Ok that's a bit aggressive, but it's important to understand the limits of forensic science, the broken incentives, and systemic lack of rigor in the application of various analyses and products to inculpate/exculpate suspects after the fact.

> Sam Altman of Loopt is one of the most successful alumni, so we asked him what question we could put on the Y Combinator application that would help us discover more people like him. He said to ask about a time when they'd hacked something to their advantage—hacked in the sense of beating the system, not breaking into computers. It has become one of the questions we pay most attention to when judging applications.

- Paul Graham, "What We Look For in Founders"

I also want to add my own characterization.

It is my personal experience with YC founders that YC has coached them in business practices and philosophy that could be characterized less than charitably as "how to con people and get away with it."

I understand the PG doesn't believe this himself and every partner has different advice. But there is a consistent pattern of dishonesty and manipulation that is not innate to founders but taught to them directly by YC partners and it is impossible for me to square this essay with how those founders PG has coached over the last 20 years behave.

Maybe it's possible to become a billionaire without cheating. But all I know is YC won't teach you how.

---

Aside, it deeply bothers me how tone deaf pg is politically. There is a meta to AOC's messaging that he's not reading, which is that wealth is unattainable for the masses and there are oligarchs in our society manipulating our systems to empower and enrich themselves. You are making a rhetorical error by attempting to debate a single sound bite instead of addressing the systemic problems that AOC and progressive democrats are voicing.

That said, that dude has a point. "Researchers" chasing clout with their names attached to CVEs is kind of ridiculous. Half these CVEs are missing bounds checks that can be fixed with a patch in as much effort as writing up the blog post announcing that there was a missing bounds check.

This isn't incompatible with allowing users to install their own software. There just isn't an obligation on the original designers to make sure that software works. That onus is on the designers of that software.

The answer is probably as simple as "no one thought not to do that."

---

I know different people work on these things so I can't do more than guess about how engineering culture cuts across teams, but given the sheer amount of carelessness and sloppiness in Anthropic's software I have to imagine they're burning investor money in training and inference because the code to do it is as bad as the rest of their software.

Large scale global movement is indicative of failure to uplift the globe from violence, poverty, and climate change. It makes a lot more sense to me for the global powers who don't want mass migration to do something to fix its causes instead of retreating inward and succumbing to nativism.

aiui this is what exec does, the problem outlined here is the split between process creation (expensive, kernel space, has to be done each time even if spawning the same process "template" repeatedly) and loading (cheap and in userspace).

Getting all defensive and not answering it doesn't really help your industry's case here.

And even if we're talking hypotheticals: stupid example. I haven't worked on a backend where the actual server infrastructure wasn't open source, trivial to open source because it was first party, or irrelevant because the only thing that matters would be the API and protocols, which again, trivial to make open.

What I'm saying is you have programs running on user machines, and programs running on your machines. There's an interface between those two over a network. There's a problem that consumers face today where they pay to play games that are not functional without data flowing over that interface.

There's a claim that implementing the backend side of that interface is so complex and impossible or too difficult/time consuming/etc to design in a way without 3rd party dependencies.

I'm asking: what are those 3rd party libraries doing? And why can't you design server APIs and client code in a way to provide a different backend if consumers need to do it themselves when you stop supporting the game?

It's pretty obvious to me as a gamer and engineer what the intent and design constraints are here, so I'm just wondering what makes this seem impossible?

I've worked on a lot of complicated and deeply optimized networked applications. They're almost all closed source. I know exactly how I would design a system to support these kinds of initiatives. What I'm curious about is why that's impossible for game developers, because either I'm missing something, or game developers are just bad at software design.