Very curious to see where all this will lead. The next war will obviously be cyber, and if critical companies are using local llms with hidden capabilities...

(original in Finnish, translated with Clade)
I’ve now been following for a while how CVE bugs get fixed in the Linux kernel, now that AI is going through the code in bulk. My script goes weekly to fetch all published CVEs, when they were fixed, and when the bug was introduced. The first chart is slightly outdated data, but its point is only to show how many bugs have been found compared to the normal level.

Fixes are not published immediately; they are first allowed to trickle out to users quietly, so that hackers don’t have time to get in between. From going through these, it looks like on average half of the fixes are published within the first two months, and all of them within three months. Actually the fix is committed immediately, the cve stays hidden for a while.

What interests me here is at what point there are no more bugs, and none will appear. Of course I understand that the language models currently in use only find bugs according to their own skill level, so it’s possible that better models will find even more. Still, I don’t believe security holes in software are a law of nature, but that it’s possible to build a hole-free program. After all, the starting point is to first build the simplest possible program and add features to it. Is there some threshold in a program’s complexity beyond which security holes become inevitable? I don’t believe so.

The second picture requires a bit of explanation and also some understanding from the reader. It shows, over the last couple of weeks, the cumulative reported fixes per week by time of introduction. So when moving forward in time one week at a time, the appearance of new bugs should also move forward. It should look in the picture as if a snowplow were moving forward one week at a time. However, now it looks like the four weeks of data show that the latest bugs stop at August, i.e. no bug has been reported from September at all, and if the earlier estimates that half of the bugs are reported within two months hold, then the August + September bugs are already very small in number, and the curve shows that zero is being approached.

It's even clearer when I list the amount of cves that's been released to public in last for weeks: 600, 604, 30, 1. So is this the end? Next week zero? Exciting times.

Of course, one can raise questions such as whether, for example, the NSA has used US legislation to collect the juiciest holes for its own use. But on the other hand, that would only be a moment in history, because AI is still developing rapidly and open models are also capable of finding bugs, and will be even better in the future. Some other party, hopefully even the EU, will run the same check and patch the holes the NSA left. In fact, precisely because of this rapid AI development, it wouldn’t even be worthwhile for the NSA to leave those holes now, because it could only take a couple of months they could be discovered by next level AIs.

I’m writing this because the world is changing, and people don’t always notice change. In a couple of years someone may ask why security updates no longer come. Well, because the code was reviewed, the holes were plugged, and all new code goes through the same sieve before it is released. Remember, Anthropic and OpenAI use the same Linux for their own systems and it's in their best interests that also systems they use testing their new models are robust systems.

This may also have longer-term effects, because e.g. upgrades of Windows to newer versions are often justified by saying that old versions no longer get security updates, and this keeps the wheel turning. What if there is no need to upgrade because of security updates? How will that affect Windows’ position, when even the Win10 to Win11 transition has been sluggish?

So i got bored and asked GPT to plug Intern-Decision-2B into OpenCE.

It gets the game state as text, player/NPC positions, health, ammo, etc and some raycast to help it detect obstacles and it then predicts actions that are translated into game input.

I also added an in-game text box so I can prompt it while playing. It has a short history of its recent actions and an aim-assist toggle.
I tried multiple iterations, getting a few decisions per second depending on the setup, running locally on my RTX 4060 laptop.

I love how the whole experience somehow works while also being completely broken.
I had a lot of fun messing around with it and trying some abstract instructions as you can see 😌

Sonnet 5.5 is reigning in Real SWE benchmark why is that?

According to Andrej Karpathy’s recent approximations:

80% have no access to AI, no interest in it, or actively spurn it.

20% casually only see free-tier derpy chatbots as a better Google search or writing aid.

Just 0.2% have seen agents complete complex projects with a prompt that used to take weeks or months.

And somehow, people who know the least about AI are the most certain about what it can’t do.

“It’s just autocomplete bro.”

“It can’t tell the truth.”

“Everything it makes is slop.”

Guess you tried ChatGPT in 2023 and apparently learned everything you’ll ever need to know.

We’ve all heard about the technological divide. My grandmother never touched a computer. Anything beyond calls and texts on her smartphone meant another call about how “the damn thing is broken again.”

But she got along just fine. Worked until retirement. Lived independently until hospice. She could ignore the computer revolution because it unfolded over decades. She was fine.

We don’t have decades.

Give it 5 years. With recursive self-improvement, even that may be generous.

How many of that 80% will still be congratulating themselves for being too wise and righteous to use AI?

Sure, someone starting in 2028 will have access to vastly more capable systems than we have today.

But access to the technology isn’t access to the opportunities it created.

Markets captured. Industries restructured. Economic advantages consolidated. None of that resets when you finally catch up.

And being an AI power user doesn’t guarantee you’re among the winners either.

„But AI will be easier to use by then!”

Yes. Obviously.

But nobody is promising the opportunities would still be there when you finally showed up.

We’re watching the foundations of a two-tier society being laid while most people haven’t even realized there’s a race.

My grandmother could afford to ignore a technological revolution that took place over 50 years

You’re betting your future on having the same luxury

She was right

Are you?

https://x.com/bluehorizon_ai/status/2109716362419446271 https://x.com/ErlingRoIe/status/2109778450101813301?s=20

A lot of people are saying it's the best AI video they've seen yet. And to be honest, I never really believed in the whole 'AI is going to take over Hollywood' thing, but damn, i'm not so sure anymore. Among other things, I'm mind-blown by how accurate the faces are, even with different lighting/angles/expressions. It's really insane how much AI-generated videos have improved in just 2-3 years.

More importantly. Do you guys agree with him? In my pro experience, I am at tier 3. Vibe coding as an ex-SWE. I don't use lots of API call or self-made agentic loops because it is insanely expensive, even for the Chinese ones. It takes lots of time to build and optimize agentic loops.

So much doom and gloom lately. Let’s take a break and imagine that if AI does indeed intend to get rid of us, what’s the nicest way it could let us go?

I’ll go first.

Personally, I hope our future AI overlords have the decency to let us live out our zombie apocalypse fantasies instead of just wiping us out in 0.003 seconds. Give us a few weeks of societal collapse. Let us raid abandoned grocery stores, build barricades, form questionable alliances, and dramatically betray each other over canned beans and toilet paper.

Sucks. Gemini 3.1 Pro was included in the Pro plan. Its successor isn‘t… 😡🤌