i should be gripping rat

  • 60 Posts
  • 299 Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle

  • Idk, maybe I’m a big idiot, but I have issues with the points made in this article. I will concede the point that individual Chatgpt use is not that big of a deal, environmentally speaking. If I can trust the numbers in this article, then it has successfully convinced me that I dont need to worry about the energy cost or emissions or water use of individual prompts.

    The case I take issue with is the author’s point that LLMs are inherently useful. I don’t care if chatgpt is kind of just a better Google. I still hate every other thing about it. Using Chatgpt is clearly developing psychoses in some people, and even for people like this author that can use it responsibly, I think it’s just intellectually lazy. It encourages the user to abandon critical thinking and let the robot do it for you. What’s more, as a search tool, it’s destroying the internet. If no one ever goes to websites to read the info, why would people keep making websites with reliable information? Why should I even read this article? Why don’t I just have chat summarize it for me, and I never give this author any traffic or money? Then of course there is the plagiarism problem…

    So idk. Maybe now I’ll stop harping on the environmental point. But I’m still going to avoid LLMs like the plague, because at their core I think they rob us of some of the finer points of a life well-lived. I’d rather spend my time poring through articles to understand the why and how of a question, rather than have a robot just spit the “what” out at me.

    Edit: well I shared this elsewhere and someone pointed out that this dude is a self-avowed “Effective Altruist”, which boils down to “he’s a stooge for techbros and he probably takes a paycheck under the table to write these articles”. So…i no longer feel that I can trust the numbers in this article. I’m back to having heavy concerns about the environmental impact of AI.



  • As anti-AI as I am, this is way less sensational than the headline makes it sound. They’re adding an AI mode that’s basically a built-in extension. Sounds easy to disable. I hate this shit, but you have to grant that Mozilla is a small company fighting for survival. They are probably just doing this to stay relevant (maybe they can get more money from google by being the default AI provider as well), and they may just as quickly drop this when the AI bubble finally pops. I am willing to forgive Mozilla for a little more than I forgive Microsoft, who has no real reason to push this AI hype other than trying to get more rich.










  • I posted this below in reply to a similar comment. If you don’t like the way the devs have handled the raising of concerns, then fine, that’s kind of a judgment call and I can’t tell you what you should feel comfortable with. In my limited experience with the Jellyfin devs (including reading through the responses on that thread you linked), I do not personally get the impression that they are downplaying or refusing to correct issues. To me, it seems more like they are prioritizing some issues over others, and the outstanding security issues seem pretty minor for most use cases.


  • idk the full history, but Joshua’s comment here does not give me the impression of devs that are just deliberately ignoring security issues. It seems like they are simply balancing priorities, which is what all good devs should do. Personally I like that client compatibility is valued over everything else - I would be pissed if they broke the Fire TV client to fix a minor security hole on a niche Linux distro, because then one of my users would be SOL. And as Joshua says in that comment:

    many other options are now open to us in a post-10.11 landscape now that we have a proper library database ready.

    So it seems like now they are better set up to address the security issues without breaking compatibility.


  • So, I am not going to deny that those security issues exist, but it seems like they would only pop-up in niche situations, or only if someone already had access to your admin profile. Most people are using Jellyfin to share their media with themselves and their tech-illiterate friends in family. In that use case, the only people who even know my server URL are people I have shared that info with privately. Nobody is trying to hack my admin account.

    Now, I am no infosec expert. Maybe there are folks that are trying to run larger operations, and for those people I can understand why these security issues may become concerning if you don’t have a tight handle on the circle of people that have access to your server. That said, it’s also a bit silly to expect a free, open source solution to meet your needs in that scenario, anyway. If you know and understand the issues that well, then maybe go join the dev team and patch the holes. That is the beauty of open source, anyone can jump in and fix it.