• 0 Posts
  • 29 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle




  • P2P torrent users are nothing like a code hosting platform. 🤣

    As has been said - their liability for llm code is no different from hosting any other code. They already have the same risk. And that is typically that they must respond to take-down notices which they are already doing.

    They are already dealing with all of the problems they would be dealing with with llm code.

    It’s just code puritanism wrapped in pseudo legal justification. Own it.



  • Yeah - it’s well known that scripts to automate doing bad things did not exist before llms.

    People have tried using forges to host explicitly illegal material all the time. Not just “this may be a copyright issue perhaps maybe”.

    The copyright complaint is a fig leaf to hide their shame.

    They also outright banned cryptocurrency code with no “copyright fig leaf” apologia.

    It’s code puritanism plain and simple. “We don’t like these things so we’re banning them.”


  • People can upload code that violates copyright too. No llm required.

    So if that is the concern have a rule about not violating copyright (which they may already have). And there is likely already a process for handling that.

    This is the problem I have with the situation: the solution chosen (banning llm code) doesn’t really address the concerns they’ve raised directly. It’s just apologetics to make it sound like it’s reason-based rather than “we don’t like it”.

    It’s their platform, they can do what they want, but let’s not pretend it’s not code-puritanism.







  • OMG.

    https://en.wikipedia.org/wiki/Security_through_obscurity

    In security engineering, security through obscurity is the practice of concealing the details or mechanisms of a system to enhance its security. This approach relies on the principle of hiding something in plain sight, akin to a magician’s sleight of hand or the use of camouflage. It diverges from traditional security methods, such as physical locks, and is more about obscuring information or characteristics to deter potential threats. Examples of this practice include disguising sensitive information within commonplace items, like a piece of paper in a book, or altering digital footprints, such as spoofing a web browser’s version number. While not a standalone solution, security through obscurity can complement other security measures in certain scenarios.

    You don’t know what you’re talking about - please stop. It’s embarrassing. It’s a long-standing industry term not some weird phrase I just made up. Nobody is saying “Linux is obscure”.





  • See what I mean?

    As if a proxy blindly passing traffic directly to a backend server “reduces attack surface” in any meaningful way. 🙄

    Edit: Guy edits his post with a bunch of stuff and assumes I’ve read it later. I can’t eyeroll enough…

    1. You’ve increased your “attack surface” by adding a second application to the stack. Proxies aren’t magic, they are also targets.
    2. Sure - you can do those things on a proxy. How many people here are? And why are those things never suggested when people here say “use a reverse proxy”? Because they think the proxy is the security.