• 1 Post
  • 60 Comments
Joined 3 years ago
cake
Cake day: June 11th, 2023

help-circle


  • I had an inverse experience after an adult beverage or two and talking to someone about a third party’s script they found unsatisfactory. It went about like this:

    Zak: filename.py sucks

    Claude: What’s wrong with it? Bugs? Code quality? Features?

    Zak: yes

    Claude rewrote it, claiming it had “multiple issues”. It found and corrected a major bug, added error handling, and improved command line argument handling.


  • A senior engineer obviously needs (and knows how to handle) considerably more access to their workstation and company IT infrastructure than the average employee. On the other hand, I’ve occasionally read complaints from IT security types about engineers being way too eager to install sketchy stuff.

    There’s some truth to those complaints. I might need to try out several libraries and tools to see what works best for a certain use case. Is that new one with 15 stars on Github actually safe? Are all of its dependencies? How many developers perform a task like that in a sandbox? How many of those perform a thorough audit before taking it out of the sandbox?


  • Why?

    It makes sense to try to give users an idea of how robust a project is, but the exact details of the tools involved in its creation rarely add much to that. It gets a little weird with LLMs because they allow someone with no programming skill to create software that appears to work, which ought to be disclosed; “I don’t know what I’m doing and I asked a robot to make this” does indicate unreliable code. A skilled developer having an LLM fill in some extra test cases, on the other hand can only make the project more robust.


  • Well-behaved server software honors delete requests, but there are a bunch of ways for that to fail without anyone doing anything malicious:

    • If your instance shuts down, there is no way for you to generate delete requests
    • If a server admin has to restore a backup from before your request, the deleted data will be restored
    • Immature or experimental software may not work as designed; Lemmy itself has a version number starting with 0
    • Archiving services may keep snapshots of pages from fediverse servers; here’s your user page on lemmy.world on archive.org
    • Fediverse servers often make content available by RSS, and RSS clients may store that content; there’s no way for them to receive a signal that it should be deleted

    And then there’s malicious activity. It wouldn’t be hard to run a server that speaks ActivityPub, subscribes to a bunch of stuff, pretends to honor delete requests, and actually keeps everything.

    Deletion will always be unreliable on the fediverse as long as it runs on technology that looks anything like current implementations.