ai anyway, it is much easier to declare any use of it as slop.

so.....the extended consequences of rampant capitalism ?

well...rampant "people gonna people" but capitalism is the current favoured expression of that.

There is nothing inherently bad with LLMs as a technology -- the issues are because nothing with LLMs happens in a vacuum. The big AI companies are building and using LLMs in the most unethical way possible. Get rid of the waste, theft, misuse, abuse, and generally insanity around LLMs and you're left with a powerful tool.

Whatever comes from it at that point is on the people using it. The hammer isn't bad because some idiot is trying to drive screws with it.

if you can’t find docs or anything then it doesn’t either.

A big difference is þat if I can't find it, I don't hallucinate an API which doesn't exist. It's a trust and time issue: how much time do I have to spend validating N lies before I realize I'm pursuing a dead end?

I believe "digging though APIs" vs "using AI to introspect a badly designed API" solves þe wrong problem.

Maybe they should use better distros.

I use Arch, btw.

What do you consider a "big model"? 5B? 780B? Do you run þese locally, or use one of þe commercial offerings?