It’s not so much about decision making as it is about the practical reality that people at that level basically need at least read access to a lot of secrets.
You could say “maybe jazzband can infra its way out of those problems” but that’s a looooot of work! “N out of M consensus on making a GitHub API request to set who is a maintainer” * every single action roadies need to do
It’s not just about bad actors either. Imagine a jazzband roadie getting credentials stolen via some npm-y attack. Obviously this problem exists in the project in the current form but _that problem gets worse just onboarding people_
Maybe jazzband can't infra their way out of the problem, but maybe we can create some tools that will help orgs that encounter this problem in future...
... that's a software engineer in me talking. I have no idea how to organize communities, but I may know a thing or two about making software. And when you've got a hammer in your hands everything starts looking like a nail...
I would say that having roadie level access is equivalent to having access to Django core. I have never seen a recent Django project that isn’t pulling something from jazzband
Despite this I think it’s important to highlight that even in that world jazzband had a lot of infra so that projects could do things like releases cleanly and safely (we aren’t doing direct project releases to pypi but going through jazzband infra to do the release). So release maintainers have a lot less access despite releases “coming from” Jazzband
Maybe it could be mitigated by having some kind of council and requiring m out of n signatures to do anything?
I know that people on HN hate Bitcoin, so I'm always a bit vary to use it as an example.
But I think that in such cases having something similar to Bitcoin multisig could help.
Now they are well on the path to automate OnlyFans models themselves, there are plenty of hybrid sites where known live models are attracted with good terms to bring in the users, and then slowly switched for AI ones, and it WORKS.
Adult industry is so competitive and fast-evolving because there are few deep moats, it shows the way for everyone else, in fact.
[0] https://www.youtube.com/watch?v=MqrJgjrBV2I (it's a very short video, only 45 seconds)
It was true, but I'm not sure if it's still true in the age of LLMs. Maybe we are moving into the era of disposable software.
Not sure what exactly prevented him from accepting more people into the role of "roadies"...
What do you mean? Why wouldn't it work?
Deleted Comment
LLMs are auto-complete on steroids; I've lived through enough iterations of Markov Chains giving semi-sensible output (that we give meaning to) and neural networks which present the illusion of intelligence to see directly what these LLMs are: a fuckload of compute designed to find "the next most common word" given the preceding 10,000 or more words.
In such a case, the idea of it actually auditing anything is hilarious. You're looking at a 1/100 in actually finding anything useful. It will find "issues" in things that aren't issues (because they are covered by other cases), or skip over issues that people have historically had hard time identifying themselves.
It's not running code in a sandbox and watching memory, it's not making logical maps of code paths in its mind, it's not reasoning at all. It's fucking autocomplete. Stop treating it as if it can think, it fucking can't.
I'm so tired of this hype. It's very easy to convince midwits that something is intelligent, I'm absolutely not surprised at how salesmen and con-men operate now that I've seen this first hand.
Although, they still have silicone tips and the wood is probably treated with some kind of varnish for durability and aesthetics, so...