<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <updated>2026-10-02T05:24:03Z</updated>
  <generator>https://njump.me</generator>

  <title>Nostr notes by Jed Brown</title>
  <author>
    <name>Jed Brown</name>
  </author>
  <link rel="self" type="application/atom+xml" href="https://njump.me/npub1466v6757um9psdj7z08dty33ulxq9azkhk3ecdxrhxpm09drzsks7cp862.rss" />
  <link href="https://njump.me/npub1466v6757um9psdj7z08dty33ulxq9azkhk3ecdxrhxpm09drzsks7cp862" />
  <id>https://njump.me/npub1466v6757um9psdj7z08dty33ulxq9azkhk3ecdxrhxpm09drzsks7cp862</id>
  <icon>https://media.neuromatch.social/accounts/avatars/117/335/250/292/173/631/original/1477189b43157217.png</icon>
  <logo>https://media.neuromatch.social/accounts/avatars/117/335/250/292/173/631/original/1477189b43157217.png</logo>




  <entry>
    <id>https://njump.me/nevent1qqsrsnx377nenn76w4nr9qk3xwdupt4kn5zrpd4jufa38epan6u0hxqzyzhtfnt6nmnv5xpktcfua4vjx8nucqh5267688p5cwuc8du45v2z62wdgpj</id>
    
      <title type="html">If you are an academic who uses arXiv, please consider signing ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsrsnx377nenn76w4nr9qk3xwdupt4kn5zrpd4jufa38epan6u0hxqzyzhtfnt6nmnv5xpktcfua4vjx8nucqh5267688p5cwuc8du45v2z62wdgpj" />
    <content type="html">
      If you are an academic who uses arXiv, please consider signing this.&lt;br/&gt;&lt;br/&gt;Give Authors Control: Let Us Decide If AI Bots Can Read Our arXiv Papers&lt;br/&gt;&lt;br/&gt;We are calling on arXiv to implement a simple permission toggle during submission, allowing authors to decide what automated scrapers can access:&lt;br/&gt;&lt;br/&gt;Full Access: Bots can read and scrape the full text and source files.&lt;br/&gt;&lt;br/&gt;Metadata Only: Bots are restricted to the Title, Abstract, and Citation metadata.&lt;br/&gt;&lt;br/&gt;Open science for human readers should not mean mandatory, unconsented data harvesting by commercial entities. Advancing scientific knowledge demands immense time, resources, and intellectual rigor — we deserve a say in whether our original work is fed into massive, opaque training sets.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://math.mit.edu/~elmos/petition.html&#34;&gt;https://math.mit.edu/~elmos/petition.html&lt;/a&gt;
    </content>
    <updated>2026-10-05T00:31:20Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsr76t2ypxrw2qh88fmcv0jh9pank8wcca5vpz3938cyxxw84wgxcszyzhtfnt6nmnv5xpktcfua4vjx8nucqh5267688p5cwuc8du45v2z6xxzwlm</id>
    
      <title type="html">We all hate this @nprofile…ma7m dropping necessary bombs about ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsr76t2ypxrw2qh88fmcv0jh9pank8wcca5vpz3938cyxxw84wgxcszyzhtfnt6nmnv5xpktcfua4vjx8nucqh5267688p5cwuc8du45v2z6xxzwlm" />
    <content type="html">
      &lt;br/&gt;&lt;br/&gt;We all hate this&lt;br/&gt;&lt;br/&gt;&lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqhfelzemwrvxxpd7qqfr3m3a7mv4nmf9ydjdnfk83lj6zuhdqmlmszlma7m&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;Greg K-H&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;nprofile…ma7m&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; dropping necessary bombs about LLMs in Linux security and development.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://www.youtube.com/watch?v=NnV_cWeoo5Q&#34;&gt;https://www.youtube.com/watch?v=NnV_cWeoo5Q&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;The purported 79 vulnerabilities were mostly bogus (not a bug, fabricated data) or had already been patched; the few real (all very minor) bugs took him an hour to fix. He says &amp;#34;do not panic&amp;#34;, and emphasizes that time to apply patches is the main vulnerability these days (not an LLM problem).&lt;br/&gt;&lt;br/&gt;&amp;#34;These are pattern-matching tools&amp;#34;, &amp;#34;they do not have intent&amp;#34;. (Vindicating to &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqe0a6n84krygh2qc3ajptu4fa4ma0qy53acz8smsyhztgxljxkghsk25876&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqe0a6n84krygh2qc3ajptu4fa4ma0qy53acz8smsyhztgxljxkghsk25876&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;nprofile…5876&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; and &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrhr0y4vaqskyq2qejhquzq90yr586hf948m3cgxd7pcqamg4l8cqyg97y5&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrhr0y4vaqskyq2qejhquzq90yr586hf948m3cgxd7pcqamg4l8cqyg97y5&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;nprofile…97y5&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; re &amp;#34;stochastic parrots&amp;#34;; it was accurate at the time and accurate today, protestations from boorish AI boosters notwithstanding.)&lt;br/&gt;&lt;br/&gt;New code is 50% wrong, generated code is littered with new vulnerabilities; need to reject a lot but believes review processes are adequate to prevent a shipping a flood of LLM-generated vulnerabilities.&lt;br/&gt;&lt;br/&gt;High false-positive rates make the models incredibly irritating. Cf. Coverity&amp;#39;s post-mortem with a deterministic tool that had low false-positive rates.&lt;br/&gt;&lt;br/&gt;Push back hard [on corporate marketing to developers]&lt;br/&gt;&lt;br/&gt;With regard to higher CVE rates:&lt;br/&gt;&lt;br/&gt;We&amp;#39;ll grind it down like we did with the fuzzers.&lt;br/&gt;&lt;br/&gt;If you want to look for bugs with an LLM (which amounts to fuzzy pattern-matching), use a local model and never upload to platforms.&lt;br/&gt;&lt;br/&gt;I have banned LLMs from driver staging, unless you have the hardware and can prove you have tested the patch. That&amp;#39;s not what staging is for. Staging is to learn how to do development and get involved with our community. [...] Kernel development is all about trust. If I take patches from you and I don&amp;#39;t know who you are, now I am responsible for that patch. [...] You need to build up trust.&lt;br/&gt;&lt;br/&gt;It&amp;#39;s put a lot of additional burden on us, as maintainers.
    </content>
    <updated>2026-10-03T03:39:04Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsgyulv49kf3pnncwa5s0x4aefavme8epx0euelf9j5769gw7cjlygzyzhtfnt6nmnv5xpktcfua4vjx8nucqh5267688p5cwuc8du45v2z6u9wmlm</id>
    
      <title type="html">This afternoon, the Boulder Faculty Assembly passed a resolution ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsgyulv49kf3pnncwa5s0x4aefavme8epx0euelf9j5769gw7cjlygzyzhtfnt6nmnv5xpktcfua4vjx8nucqh5267688p5cwuc8du45v2z6u9wmlm" />
    <content type="html">
      This afternoon, the Boulder Faculty Assembly passed a resolution (after strengthening via amendment) calling for no extension of the OpenAI contract. Vote was 39-8-1 after suspending the bylaws, as necessary to meet the chancellor&amp;#39;s artificial decision deadline of tomorrow.&lt;br/&gt;&lt;br/&gt;The CU Student Government meeting was this evening and public comment was fired up about their corresponding resolution, talking about trust, societal impact, and genuine commitment to learning. So energizing.&lt;br/&gt;&lt;br/&gt;CU Student Government passed their corresponding resolution (with lots of context and calls for shared governance) unanimously on first reading, as necessary to meet the chancellor&amp;#39;s deadline. I am so proud of their curiosity, purpose, commitment to shared governance, and parliamentary skills. ❤️ &lt;br/&gt;&lt;br/&gt;University administrators play on our division. They have claimed that there is no coherent message from faculty or students about &amp;#34;AI&amp;#34;. That refusal is fringe. That OpenAI contracts are ordinary procurements not subject to shared governance.&lt;br/&gt;&lt;br/&gt;May the record show that faculty and students speak as one. ✊️ &lt;br/&gt;&lt;br/&gt;Today was a good day for democracy, no matter what the chancellor deigns to do with this information tomorrow.
    </content>
    <updated>2026-10-02T04:12:12Z</updated>
  </entry>

</feed>