Readit News logoReadit News
jrochkind1 commented on OpenClaw is basically a cascade of LLMs in prime position to mess stuff up   cacm.acm.org/blogcacm/ope... · Posted by u/Beeroness
cactusplant7374 · 5 days ago
Peter Steinberger made an AI personal assistant. It looks like an interesting project that threatens major players like Apple and Amazon. People seem increasingly jealous of the success. What makes this any less secure than e-mail? I just don't see it. There are plenty of attack vectors of every piece of tech we use.
jrochkind1 · 5 days ago
the "with hands" part, which is it's whole thing.
jrochkind1 commented on Apple I Advertisement (1976)   apple1.chez.com/Apple1pro... · Posted by u/janandonly
wlesieutre · 7 days ago
In the 2000s I remember the OS releases being $130, which (depending on exactly what year you start from) is equivalent to $200-250ish today.

Not a yearly cadence because back then they only released a new OS version when it was done and had features worth releasing, but even every two years that wasn't a cheap update.

jrochkind1 · 6 days ago
i think it was only a few years that lasted, but not positive. There was a brief period where you could actually license MacOS to run on non-Apple hardware, I bet they charged for that too.
jrochkind1 commented on Apple I Advertisement (1976)   apple1.chez.com/Apple1pro... · Posted by u/janandonly
jrochkind1 · 7 days ago
A lot of corporate "philosophies" are actually just business models. There have been times between then and now they charged for the OS. They do charge for other software. But largely it's been a good business model for them.
jrochkind1 commented on What came first: the CNAME or the A record?   blog.cloudflare.com/cname... · Posted by u/linolevan
account42 · 19 days ago
You'd think that something this widely used would have golden tests that detect any output change to trigger manual review but apparently they don't.
jrochkind1 · 19 days ago
Oh, they explain, if I understand right, they did the output change intentionally, for performance reasons. Based on the inaccurate assumption that order did not matter in DNS responses -- becuase there are OTHER aspects of DNS responses in which, by spec, order does not matter, and because there were no tests saying order mattered for this component.

> "The order of RRs in a set is not significant, and need not be preserved by name servers, resolvers, or other parts of the DNS." [from RFC]

> However, RFC 1034 doesn’t clearly specify how message sections relate to RRsets.

The developer(s) was assuming order didn't matter in general, cause the RFC said it didn't for one aspect, and intentionally made a change to order for performance reasons. But it turned out that change did matter.

Mistakes of this kind seem unavoidable, this one doesn't necessary say to me the developers made a mistake i never could or something.

I think the real conclusion is they probably need tests using actual live network stacks with common components, and why didn't they have those? Not just unit tests or with mocks, but tests that would have actually used real getaddrinfo function in glibc and shown it failing?

jrochkind1 commented on What came first: the CNAME or the A record?   blog.cloudflare.com/cname... · Posted by u/linolevan
mrmattyboy · 20 days ago
I agree this doens't seem too ambiguous - it's "you may do this.." and they said "or we may do the reverse". If I say you're could prefix something.. the alternative isn't that you can suffix it.

But also.. the programmers working on the software running one of the most important (end-user) DNS servers in the world:

1. Changes logic in how CNAME responses are formed

2. I assume some tests at least broke that meant they needed to be "fixed up" (y'know - "when a CNAME is queried, I expect this response")

3. No one saw these changes in test behavoir and thought "I wonder if this order is important". Or "We should research more into this", Or "Are other DNS servers changing order", Or "This should be flagged for a very gradual release".

4. Ends up in test environment for, what, a month.. nothing using getaddrinfo from glibc is being used to test this environment or anyone noticed that it was broken

Cloudflare seem to be getting into thr swing of breaking things and then being transparent. But this really reads as a fun "did you know", not a "we broke things again - please still use us".

There's no real RCA except to blame an RFC - but honestly, for a large-scale operation like there's this seems very big to slip through the cracks.

I would make a joke about South Park's oil "I'm sorry".. but they don't even seem to be

jrochkind1 · 19 days ago
> I assume some tests at least broke that meant they needed to be "fixed up"

OP said:

"However, we did not have any tests asserting the behavior remains consistent due to the ambiguous language in the RFC."

One could guess it's something like -- back when we wrote the tests, years ago, whoever did it missed that this was required, not helped by the fact that the spec proceeded RFC 2119 standardizing the all-caps "MUST" "SHOULD" etc language, which would have helped us translsate specs to tests more completely.

jrochkind1 commented on I’m leaving Redis for SolidQueue   simplethread.com/redis-so... · Posted by u/amalinovic
bdcravens · 25 days ago
The first one that jumps out at me when I've evaluated it are batches (a Sidekiq Pro feature, though there are some Sidekiq plugins that support the same)
jrochkind1 · 25 days ago
Ah neat, I didn't realize GoodJob had batches, great.
jrochkind1 commented on I’m leaving Redis for SolidQueue   simplethread.com/redis-so... · Posted by u/amalinovic
yawboakye · 25 days ago
got it. is it necessary, then, to couple queue db with app db? if answer is no then we can’t make a necessity argument here, unfortunately.
jrochkind1 · 25 days ago
solid_queue by default prefers you use a different db than app db, and will generate that out of the box (also by default with sqlite3, which, separate discussion) but makes it possible, and fairly smooth, to configure to use the same db.

Personally, I prefer the same db unless I were at a traffic scale where splitting them is necessary for load.

One advantage of same db is you can use db transaction control over enqueing jobs and app logic too, when they are dependent. But that's not the main advantage to me, I don't actually need that. I just prefer the simplicity, and as someone else said above, prefer not having to reconcile app db state with queue state if they are separate and only ONE goes down. Fewer moving parts are better in the apps I work on which are relatively small-scale, often "enterprise", etc.

jrochkind1 commented on I’m leaving Redis for SolidQueue   simplethread.com/redis-so... · Posted by u/amalinovic
jacob-s-son · 25 days ago
Every author of the free software obviously has rights to full control of the scope of their project.

That being said, I regret that we have switched from good_job (https://github.com/bensheldon/good_job). The thing is - Basecamp is a MySQL shop and their policy is not to accept RDMS engine specific queries. You can see in their issues in Github that they try to stick "universal" SQL and are personally mostly concerned how it performs in MySQL(https://github.com/rails/solid_queue/issues/567#issuecomment... , https://github.com/rails/solid_queue/issues/508#issuecomment...). They also still have no support for batch jobs: https://github.com/rails/solid_queue/pull/142 .

jrochkind1 · 25 days ago
Can you be more specific about the issues you have run into that make you advise GoodJob over SolidQueue?

I am (and have been for a while, not in a hurry) considering them each as a move off resque.

The main blocker for me with GoodJob is that it uses certain pg-specific features in a way that makes it incompatible with transaction-mode in pgbounder -- that is, it requires persistent sessions. Which is annoying, and is done to get some upper-end performance improvements that I don't think matter for my or most scales. Otherwise, I much prefer GoodJob's development model, trust the maintainer's judgement more, find the code more readable, etc. -- but that's a big But for me.

jrochkind1 commented on I’m leaving Redis for SolidQueue   simplethread.com/redis-so... · Posted by u/amalinovic
chasd00 · 25 days ago
If you’re tied so tight to MySQL that you’re labeled a “MySQL shop” then it seems logical to use MySQL specific features. I must be missing something.
jrochkind1 · 25 days ago
It's reasonable for basecamp, but the complaint of GP is that basecamp controls what is the Rails standard/default solution intended to be useful for multiple rdbms, without being willing to put rdbms-specific logic in rdbms-specific adapters.
jrochkind1 commented on I’m leaving Redis for SolidQueue   simplethread.com/redis-so... · Posted by u/amalinovic
jrochkind1 · 25 days ago
Would be more useful as a report back with the switch a couple months behind, than as a "This is what I'm going to do"!

u/jrochkind1

KarmaCake day27854March 14, 2012View Original