I finally got to the end of the article where they hang this tidbit:
President-elect Donald Trump said this month that he will elevate Commissioner Andrew Ferguson, a Republican attorney, to lead the agency. Following the announcement, Ferguson, “At the FTC, we will end Big Tech’s vendetta against competition and free speech. We will make sure that America is the world’s technological leader and the best place for innovators to bring new ideas to life.”
Trump also said he would nominate Republican lawyer Mark Meador as a commissioner, describing him as an “antitrust enforcer” who previously worked at the FTC and the Justice Department. Meador is also a former aide to Sen. Mike Lee, a Utah Republican who introduced legislation to break up Google.
Yeah, there’s some limits to what they could do while maintaining pace for the 0 day stuff…
Some input validations would be the most basic things they should have done years ago. I’m aware of the hashing mature vendors do of any content they download for updates or deployments. Signature checking as well, and that’s before the code is even inspected - why don’t they include their automated tests they obviously aren’t using in the update as a sanity check client-side? (I’m not aware of anyone doing this or even if it’s possible without the rest of the IDE, stack, I’m no dev)
…sorta. The complexity here is their driver is signed, but it’s also loading code from their channel file (that was all zeroed out), and it seems the necessary error checking wasn’t implemented.
I haven’t yet got to the root cause they published, this is just what I gathered from the video of a retired MS kernel dev who posts stuff.
Obviously with their design it allowed them to be flexible at the cost of playing with fire - I’m impressed they got away with it for so long, really
I tried to follow this but my brain is fried (and it’s only lunch time!)
One thing it got me thinking about (and I was surprised by the conclusion I came to), was it’s often brought up how the training models are black boxes that are proprietary - but we all know the data was whatever public records they could scrape from the internet, be it reddit or whatever.
Such a thing didn’t exist for them to use in a licenced manner, they were innovating - so I’m naively wondering why is it a problem when they took the risk of using the data and presumably paid tremendously low wages to people to prune and train it from 3rd world countries
They still had to build the thing and pay to run it, train it and mature it. The risk was all theirs, why is it a problem that they’re now hoping to profit from that?
We’re upset at the greedy little pig boy spez for licencing it to them, but we did chuck all our thoughts up on the bathroom wall for all to see. It’s not like there was anything private about it.
I do like the approach of changing the incentives, but that will need regulation to force the capitalists to behave, so I guess we’ll just have to wait for the EU to form a plan.
Someone made a really good point, that putting safety filters around the prompts is really just a band aid. Ideally, it needs to have not been in the training data to begin with…
Obviously that’s not going to fly with ‘our’ get rich quick approach to anything GenAI.
Having just written that, I’m wondering if we’re better off having filters at the other end, emulating what we do as parents (concealing knowledge/nuance I don’t want children picking up on), so it filters what it says?
Holy crap, that’s amazing!!
I’m really intrigued about this, however - it’s like it needed some training to find the accurate ‘dosage’, or some sort of warmup/acclimation period:
For Pearson, there was an eight-month wait after the 2019 procedure to see any noticeable difference.
But gradually, the all-consuming rituals that had taken up eight or nine hours every day since her teenage years began to ebb.
Yeah, that really narrows it down, doesn’t it?
Point is, I don’t think these guys have much of a plan in themselves. Sure, the party cooked up project 2025, but the ‘leaders’ sure are being led here and don’t seem to have much grasp of things
Maybe thats naïve