| opendevreview | Merged openstack/ossa master: Update OpenPGP public key for rosmaita https://review.opendev.org/c/openstack/ossa/+/986862 | 12:15 |
|---|---|---|
| rosmaita | ty | 12:15 |
| JayF | fungi: https://lwn.net/SubscriberLink/1070698/63526f2e5710cb4d/ you got quoted here | 17:14 |
| gouthamr | ++ good coverage, i told Joe this too in a different conversation | 18:03 |
| gouthamr | concur that we're headed towards the "death of security embargoes" in this world | 18:03 |
| JayF | I feel ... less strongly about that. | 18:11 |
| JayF | Pretending LLMs are free is the base of those arguments, which is a flawed assumption. LLM tokens (including those spent to find OSS security vulnerabilities) are just a modern proxy for time and money. | 18:12 |
| gouthamr | not really free - our reporters are probably having their their subscriptions paid for.. and this only get cheaper over time.. | 18:14 |
| JayF | Well that's what I'm saying. Embargoed vulnerabilities are available to people with time and money to find them. This has always been true. Except now you can sub (time and money) for (money + LLM). | 18:15 |
| JayF | Which makes the base premise a weak point, imo. | 18:15 |
| JayF | note that this is the same math that "OSS lets us work together to be better" relys on; if we go down this path, we may be also saying "why use OSS when you can license wash it" | 18:16 |
| fungi | JayF: thanks for the heads up! i actually started that thread while scarfing down hotel breakfast before lf staff meeting sessions last week, mainly as a means of getting people talking about the problem, so i'm glad that it seemed to work | 20:11 |
| fungi | as for the cost of llm access, i actually expect it to become a lot more expensive, not cheaper (at least in the near term). so far the companies providing it have been doing so at a massive loss in order to build interest, but they can't survive on vc funding indefinitely and investors are already expecting them to start turning profits | 20:13 |
| gouthamr | yes expensive in the near term, cheaper eventually | 20:13 |
| JayF | fungi: I've said in many places I think the end-state for this is for most devs to have a local GPU and that the hosted-provider stuff will fizzle out for software dev. Unsure how much of that opinion is actual-opinion or hopium. | 20:16 |
| gouthamr | https://bugs.launchpad.net/nova/+bug/2151254/ is now public | 21:25 |
| gouthamr | https://bugs.launchpad.net/nova/+bug/2151256 is now public | 21:33 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!