You should ask your AI chatbot if this is a fitting community to post this in. Because it isn’t.

So I built Crabshell

The git says Claude did it though.

Cool thing! 🙂

There’s something up with that Cloud thingy on the top though. If I open the website with my Smartphone browser (Fennec on Android 14, Adreno 6xx series) it lags like no tomorrow as long as that cloud is being rendered.

Not saying fixed bugs aren’t good, I’m just so fed up with this marketing-driven fearmongering. They’re overhyping every god damn bug they can because they know most people won’t know how bad it actually is. They do worse security practices than most homelab enthusiasts and then prophesize the AIpocalypse because their linear algebra “escaped” (the door was wide open). Hell, they don’t even manage to understand proper bug disclosure practices. They’re playing the “Social” Media outrage game on a global scale to drive sales and everyone is suffering for it. I’m so, SO done with all of this bullshit. When the bubble finally crashes I’ll throw a raging party with blackjack and hookers.

For server crashes, but not for RCEs. The only proven case of this I know of was with a specifically prepared PHP instance as honeypot that had an optimal attack surface and was done by Perplexity (another AI company). Outside of that there’s no credible large-scale RCE exploitation that’s any worse than the bugs that get fixed on a daily basis. It doesn’t even remotely justify the panic and media frenzy.

it was merely dangerously exploited by AI bros.

This is shady as hell. It’s an AI company again (Anthropic), they do not follow rules of responsible disclosure (again), it’s a race condition again, they do not provide a proof of concept (obviously since they shouldn’t talk about it at all until after we got the patch) but instead create big media fuzz about their glorious AI… hell, they do not even tell us the kernel versions or anything.

If we find out eventually that you have to disable default mitigations for this to become dangerous (like the stunt they did with Firefox) it’s too late, the media won’t give a shit anymore. Like we just had with PHP - huge panic, enormous media circus, barely any real-life consequences in the end and the responsible disclosure process being a total mess to blow it up even more.

Honestly, every time I see some AI company hyping yet another huge and super dangerous exploit only their superior AI found “after X years of nobody seeing it” I now expect a nothingburger.

We’re probably fine, nothing out of the ordinary to see here.

This post was most definitely slopped by an LLM and the “AI” bullshit is totally pointless, you could implement all that way smarter and trustworthy using OpenFoodFacts.

The project idea looks really cool and genuinely solves a problem (though I would’ve preferred a Nextcloud sync and improved extractors for NewPipe & Freetube), however the amount of generated code and permissive policy (allowing to just have complete implementations generated) scares me off. It sounds like there are huge amounts of code no human ever looked at.

For their interactive mapview in the control room they probably do.

takes down 112 / 911 services

Don’t worry guys, we’re safe now! ꒰ঌ(˶ˆᗜˆ˵)໒꒱

They took just a few hours to squeeze out a new ca-certificates. On the other hand the last time there was a huge kernel bug it took well over 24 hours I think…

Not for complex tasks, really. Gemma4b or similar might be just enough as the backend for a voice assistant replacing Alexa (which I honestly hope, I need to get family members off of that fucking spy devices…). Small web searches might just fit. Or image recognition for Nextcloud Memories, stuff like that.

I noticed that there are sometimes huge differences between models and providers. ChatGPT, which most people use, is a useless sycophant because it’s made to value user satisfaction higher than factual correctness (so it makes shit up und basically never pushes back if you challenge it). When using Mistral AI I had the AI tell me outright that I’m wrong (though it still generated very friendly text to do so, and it only properly does it when in “thinking” mode). No clue how Anthropic or Google do in this regard, just that ChatGPT is especially awful. In the end all models are risky.

A compatibility layer translating 32 to 64bit calls would be the best option. Devs are right, keeping up multilib support is suboptimal. However those in the issue thread saying that “a majority of users want to get rid of 32bit libraries even if that makes old games not work” is just mad. A majority wants their games to god damn work optimally and do not care or even know about library issues. Even if Proton still works, it’s one less option and the native one at that.

Good. Breaking old games unnecessarily is not an option.

<rant>

especially from businesses

if they want businesses to subscribe

styled to attract the decision makers in their target market

Do that, and it becomes a serious contender in the market

The market who’s responsible for fucking up the internet? The market that constantly attacks websites with crawlers to steal everything for value extraction, which Anubis fights against? The market that couldn’t care less about you unless you provide value to it, and even then won’t give you a penny unless forced (while building the whole internet on your shoulders)? That market?

Most FOSS devs I know who aren’t forced into it couldn’t give less of a fart about “the market” and capitalists with sticks in their rear ends inside it. The monetization was often just attached to a project because it makes sense given we’re all trapped in capitalism and perhaps have to somehow cover project costs (probably less so for Anubis), not because it’s a goal to attract investment.

People who’re appaled by something so simple such as a .lol domain and a cute mascot sound awful to talk to anyway.

It is a big problem with a number of opensource projects that could get wider adoption and support

I tell you how that “support” looks like. Companies who adopted the software will add your maintainer Email to their business contacts. If there are issues with your software they’ll then usually ignore the developer route and directly write emails to you, and if it’s a big problem for them immediately blame you and threaten legal action, blahblahblah. They’ll treat you like someone they have a support contract with and be completely confused when you tell them to open an issue and that you otherwise don’t care. Meanwhile they’ll build an empire using your software and be a persistent nuisance.

Why should anyone not desperately needing money to survive care about this.

</rant>

And probably burned half of the Amazon forrest to do so. What the hell.

On the contrary, the trust into LibreOffice will increase.

It’s with slop code like it’s with furniture. Sure IKEA can bury you in cheap stuff, but no one in hell would honestly claim they’re better than hand-made stuff. However other than with furniture, in the digital space there is no scarcity, you can copy one brilliant thing endlessly.

We already have lots of good software and lots of people wanting to make good software. Nobody needs fucking AI slop code except those who want us to become dependent on their services to extract “value”.

Depends. Hand-written apps will still be more valuable than slopped ones as they’re far more trustworthy and less generic (like, literally), not to mention people being environmentally conscious about their choices. A good, trustworthy app that respects the user (and therefore omits e.g. privacy invasion) is still worth a few bucks to many.

You’ll also have to convince other maintainers to adopt the new API in this case, otherwise it’s pointless. Vaultwarden is only the server, you’d at least require one third-party client (e.g. Keyguard) to add and maintain the Vaultwarden API and probably also someone to fork the browser plugins. This whole issue is quite involved.

Not arguing against it of course, just dislike when people make forking (and establishing a whole new standard) sound like not that big of a deal.