Forgot your password?
typodupeerror

Comment How many more unknown unknowns? (Score 1) 7

As our sensors improve what magical things will we be able to build (think cellphone to a boomer) and how will capitalism create a scarcity and meter text messages (remember the early plans?) just to get us used to thinking that texting is an expensive, very scarce resource?

Comment That's not really an option (Score 2) 38

You have to get your kids up and make sure they get dressed and get to school. And you have to do that early because you have to get to work.

Now we could build a civilization around something other than work especially given how much automation we keep doing but fuck that right?

Comment Re:As a DOOM fan and a DBA (Score 1) 22

Maybe I'm missing something, but I don't believe SQL includes client data rendering. At least not any SQL implementation I've ever worked with. There's always a client that has to interpret SQL data and convert it into a rendered frame as well as send user input back to SQL as a query.

Here the database outputs a fully rendered bitmap containing the frame to display. Client script driving everything is just taking that bitmap and pushing it out to the display.

Comment You can have the control (Score 1) 33

In a non-commercial setting. You can do all the research you want at public universities I mean assuming you can get them funded.

And you can run whatever software you want at home.

The laws are targeted specifically at businesses who are chomping at the bit to abuse new tech.

It is funny to me to watch the centrists actually doing something about potential job losses while the left wing sits around with their thumbs up their asses. I am absolutely a lefty and I'm really sick and tired of how useless my side has become and how we have completely given up on the working class.

Comment Re:Correct. And oh, no. (Score 1) 50

Yeah, "very". They're going to make it like sudo where when you give permission to a program to write protected files once it has it forever after.

No, wait, that isn't how it works, is it?

That's how it already works. But you can request the permission from the user with a pop-up. Presumably a "very explicit action" means going into the Settings app and turning it on by hand.

But that's going to do exactly nothing. The app will tell them that they have to do this, and the users, having no idea how dangerous it is to give an AI unrestricted access to their device, will do it anyway, and we'll be right back to where we are now. And the next step will be "See, we can't allow full disk access." And then macOS will cease to be usable.

The only reasonable choice is to flag Meta's software as malware for extending their full disk access to agents. Force them to implement a proper sandbox. Apple already gives them all the tools they need to do it right.

  • The main host app asks for full disk access, but functions without it, triggering an open file dialog to work around missing access when necessary. Most users will end up granting full disk access out of frustration, but that's okay because the agents themselves don't have that access. If possible, make it start out with a read-only full-disk entitlement, because otherwise, using it will be much harder.
  • Each agent runs in a separate agent runner process with a stricter sandbox.
  • The agent sandbox has an entitlement that grants read-only access to the entire disk (or, if the main host app's sandbox doesn't allow that, to every resource that the main host app has access to), and bans the use of the socket() system call.
  • AI agents can request read-write access to specific files or directories by asking the host app. The agent is encouraged to ask for access to an entire directory at once if it needs to write to multiple files in that directory.
  • The host app can pass in a security-scoped bookmark/URL to grant permission, but asks the user first unless the URL is part of an explicit list of allowlisted URLs that the user provided before beginning the task. Doing this expands the sandbox to allow writing to that file or to files in that directory. The SSB can be created programmatically or, if the main app also doesn't have access, through showing an Open File dialog.
  • One tool provides network access to specific hosts with no POST, all GET parameters filtered, and a low limit on URL length to mitigate exfiltration risk. This tool has an entitlement that allow socket access inside an environment where opening sockets is otherwise banned, and thus can be run directly by AI agents.
  • One tool provides broader network access with full upload capabilities. This tool lives outside the sandbox so that the AI agents cannot run it themselves — only ask the main host app to run it for them. Then:
    • The main host app requires the user to give permission to access a single hostname for either a single request (allow once) or a single task (always allow for this task).
    • If the user clicks the "Always allow sending data to example.com" button, the user is asked "Trust example.com for similar request parameters only" or "Trust fully".
    • If the user choose to trust similar request parameters only, then any additional GET parameters must be explicitly allowed each time.
  • The main host app passes each AI agent runner a new open socket connected to the AI service's server.
  • The AI service's server is configured to provide minimal or no network access from the server side.

This is how you protect privacy in an agentic environment.

Comment Filibuster (Score 0, Flamebait) 50

You can't do things with a simple majority because one half of our political party, the Republican party, are batshit crazy fascists that we cannot trust with the power of a simple majority. And they consistently win Congress even though they consistently do not get enough votes to win Congress both due to voter suppression and gerrymandering.

So no we can't do things with a simple majority we need a supermajority because we need to put the brakes on a bunch of crazy fascists who are busy screwing us all over and we know it but like an abused spouse we just can't quit them

Comment Re:Damn... (Score 1) 50

Bernie is usually correct and nobody really listens to him. The left wing has become pretty fucking useless. What he needs to be doing is focusing on voter suppression and that's what the left-wing everywhere needs to be doing. But that doesn't get the headlines so here we are.

What Bernie is trying to do is get attention to a movement because he's trying to do what worked in the '60s. This isn't a 1960s the fascists adapted to the tactics Bernie Sanders is using back in the mid-70s and he never figured that out. In his defense neither did anyone else on the left wing. I only figured it out a few years ago and fuck knows nobody listens to me.

Obama figured it out. That's why he formed his own organizations for combating voter suppression so that he could win his elections. But he's kind of a selfish little fuck so once he had what he wanted he didn't really do much more. And he left the Republicans dismantle what he built. Doesn't help that Hillary was happily letting that happen because she was undermining any potential opponents because people hate Hillary Clinton and always have and she knew she wouldn't get the nomination otherwise.

I've said it before but every single system designed to protect you has failed.

Slashdot Top Deals

Genius is one percent inspiration and ninety-nine percent perspiration. -- Thomas Alva Edison

Working...