Readit News logoReadit News
muyuu commented on Matchlock – Secures AI agent workloads with a Linux-based sandbox   github.com/jingkaihe/matc... · Posted by u/jingkai_he
engelo_b · a day ago
sandboxing is really the only way to make agentic workflows auditable for enterprise risk. we can't underwrite trust in the model's output, but we can underwrite the isolation layer. if you can prove the agent literally cannot access the host network or sensitive volumes regardless of its instructions, that's a much cleaner compliance story than just relying on system prompts.
muyuu · a day ago
This may sound obvious, but there must also be an enforcement of what's allowed into that sandbox.

I can envision perfectly secure sandboxes where people put company secrets and communicate them over to "the cloud".

muyuu commented on Software factories and the agentic moment   factory.strongdm.ai/... · Posted by u/mellosouls
davedx · 2 days ago
Meanwhile, me

> $20/month Claude sub

> $20/month OpenAI sub

> When Claude Code runs out, switch to Codex

> When Codex runs out, go for a walk with the dogs or read a book

I'm not an accelerationist singularity neohuman. Oh well, I still get plenty done

muyuu · 2 days ago
Different beasts on the API, the extra context left makes a huge difference. Unless there's something else out there I've missed, which at the speed things move these days it's always a possibility.
muyuu commented on France dumps Zoom and Teams as Europe seeks digital autonomy from the US   apnews.com/article/europe... · Posted by u/AareyBaba
cortesoft · 5 days ago
What control do you lose with github that you want to maintain?

For any code you are sharing, I think you are underselling the hosting + sharing convenience. Everyone looks for projects on github, it is what people expect. Hosting it yourself requires managing user signups/accounts/permissions/etc.

muyuu · 5 days ago
Well, if you're using it like it's supposed to be used, all of it is accessible by a third party and its availability depends on them. It will all be potentially scrapped (meaning it will be). You are essentially outsourcing the hosting as well, with its pros and cons. I'm heavily biased against that, so it's not only a github thing but a "cloud computing culture" thing. I only use other people's computer when using my own is a real problem or it's just not feasible.
muyuu commented on France dumps Zoom and Teams as Europe seeks digital autonomy from the US   apnews.com/article/europe... · Posted by u/AareyBaba
cortesoft · 6 days ago
If the move away from American big tech is for practical reasons rather than political, there is no harm in using GitHub. The worry with using an American firm is that the US government could force the company to handover confidential information, or shut down access.

For open source code, there is no risk of confidential information being given to the US government (since there is no confidential information), and moving to another forge would be pretty simple if necessary.

muyuu · 5 days ago
tbh I was always of the mind that Github offers nothing over some slight convenience in hosting and some exposure, in exchange for the loss of control

Github had enough mindshare that for a small dev operation it was a form of social networking on top of actual code revision control, and one could get the occasional PR worth looking at; this consideration has essentially gone away as the amount of unreviewed vibecoded slop has skyrocketed

I know I'm biased but I'd run my own git server

but you're right that security is of no object here if you're code is OSS in the first place

muyuu commented on X offices raided in France as UK opens fresh investigation into Grok   bbc.com/news/articles/ce3... · Posted by u/vikaveri
disgruntledphd2 · 5 days ago
> this is not compatible with that line of business - perhaps one of the reasons nothing is done in Europe these days

Except for 40% of all Big Tech products and a vast industrial network of companies, and the safe airplane building and decent financial services that don't take 3% of everything, then yeah, I guess nothing is done in Europe these days.

And wait, wasn't most of Google's AI stuff acquired from a European country?

Honestly, while Europe has a lot of problems, this notion that many US people have that literally nothing happens there is wildly off-base.

muyuu commented on X offices raided in France as UK opens fresh investigation into Grok   bbc.com/news/articles/ce3... · Posted by u/vikaveri
whatis991 · 5 days ago
If X/Twitter was to be banned in the EU, and some of its citizens still wanted to access X/Twitter, let us say for the sake of getting alternative points of view on politics and news, would it be a good or a bad thing if accessing X/Twitter by IP was stopped?

As in, a citizen of an EU country types x.com/CNN, because he or she wants to know the other side of some political issue between the EU and the USA, and he or she feels that the news in the EU might be biased or have misunderstood something. Would it be good or bad if the user was met with a "This website is by law not available within the EU"?

muyuu · 5 days ago
there's a push to end with VPNs in the UK and in the EU because it's clear that this is a very plausible endgame

currently VPNs are too easy to use for the leadership of autocracies like the EU or the UK to be comfortable with them, so at the very least they will require for backdoors to see which citizens are watching what, and have them visited by fellows in hi-vis jackets

muyuu commented on X offices raided in France as UK opens fresh investigation into Grok   bbc.com/news/articles/ce3... · Posted by u/vikaveri
pdpi · 6 days ago
I'm of two minds about this.

One the one hand, it seems "obvious" that Grok should somehow be legally required to have guardrails stopping it from producing kiddie porn.

On the other hand, it also seems "obvious" that laws forcing 3D printers to detect and block attempts to print firearms are patently bullshit.

The thing is, I'm not sure how I can reconcile those two seemingly-obvious statements in a principled manner.

muyuu · 5 days ago
i don't see any need for guardrails, other than making the prompter responsible for the output of the bot, particularly when it's predictable

you cannot elaborately use a software to produce an effect that is patently illegal and accurate to your usage, and then pretend the software is to blame

muyuu commented on X offices raided in France as UK opens fresh investigation into Grok   bbc.com/news/articles/ce3... · Posted by u/vikaveri
KaiserPro · 6 days ago
sigh

The vast majority of the EU is not common law, so "reasonable" in this instance is different.

What you describe already happens in the USA, that why MLB has that weird local TV blackout, why bad actors use copyright to take down content they don't like.

The reason why its so easy to do that is because companies must reasonably comply with copyright holder's requests.

Its the same with CSAM, distributing it doesn't have first amendment protection, knowingly distributing it is illegal. All reasonable steps should be taken to detect and remove CSAM from your systems to qualify for safe harbour.

muyuu · 6 days ago
sigh indeed

> Its the same with CSAM, distributing it doesn't have first amendment protection, knowingly distributing it is illegal. All reasonable steps should be taken to detect and remove CSAM from your systems to qualify for safe harbour.

nice try, but nobody is distributing or hosting CSAM in the current conversation

people trying to trick a bot to post bikini pictures of preteens and blaming the platform for it is a ridiculous stretch to the concept of hosting CSAM, which really is a transparent attack to a perceived political opponent to push for a completely different model of the internet to the pre-existing one, a transition that is as obvious as is already advanced in Europe and most of the so-called Anglosphere

> The vast majority of the EU is not common law, so "reasonable" in this instance is different.

the vast majority of the EU is perhaps incompatible with any workable notion of free speech, so perhaps America will have to choose whether it's worth it to sanction them into submission, or cut them off at considerable economic loss

it's not a coincidence that next to nothing is built in Europe these days, the environment is one of fear and stifling regulation and if I were to actually release anything in either AI or social networks I'd do what most of my fellow Brits/Europoors do already, which is to either sell to America or flee this place before I get big enough to show up in the euro-borg's radar

muyuu commented on X offices raided in France as UK opens fresh investigation into Grok   bbc.com/news/articles/ce3... · Posted by u/vikaveri
disgruntledphd2 · 6 days ago
It's about as concrete as one gets in the UK/US/Anglosphere law tradition.
muyuu · 6 days ago
if you can be sued for billions because some overbearing body, with a very different ideology to yours, can deem your moderation/censorship rules to be "unreasonable" then what you do is err on the side of caution and allow nearly nothing

this is not compatible with that line of business - perhaps one of the reasons nothing is done in Europe these days

muyuu commented on X offices raided in France as UK opens fresh investigation into Grok   bbc.com/news/articles/ce3... · Posted by u/vikaveri
didntcheck · 6 days ago
> It's worth pointing out that in France and the UK, the authorities involved are arms length independent of the political bodies

As someone who has lived in (and followed current affairs) in both of these countries, this is a very idealistic and naïve view. There can be a big gap between theory and practice

> There are statutory instruments (in France, constitutional clauses), that determine the independence of these authorities.

> They are tasked - and held to account by respective legislative bodies -

It's worth nothing here that the UK doesn't have separation of powers or a supreme court (in the US sense)

muyuu · 6 days ago
i live in the UK and i completely agree with you and i believe that GP is "having a laugh" as we'd say over here

however it's a very mainstream point of view so i respect that he/she has laid it out pretty well, so i upvoted the comment

u/muyuu

KarmaCake day2869February 14, 2011View Original