Egregoros

Signal feed

Feoh

@feoh@oldbytes.space

I'm a crusty old nerd who chases bright shiny things and loves playing with old computers :) Especially my Atari 800XL and Amiga.

I build castles in the cloud(s) for a living.

Apparently I exude TOXIC POSITIVITY, or so people on the internet tell me. We're all gonna die eventually, might as well feel good while we enjoy the ride :)

Posts

Latest notes

@feld @drwho

Umm. What?

Help me out. Are you wearing a tinfoil hat?

The ONLY thing on said S3 bucket is the content for my statically generated Hugo site.

And those buckets and their CF distros are the ONLY resources in my account.

What am I missing?

I'm up for security but NOT up for being pointlessly hidebound.

@feld @drwho Also, what's my alternative?

An oh so carefully locked down web server instance with all that attack surface?

Some other secret infosec practitioners handshake static site hosting? Would love a pointer to that or what other configuration you'd favor. I'm always open to new ideas.

@feld For sure. This is where the bean counters are being stupid thinking they can replace people with this stuff.

You need CHOPS to understand what "good" and "structurally sound" look like.

Because LLMs are AWFULLY damn good at producing very convincingly shiny garbage that emits very nearly all the right beeps and pings.

Except for that totally critical beep 5 of 7. If you're missing that beep the machine EXPLODES in a shower of sparks, leaving the clueless bean counters wandering confused amidst the rubble.

I'd say "This will be fun to watch" except it won't be given all the harm that'll happen in order for us to GET there.

@drwho This is another for realz problem with LLM use in code generation:

They will ALWAYS, even if you tell them otherwise, fall back on 'native' abstractions and choose brute force code gen to solve a problem that may well be better or more readably solved by using a library instead.

This is the kind of thing that makes me queasy about the current LLM wave, even though I wind up talking a lot about how I use them for work and otherwise.

We really ARE cheapening the overall quality of our output when we use these things. We're often making a devil's bargain exchanging velocity for quality, because that's what the majority of what the industry wants.

There are bright spots though, I've been reading about a few people who reject the narrative of velocity and are using these tools to generate better quality code.