𝙲𝚑𝚊𝚒𝚛𝚖𝚊𝚗 𝙼𝚎𝚘𝚠

  • 0 Posts
  • 479 Comments
Joined 3 years ago
cake
Cake day: August 16th, 2023

help-circle











  • On the flipside, an always public never-changing modlog has already and will be abused in the future (in eg the doxxing case). You can’t protect people’s privacy if the modlog can’t be hidden in some manner (which is also a GDPR-compliance issue). It’s an overlooked problem and imo severe enough to warrant a quick, but perhaps overzealous response, over a slow response. If a better solution is proposed they can always change it again and adopt it. And if it’s a dealbreaker for your instance, either defederate or fork the software (which is part of the core philosophy behind the fediverse after all). A right of reply wouldn’t remove the PII, nor would a context field or something. And if you could remove PII but it would require a context field, there’s nothing that stops an admin from hiding their actions through such a field either.

    You can’t be absolute in either conviction here since they clash. The only way to solve it as far as I can see is having admins build up trust with their communities, allowing them to redact the modlog if necessary, and trusting them to do the right thing (and defederating if they don’t).








  • LLMs don’t have continuous processes, there’s quite literally nothing there that could even feasibly be conscious. It takes a bunch of text as an input, puts it through a whole lot of predetermined calculations, then outputs text or an image or whatever.

    There’s no emotions, no memory, no learning. If you don’t tell it something, it’s inert. It can’t experience suffering because it can’t experience anything. It’s an algorithm. It has the same claim to consciousness that WinRAR does. There’s a zero percent risk it experiences anything, let alone suffering.

    Honestly, a desktop running Windows or Linux for example imo has a stronger claim to consciousness than ChatGPT does. Or maybe a Mii in Tomodachi Life, those seem to be able to become “sad”.

    The environmental impact of AI is a much better ‘vegan’ reason not to use it. Although by not using it, you may in effect be “killing” it…


  • Erm, did you read them? The policies aren’t complex at all, just submit the issue (and proposed fix if there is one) through a secure channel, that they’re happy to help set up. If you want to disclose the vulnerability, just wait until the embargo passes so there’s time to fix and have users update. There’s not really anything else you need to do here. This is pretty standard stuff that this person just seemed too lazy to participate in.

    Of the three fixes submitted, only a single one was closed since it didn’t seem very major and would be a breaking change (which shouldn’t be made without prior discussion). The other two are still open, and a maintainer is helping to add tests for the fixes (since the author didn’t add them). The only comment that was somewhat negative was that security fixes should preferably follow the established guidelines. That’s all.