Skip Navigation

Stubsack: weekly thread for sneers not worth an entire post, week ending 9th November 2025

Want to wade into the sandy surf of the abyss? Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid: Welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.

Any awful.systems sub may be subsneered in this subthread, techtakes or no.

If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.

The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)

Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.

(Credit and/or blame to David Gerard for starting this.)

210 comments
  • NotAwfulTech and AwfulTech converged with some ffmpeg drama on twitter over the past few days starting here and still ongoing. This is about an AI generated security report by Google's "Big Sleep" (with no corresponding Google authored fix, AI or otherwise). Hackernews discussed it here. Looking at ffmpeg's security page there have been around 24 bigsleep reports fixed.

    ffmpeg pointed out a lot of stuff along the lines of:

    • They are volunteers
    • They have not enough money
    • Certain companies that do use ffmpeg and file security reports also have a lot of money
    • Certain ffmpeg developers are willing to enter consulting roles for companies in exchange for money
    • Their product has no warranty
    • Reviewing LLM generated security bugs royally sucks
    • They're really just in this for the video codecs moreso than treating every single Use-After-Free bug as a drop-everything emergency
    • Making the first 20 frames of certain Rebel Assault videos slightly more accurate is awesome
    • Think it could be more secure? Patches welcome.
    • They did fix the security report
    • They do take security reports seriously
    • You should not run ffmpeg "in production" if you don't know what you're doing.

    All very reasonable points but with the reactions to their tweets you'd think they had proposed killing puppies or something.

    A lot of people seem to forget this part of open source software licenses:

    BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW

    Or that venerable old C code will have memory safety issues for that matter.

    It's weird that people are freaking out about some UAFs in a C library. This should really be dealt with in enterprise environments via sandboxing / filesystem containers / aslr / control flow integrity / non-executable memory enforcement / only compiling the codecs you need... and oh gee a lot of those improvements could be upstreamed!

  • Some changes to adventofcode this year, will only have 12-days of puzzles, and no longer have global leaderboard according to the faq:

    Why did the number of days per event change?

    It takes a ton of my free time every year to run Advent of Code, and building the puzzles accounts for the majority of that time. After keeping a consistent schedule for ten years(!), I needed a change. The puzzles still start on December 1st so that the day numbers make sense (Day 1 = Dec 1), and puzzles come out every day (ending mid-December).

    Scaling it a bit down rather than completely burning out is nice i think.

    What happened to the global leaderboard?

    The global leaderboard was one of the largest sources of stress for me, for the infrastructure, and for many users. People took things too seriously, going way outside the spirit of the contest; some people even resorted to things like DDoS attacks. Many people incorrectly concluded that they were somehow worse programmers because their own times didn't compare. What started as a fun feature in 2015 became an ever-growing problem, and so, after ten years of Advent of Code, I removed the global leaderboard. (However, I've made it so you can share a read-only view of your private leaderboard. Please don't use this feature or data to create a "new" global leaderboard.)

    While trying to get a fast time on a private leaderboard, may I use AI / watch streamers / check the solution threads / ask a friend for help / etc?

    If you are a member of any private leaderboards, you should ask the people that run them what their expectations are of their members. If you don't agree with those expectations, you should find a new private leaderboard or start your own! Private leaderboards might have rules like maximum runtime, allowed programming language, what time you can first open the puzzle, what tools you can use, or whether you have to wear a silly hat while working.

    Probably the most positive change here, it's a bit of shame we can't have nice things, a no real way to police stuff like people using AI for leaderboard times. Still keeping the private one, for smaller groups of people, that can set expectations is unfortunately the only pragmatic thing to do.

    Should I use AI to solve Advent of Code puzzles?

    No. If you send a friend to the gym on your behalf, would you expect to get stronger? Advent of Code puzzles are designed to be interesting for humans to solve - no consideration is made for whether AI can or cannot solve a puzzle. If you want practice prompting an AI, there are almost certainly better exercises elsewhere designed with that in mind.

    It's nice to know the creator (Eric Wastl) has a good head on his shoulders.

  • More wiki drama: Jimbo tries to both sides the gaza genocide

    E: just for clarity. Jimbo is the canon nickname of founder Jimmy Wales.

    And just to describe a little more of what has happened, as far as I can tell: Wales is reportedly being interviewed about Wikipedia (probably due to the grookiepedia stuff). He was asked in a "high profile media interview" (his words, see first link) about the Gaza genocide article, and said that it "fails to meet our high standards and needs immediate attention". Part of that attention is that they've locked the article, and Jimbo has joined the talk page. His argument probably boils down to this comment he left:

    Let's start with this quote from WP:NPOV: "Avoid stating seriously contested assertions as facts. If different reliable sources make conflicting assertions about a matter, treat these assertions as opinions rather than facts, and do not present them as direct statements." Surely you aren't going to argue that the core assertion of the article is not seriously contested?

    The "core assertion" is contained in the lede:

    The Gaza genocide is the ongoing, intentional, and systematic destruction of the Palestinian people in the Gaza Strip carried out by Israel during the Gaza war.

    i.e. that there is a genocide happening at all.

    Gizmodo article, in case this comment sucks in some way and you wanted to read a different report.

  • fyi over the last couple of days firefox added perplexity as search engine, must have been as an update

  • More bias-laundering through AI, phrenology edition! https://www.economist.com/business/2025/11/06/should-facial-analysis-help-determine-whom-companies-hire

    I couldn't actually read the article because paywall, but here's a paper that the article is probably about: AI Personality Extraction from Faces: Labor Market Implications

    Saying the quiet part out loud:

    First, an individual’s genetic profile significantly influences both their facial features and personality. Certain variations in DNA correlate with specific facial features, such as nose shape, jawline, and overall facial symmetry, defined broadly as craniofacial characteristics

    Second, a person’s pre- and post-natal environment, especially hormone exposure, has been shown to affect both facial characteristics and personality

    To their credit the paper does say that this is a terrible idea, though I don't know how much benefit of the doubt to give them (I don't have time to take a closer look):

    This research is not intended, and should not viewed, as advocacy for the usage of Photo Big 5 or similar technologies in labor market screening.

210 comments