David Chisnall (*Now with 50% more sarcasm!*)
david_chisnall@infosec.exchange
<p>I am Director of System Architecture at SCI Semiconductor and a Visiting Researcher at the University of Cambridge Computer Laboratory. I remain actively involved in the <a href="https://infosec.exchange/tags/CHERI" class="mention hashtag" rel="tag">#<span>CHERI</span></a> project, where I led the early language / compiler strand of the research, and am the maintainer of the <a href="https://infosec.exchange/tags/CHERIoT" class="mention hashtag" rel="tag">#<span>CHERIoT</span></a> Platform. </p><p>I was on the FreeBSD Core Team for two terms, have been an LLVM developer since 2008, am the author of the GNUstep Objective-C runtime (libobjc2 and associated clang support), and am responsible for libcxxrt and the BSD-licensed device tree compiler.</p><p>Opinions expressed by me are not nec
Posts
-
View post
I really hate the access control on Fediverse quote posts. If you have a public post and you opt out of quotes, the following are possible: Posting it on a web site and inviting abuse.Posting it on Xitter / ColourSky / Instathingy / ClokNoise and inviting abuse.Posting it on Mastodon but as a link (which shows up with almost an identical UI) rather than the quote post and inviting abuse.The following are not possible: Automatically notifying the original poster when you have quoted it.For priv...
-
View post
Hmm, MSFT is a bit over the price at which I sold half of my shares a year ago. I had been holding on because I thought there was a reasonable chance that Satya ‘pump and dump’ Nadella would get to 600 before the bubble burst but now I’m wondering if I should just sell now. I don’t like to guess what will happen after the crash. In the .com burst, MSFT lost half of its share value quite rapidly and didn’t recover for a decade. Microsoft was not one of the tech companies least exposed during the...
-
View post
RE: https://mastodon.sdf.org/@netbsd/117396625341557692 Hey #FreeBSD folks, NetBSD hit more than double their funding target after adopting a strong no-LLMs policy. Something to think about while you draft yours, perhaps?
-
View post
When the kittens were small, I thought my fist was roughly cat-head sized and shaped and so might be easier for them to relate to than an entire human, so I’d hold out my fist for them to investigate and get comfortable with. And it worked. Except friendlykitten has developed a habit of not just sniffing it but full-on headbutting my finger with his nose. Walks up, sniffs fist, hits closest finger as hard as he can with his nose, then consents to scritches. This cannot be good for his nose. He’...
-
View post
I haven't seen the kittens much since one ran away (he's back, everything's fine) but just now friendlykitten jumped down onto the fence where he can state into my office. I went outside and he came over to say hello. I also looked up at the little window that he comes out of had the big cat that lives in the same house staring down at me. A tiny little judging cat face! Sadly, I didn't take a camera when I went outside.
-
View post
One of our SaaS providers sent out a marketing email to all of their customers about new AI features. I replied saying that we used them as a secure solution and integrating things that add no value for our use case but add significant attack surface undermines our trust in their product and will cause us to consider alternatives. It turns out that the reply-to header was the CEO’s email address and I initially got an out-of-office auto responder then a worried reply saying that of course the A...
-
View post
Ah, apparently it is the time of the year when we identify and honour the best self publicists among hundreds of people who contributed to scientific discoveries.
-
View post
@EUCommission@ec.social-network.europa.eu The Digital Markets Act is a nice idea but it's ignoring how these platforms became so powerful. The problem is that other big entities use them as their sole (or primary) means of communication. How about defining a set of rules that apply to: All governmentsAll companies over a certain EU turnover.All companies providing essential services (e.g. banking, utilities). Where the rules are, by the end of 2027: They may not require customers to crea...
-
View post
Periodically I try LLMs to see if they actually are useful for programming. This week I was writing an AsciiDoctor plugin. I’m not particularly familiar with Ruby (I struggle to imagine the mindset that believes Smalltalk, or, indeed, any language, can be improved by adding Perl syntax) and I find the internals of AsciiDoctor to be very poorly documented and hard to follow. So this seemed like a great task for LLM assistance: I know the problem domain very well (I’ve written other document proce...
-
View post
At this rate, I’m expecting Pope Leo to be one of the lead authors of the Orange Catholic Bible.
-
View post
Wow, moderators are killing the accounts for the new spam wave so quickly that I get errors when I try to report them because the account has been suspended and so the report refers to nonexistent posts.
-
View post
RE: https://universeodon.com/@georgetakei/117363062318327919 The america.gov thing is an embarrassment but the middle of the rant about US government web sites being worse than the private sector reminded me of how much I appreciate the gov.uk infrastructure. It’s designed to work well with low-bandwidth devices. It works well on large and small screens. It runs in ancient browsers. It has a consistent interface. The buttons are big and clear. It doesn’t use colour contrast that’s problematic...
-
View post
I have a lot of sympathy with the lawyer charged with contempt in this story. He used an LLM to summarise a proceedings and it made up nonsense. Most of us know that this is a risk, but I routinely talk to people who think an ‘AI summary’ of a document is going to be a distillation of information in the information in the source text, rather than some statistically probable sequence of words that would follow a request to summarise the source text. And that’s entirely because that’s precisely...
-
View post
Stock market reporting is so weird. Headline from MarketWatch: Microsoft stock is on track to post its biggest quarterly gains in 28 years. Zoom out on the graph slightly a Microsoft stock is trading at just below its high, which was a year ago. Yes, there was a big jump in July but there was an approximately equal crash at the end of last year. Alternative headline: Microsoft stock exhibits high volatility with swings of almost 50% in one year.
-
View post
I don’t understand the panic over ‘LLMs can tell people how to build biological weapons and plan assassinations’. So can Tom Clancy novels. And both sources will tell you things that are more likely to get you killed than achieve your nefarious goal.
-
View post
Apparently using ‘agents’ can increase productivity. I have been trying this for a while and can confirm that having agents assassinate people who put meetings in my calendar does significantly increase the amount of useful time that I have.
-
View post
I'm increasingly of the opinion that the right time to try to sue LLM vendors for copyright infringement is after the bubble starts to burst. At the moment, politicians buy the line that these machines will magically cause massive economic growth (and, because politicians think the stock market reflects the economy, they even see some evidence of this). That means that they're seeing it as a choice between protecting existing industries and protecting a new major source of growth. E...
-
View post
My LinkedIn posts: 80% marketing, 20% trolling. It probably says something about the platform that the trolling posts get more views. Still slightly shocked people read LinkedIn. I view it as a purely write-only medium.
-
View post
@s10n@mastodon.social @newsguyusa@flipboard.social Your implicit assumption is that the BBC, with close to a hundred years of television archives and probably the highest concentration of award-winning material of any television archive, to which they are constantly adding, cannot attract the interest of a typical British person. And, if that’s the case, the BBC has some very serious problems that need to be addressed urgently.
-
View post
I talk a lot about building software for user customisation. I wanted to share a bit about what I did with igk. This is a tool written for precisely one user (me). I wanted, for the CHERIoT book, to have a single source of semantic markup that could be used to generate typeset PDFs (for print and online, with different styling), ePub (XHTML plus some metadata) and web versions. I initially tried AsciiDoc but it made a lot of design choices that are the opposite of what I want. The design of ig...
-
View post
Butterfly is much less fun to say than papillon so I am using the standard process in the English language: deprecating a common-usage word and replacing it with a foreign word that I like better. From now on, all uses of the word ‘butterfly’ shall be deemed archaic. Thank you for your patience during the transition.
-
View post
Please stop enforcing mandatory time limits on credentials that are trivial to revoke! The point of mandatory expiration is that revocation happens eventually. In the case of a compromise and leak of that credential, an attacker has a guaranteed sunset when their stolen credentials will stop working. This is sometimes a useful property. For example, checking certificate revocation lists on every TLS session is slow. It's common for clients to skip this and rely on revocation sets that a...
-
View post
I am trying a new thing: Only boosting posts that make me happy or have something actionable for readers. It's good to be informed about depressing issues, it's not good to be constantly bombarded with things about them. Not posting about things that annoy me unless I have an actionable proposal for how to improve them. Grumbling can be cathartic but is not especially helpful. I don't promise I'll be good at this, but I'm going to try!
-
View post
One of the Becky Chambers Monk and Robot books has a town throwing a parade to welcome the robot. When he and the monk arrive, there’s a dog. So the robot ignores all of the humans to make friends with the dog. So, anyway, I have a new life goal.
-
View post
There’s a depressing human tendency (independent of position of the position on any political spectrum) to follow the following train of thought: We have identified X as a problem.Y looks, on paper, like it would solve X.We will do Y!Hmm, we have observed that Y did not fix X.We must do Y more!It appears that Y is actually causing secondary effects that exacerbate X.Do even more Y! Look, our predictions from step 2 said Y will fix X!
-
View post
I should probably dispose of a bunch of the books on the shelves in this room that I didn't write as well. There's probably a historical interest somewhere in Teach Yourself Java 1.1 in 21 days, Win32 Developers Guide to DirectX 3, and VRML: Browsing and Building Cyberspace. But I can't quite imagine reading any of them again. Probably. EDIT: I can't believe I mentioned the DirectX 3 book but not the WinG Bible! High-performance graphics for Win16 games! Clearly something I...
-
View post
While tidying out a cupboard, I discovered that I still have thee boxes of author copies of books: the first and second edition of the Objective-C Phrasebook and the Cocoa Programming Developers Handbook. The first edition of the ObjC book and the Cocoa book cover pre-ARC Objective-C, but most of the examples still work (and now a lot will work with GNUstep or other open-source implementations of OpenStep / Cocoa). Does anyone have a sensible suggestion about what to do with them? Any schools...
-
View post
@lemgandi@mastodon.social That wasn't even an on-screen keyboard! I have lost the ability to type.
-
View post
Huh, while I wasn’t paying attention the total downloads of my papers from the ACM Digital Library passed 1M (actually just over 1.1M now). Presumably some of those people read more than one of my papers, so not 1.1M individual readers. If you are one of these people, please accept my apologies.
-
View post
So, OpenAI admits two things in disclosures presented to the court: That their products are utterly dependent on work ingested without compensation.That their derived product is directly substituting for this work, removing the economic incentive to perform that work in the first place. Meanwhile, the EFF filed an amicus brief in the case claiming that this use is exactly what was intended by the ‘To promote the Progress of Science and useful Arts’ justification for the existence of copyright in...