A bit of an aside, but after someone introduced me to the notion of Reversible Decisions, it quickly became apparent to me that the solution to the bikeshed problem is to throw money at it before the roosters can start preening about which color the shed should be.

Decisions that are reversible should just go with the instinctive answer of whoever volunteers to work on it.

I've been in many meeting rooms where, because of the number and caliber of people in the room, we've blown $5000 worth of combined salary arguing about basically nothing. I've been in a few where that number was well over $10k.

If you're going to assign a relatively medium talent engineer to solve a problem, it's cheaper to let them solve it twice, maybe even three times, than it is to try to figure out what the right solution is before touching a keyboard. It helps them grow to give them that autonomy, and more importantly training your team out of reflexively reaching for optimization for every single feature saves gobs of money over time.

The interface for a piece of code matters to everyone. The internal implementation details mostly matter to the bus number on that code. If they're happy with it, that matters a lot. That can be overridden by the consequences of that design, but I've seen a couple cases where the bus number for a module wanted a solution with fewer consequences but the group wisdom wanted something flashier but also more brittle.

For those unaware, PHK created (amongst other things) the MD5crypt password hashing algorithm ($1$…). It came before bcrypt (1999), scrypt (2009), SHA2crypt (2016), etc, and was committed in 1994:

* https://svnweb.freebsd.org/base/head/lib/libcrypt/crypt.c?re...

* https://github.com/freebsd/freebsd-src/commit/3b2b7f71deba2a...

* https://phk.freebsd.dk/sagas/md5crypt/

* https://en.wikipedia.org/wiki/Poul-Henning_Kamp

I don't think age restriction will impact FOSS in the long term. If there are some regulations that threaten FOSS now, they are going to be adopted in the long term.

Regulations for age restriction are understandable. A lot of modern technology is harming kids (and I don't mean dirty videos, social media seems to be much more harmful).

A sensible regulator would leave some responsibility to the parents, but require restrictions for consumer devices (smartphones, laptops). Maybe even enable age restrictions by default, block replacing the OS or the firmware, and only allow it once the age was confirmed.

I don't see a point of including all kind of OS or software into this regulation. Just the ones that are preinstalled on consumer devices, and commercially distributed to consumers. Once the age of the user was confirmed, the devices should be able to become as open as we know them now.

First read of this pissed me off, but subsequent reads gave a much different opinion.

Do yourself a favor and read this, a few times, and take a moment to actually try and see what the author's getting at.

"LLM-assisted code review won't be a huge disruptor" is quite the prediction. Because it already is in a very big way. The take on LLMs seems incredibly out of date and out of touch with reality. (Which of course, has moved/advanced very fast the past months/year)

I think the author is missing a layer of abstraction.

yeah - once regulators come into play - the private ecosystems take over. discord is already a precursor to this.

the era of mass public social networks will come to the end. next it will be just private networks of individuals. likely the won't interact.

how the dynamics play out - I don't know - but if you study history - you will know what behaviors will happen.

> my personal guess is that the opportunities for anonymity on the Internet will shrink until mothers no longer are forced to have “the talk” when their daughters get their first mobile phone. As the parent of a daughter, I am totally on board with that.

depends on the age but.. they've probably discovered all kinds of shit already or heard about it from others

I feel like “tech bro” is the scapegoat for all bad things in tech these days. It’s fairly dismissive of the ongoing debate and advancement of technology overall IMO

> the weights of the model—which you have to sell many million times over before you turn a profit—easily fits on contemporary pocket-sized storage devices.

Which model is this author talking about? Which pocket-sized devices? Where can I get them? No one is using Gemma 4 to find cybersecurity issues.

Edit: there are a lot of sentences that I can't distinguish from sarcasm in this article. I guess I read it too seriously.

> — Day 1-2. Tried $tool out. Oh boy! We have some work to do.

> — Day 3-5. OK, there were a couple of solid bugs there, and a fair number of what were technically bugs, but not actually all that bad.

> — Week 2. I guess that was it?

There are a bunch of tools in the developer toolbox that some people never use, and the opposition use religiously. We are especially bad in this industry at turning things into a boolean where they should be a dial or a continuum. Something about that intro to Logic class either rots our brains or works as a filter to keep most of the philosophers out.

In sports there are drills one does a couple times a month instead of every day. You're trying to harden pathways in the brain to make certain reactions be more automatic, to correct subtle errors and suboptimal answers to problems. You don't do them all the time because they're expensive in some way, like time or danger.

I think this is an area where we miss a lot. I don't do TDD all the time. Maybe a week every couple of months. And it's a split between very hard tasks and very simple ones where I practice it. It's easier to work on first principles on a simple problem, but sometimes when you're stuck on a very difficult one, you have to go back to first principles anyway.

"Difficult" can be further broken down into several categories. 1) I don't know how to solve this, 2) the problem is straightforward but arduous and I don't know if I have the stamina for it, 3) I thought I solved it but it's not working.

TDD is a good way to get yourself into bottom up thinking and 'work the problem' by testing your assumptions one at a time. At the very least you have something to show for your work at the next standup even if the answer still eludes.

Similarly, a linter can be good while you're building up muscle memory for writing code the way the current team thinks it should be written. However, it can be a nightmare when you're trying to do exploratory development to fix a bug. I've landed PRs on two different FOSS projects to run the linter after the unit tests for this very reason. I don't fucking care if the code is Clean right now I only care if I've fixed the NPE that is crashing production. The PR is a problem for an hour from now. I need to make it work and then I can make it right.

I had to stop reading halfway through to respond.

> In comparison, tech sisters advocating for an absolute right to privacy seem to be a very rare, and maybe mythical, species.

Ever heard of Meredith Whittaker?

> We could have designed our protocols to be minimally compatible with “a nation of laws,” but the tech bros insisted that compromise was treason, and, as a result, we will lose more privacy than necessary.

This has to be a joke. There's private, and there's not private. There is nothing in between. This is not about tech bros. This is about guiding principles, about personal liberty, and about freedom from tyranny.

> It may not quite be a law of nature, but my personal guess is that the opportunities for anonymity on the Internet will shrink until mothers no longer are forced to have “the talk” when their daughters get their first mobile phone.

In addition to "the talk" guess what else they won't be forced (or allowed) to talk about? Political dissent.

This chunk of the article is both sexist and defeatist. Now to read the rest.

The whole age verification thing is being pushed by one "techbro", because he wants others to deal with cleaning up his mess.

This is a very strange read. If that was posted on a random blog, I would have dismissed it. I didn’t know that that cell (anti tech bro, anti big tech, pro age verification laws) in the alignment chart is populated by actual people. And by intelligent people even.

Also the fact they call it “age verification” when they clearly build an identity verification and we just accept their language is crazy.

I'm surprised to see a publication about ACM join in the blabbing about LLMs instead of show and tell.

Talking isn't doing, just like word generation isn't an outcome.

It’s interesting to claim that the ‘tech bros’ oppose hardware attenuation and age verification when this will massively benefit them; everyone will be forced to use their operating system and the government will have exercised its power to protect Microsoft’s god-given right to make money, Peter Thiel’s age verification startup’s ability to collect people’s data and their ability to trace the identity of any critics through identity-based age verification.

That’s why large tech companies are lobbying in favour of this!

> When Edward Snowden revealed that Somebody Important had been taking an interest after all, the tech bros, who had grown up free of adult supervision, felt betrayed and started a campaign to encrypt everything and anything so that prying eyes could never again look them in the cards.

TIL: Phil Zimmermann was a "tech bro" and had a time machine.

This whole thing can be reduced to "think of the children", see the literal example around paragraph ~30. I'm not sure I've ever seen anyone try so hard to equate being pro-privacy with being pro-crime.

He really seems to think he made some deep insight on the "bubble" that he seems so confident about.

> So, it is not obvious to me who will be training new iterations of these models once the current bubble explodes, in particular if the returns are diminishing the way I have experienced.

It looks like he has no clue on how market equilibriums work. He really seems to think LLM's will just like.. stop existing.

So in their world, people would suddenly realise that AI is actually not that economic and we can't have Opus 4.8 quality models just with updated knowledge cutoff perpetually. So in his future, things won't just stall, they will literally go back.

He's really putting his emotional weight on this particular kind of future.

Either that or he's making nebulous emotional claims - its his blog so he can do it.

"We could have designed our protocols to be minimally compatible with “a nation of laws,” but the tech bros insisted that compromise was treason, and, as a result, we will lose more privacy than necessary"

Unfortunately, no, you can't have a prophilactic that just makes you a little bit pregnant. We used to know this.

> And before you ask: Yes, I’m laying this one squarely down before (and partly on the toes of) the tech bros: We could have designed our protocols to be minimally compatible with “a nation of laws,” but the tech bros insisted that compromise was treason, and, as a result, we will lose more privacy than necessary.

Ah, the famous “maybe if I take a step back they’ll appreciate it and not push harder”. Or maybe it’s “if I give the leopard my face maybe it spares my body”.

I’ll let reality speak for itself: look no further than Stingrays and every bit of legal abuse they enabled, where innocent people are spied on in bulk with flimsy excuses. How well did it work out when the protocol was already maximally compatible with laws?

There’s no “minimally compatible”, you either have the privacy technically guaranteed or you don’t. If it’s technically allowed to breach it, it will soon be done as a matter of routine under the guise of “protecting”, “preventing”, and so on.

So in the end we didn’t lose anything, what we did was we gained a short period in which we could all taste that freedom. If we used your proposal nobody would have had even that to begin with.

This logic would have been easier to forgive if it came from youth and inexperience, from someone who never got to know about the endless abuse of surveillance that was inflicted indiscriminately on everyone.

> I promised myself I would never join their ranks.

A wasted opportunity, missed by at least 1 article :).

From TFA:

> In this last Bikeshed in acmqueue, I will ponder the far future of free and open source software (FOSS), hoping to upset so many readers that...

> During the past couple of decades, rampant neoliberalism and “globalism” allowed...

And I’m out. I guess congratulations to the author. Mission accomplished.

But I’m disappointed that the article took a turn towards partisan politics.

> Right now, there is a LOT of shrill propaganda from the tech bros, who call themselves “privacy advocates,” about how mandatory age checking is the gateway drug to comprehensive identity checks on the entire Internet, and ridiculing the valid civic concerns governments are trying to address as merely “think of the children” strawman arguments.

Oh, it’s not a slippery slope. It’s a single step: age verification IS identity verification, and it abolishes anonymous publishing on the internet, allowing on day one for violent retaliation against political speech.

If you think that authoritarian governments won’t be abusing this instantly, you are sorely ignorant of history.

There are some incredibly strange equivalences going on in here that make me think the person in question is indeed quite out of date.

The people pushing for the destruction of privacy and attested software integrity ARE the tech bros. I'm sure there are people here that will vehemently disagree with me, but we see the biggest tech companies pushing for age verification and we see founders and rich folk gleefully giving up their earlier pro-privacy stances in favor of supporting locking down identity. They're building up their moat in real time because not only does it let them kill that pesky FOSS, but also it means they can legally gather even more data from individuals in question.

It also goes hand-in-hand with the increasingly authoritarian bent a lot of those same people have taken and these resources will absolutely be used to crack down on minorities and things they don't like.

I think your head would have to be firmly planted deep underground to somehow not connect the two dots. As another poster here said, they're literally lobbying for these age verification laws because it benefits them.

> old men who had no idea what I was talking about but were 100 percent certain that they had the infallible answer

HN existed 20 years ago...? /s

edit: yes it did, lol

goodbye

yeah man its cool

Was it ever decided on what color the bike shed should be painted?

I guess tech has grown too large and fractured and maybe most working software engineers are too young to be familiar with phk and his points of view.

He's been a strong privacy and FOSS advocate for decades and has more credibility on both of these topics than nearly anyone on this board.

He also has an account and comments frequently. phkamp. I suggest reading some of his comments before making judgment.

So many kneejerk and nuance-less opinions. Absolutely hilarious that people are thinking the guy who wrote MD5crypt and BSD Jails is anti-privacy.

Also eye opening watching how many people are getting frothing-at-the-mouth mad seeing somebody with that pedigree coming to different conclusions than they do.

Just use fedora

I tried to give this a fair chance but it's really an incoherent rant.

There is nothing of substance here. You don't like AI, I get. But it still exists and pretending that no-one finds it useful is utterly foolish.

Edit: I overuse the word utterly. Nice to identify one of my tells.

Regarding the article title, is the editor trying to make a witty reference to Douglas Adams? Because that is not the phrasing that Adams used -- it was So Long, and Thanks for All the Fish (rather than "Goodbye") so unfortunately, any intended humour sort of falls flat for me. Sadly, the nerds at ACM should know better.

Didn't know ACM was anti-privacy. Glad I haven't paid dues in who knows how long if they're spending them to platform these noxious opinions.