Hasnain says:

From October. Prescient.

“The momentum is there, but only if you stay angry. Given this court’s pattern of behavior, that shouldn’t be hard for you to do. Don’t treat these judges with respect, and don’t allow our elected representatives to treat them with respect, either. Tell those reps that this court isn’t legitimate. It’s vile, evil and must be destroyed. Never stop saying it to them.”

Hasnain says:

I don’t see how the country comes back from this and the Chevron ruling without massive upheaval and someone willing to take action in the moment (and our current democratic leadership is certainly not cut out for this)

As someone wrote on twitter:

“Thinking about how it would be reported if the ex-president of a non-Western country was ruled immune from prosecution by a panel of judges he himself appointed”

Hasnain says:

“We can observe something similar in almost every consumer market and many B2B markets as well, and that's when we're talking about issues that have known solutions. If we look at problem that, from a technical standpoint, we don't know how to solve well, like subtle or even not-so-subtle bias in ML models, it stands to reason that we should expect to see more and worse bugs than we'd expect out of "classical" software systems, which is what we're seeing. Any solution to this problem that's going to hold up in the market is going to have to be robust against the issue that consumers will overwhelmingly choose the buggier product if it has more features they want or ships features they want sooner, which puts any solution that requires taking care in a way that significantly slows down shipping in a very difficult position, absent a single dominant player, like Intel in its heyday.”

Hasnain says:

“If I had to do this in Production, for the majority of workloads I'd probably still use an HTTP / TCP connection. It's portable, reliable on message failure, and I could split it across machines if needs be. However for the cases where latency really matters, the maintenance overhead of using shared memory is worth it.”

Hasnain says:

“In this case, however, you probably have other, more catastrophic data loss vectors to worry about. In other words: You probably don’t care if the fsync call completed when your laptop burns down in a house fire or gets stolen - the data is gone anyway.

If you are running database systems in a production environment, you (or your cloud provider) are hopefully using enterprise-grade SSDs with capacitor-backed write cache that have great write latency.”

Hasnain says:

“Service businesses have always been the easiest to start because there’s no R&D phase. But they’ve historically been tough to grow because the main ways to grow were raising prices, hiring, or pruning your service into a product. If AI keeps getting better (a guarantee) but doesn’t quite get to superhuman abilities (big question mark), there will be lots of automation opportunities that let you grow your service business beyond the traditional constraints.”

Hasnain says:

The challenges they hit were eminently predictable - but it was still cool to read about their earlier use of SQLite.

“Overall, this migration proved to be a massive success. Shepherd is now better equipped to handle a higher volume of business and priced risks. We no longer need to worry about application/database coupling, and our engineering team’s velocity continues to grow.”

Hasnain says:

“This last snippet is probably not UB-safe and is GCC-specific. But the point stands: you can write completely alien and befuddling code in C without making it unreadable.”

Hasnain says:

"Guthrie, who is a hunter, says he wasn’t deterred by the thousands of years the bison had aged, nor the prospect of getting sick. “That would take a very special kind of microorganism [to make me sick],” he says. “And I eat frozen meat all the time, of animals that I kill or my neighbors kill. And they do get kind of old after three years in the freezer.”"

Hasnain says:

"I think this is a very interesting topic, that can serve as an introduction to understand other dynamic languages such as Javascript, where similar ideas are used for exploitation. For this reason, this is an in-depth explaination of the vulnerability, so that it can be used by others as a reference to understand how these attacks work."