The counter argument here is that these checks cause slower compile times and were designed to prevent common mistakes humans make.

If models get good, they may not need the same checks human written code needs. For example, frontier models already will virtually never produce a typo.

Humans need time to think, but a model’s bottleneck is in how quickly it can verify its work. Slower compile times hurt a models ability to iterate.

I don’t think we’re there yet (and we may not get there). But there is an argument to be made that languages with faster compile times may be better for LLMs in the long run than languages with strong checks but slow compilation.

I cannot comprehend the output from AI fast enough for the speed difference between a verbal and thought response to matter.

Not to mention the privacy nightmare of logging my raw thoughts in a corporate environment and potentially routing them to an LLM provider.

Before he was willing to make big sacrifices to “make it”.

And on the first step of the ladder to success he started taking on other responsibilities for fun.

I don’t buy this.

Programming as an industry is famous for constantly evolving and changing.

Comments URL: https://news.ycombinator.com/item?id=48941315

Points: 54

# Comments: 30

If you want GitHub to tell people about your security fix, someone needs to tell GitHub about the fix first.

AFAIK they mostly pull from the normal sources like NVD automatically, but you can also submit to GitHub directly.

Build provenance, maintainer alerts on new releases, tying releases to specific git tags, etc all help.

> Only advisories reviewed by GitHub trigger alerts.

From https://docs.github.com/en/code-security/concepts/supply-cha...

The majority were noticed by maintainers or third party groups noticing things like releases not tied to a source tag, many rapid releases, etc.

Cooldowns won’t stop everything, but it makes a malicious release significantly more likely to be noticed

> It very well could be a culture issue

I agree

If it is, would you extend your opinion to say Apple turns a blind eye to ethical issues as well?

All of the employees divulging secrets came from Apple after all. The person named in the lawsuit was a 24 year Apple veteran and a VP at departure.

It’s possible this kind of behavior is endorsed throughout, or it’s possible it’s limited to this specific group.

We know nothing beyond what Apple has alleged.