sandboxing native apps just gives you security. with wasm you also get a single portable binary that can run on x86 windows, arm64 linux and in your browser with zero modification. you dont need to write platform specific code or use third party frameworks.

i use revolut in the eu and disposable cards work. its legal because kyc is only between you and your bank (revolut is a bank operating out of latvia), they are not required or allowed to give your personal info to anyone other than payment processors and police.

with nukes you can regulate the inputs because its physically impossible to build one without uranium or some other fissile material. they also give off radiation making it easier to detect. its hard to make them in secret when you need mines, big enrichment facilities and years of research with hundreds of engineers where just one of them can leak the whole thing.

training llms only takes compute and memory. two things that are basically everywhere. even if you somehow stopped making new gpus today theres still millions of them out there and its possible to start a secret production line. you can maybe try some controls at the tooling and chemical level but look what happened with asml and huawei.

the only thing you can really do is find and stop large data centers that are built out in public. nothing outside of political pressure works against secret operations in a fortified bunker or any form of distributed training. if a "rogue state" like north korea decides to make skynet they will eventually get it as long as their engineers know what there doing.

and the best way to fight bad X {ai, tech, religion, politics} has always been good X, not no X. in this case thats open source models, coming out of china or europe or anywhere else. thats the real answer.

what about going in the other direction? apps instead of sites. wasm for everything, shared immutable libraries, strict capability based security. client side rendering where you can choose between html+css, new binary formats or doing everything from code. easy server overrides so you can redirect all requests from bigtech.com to service.mydomain.net without the app ever knowing. encourage federation and sharing instead of isolation (but thats more of a culture problem new tech cant really solve). put the user back in control.

This seems like the natural direction for me.

i dont think its going to automatically prevent others. super claude might understand why diversity is important. if were talking sci fi scenarios the most likely one is probably overwatch (multiple independent ais with gray ethics and complicated relationships) more than skynet.

all these projects and im thinking about making the opposite, alternate feeds for bluesky designed to make it as addictive as legacy social media. imo thats the only way we can get everyone to switch.

> theres nothing wrong with doing what feels good.

except that, according to your own experience, it eventually leads to you becoming unable to engage with anything that isn't an instant dopamine hit whose entire arc occurs in a few minutes. you just used writing a 3 paragraph comment as an example of an activity that required long term focus.

and to be clear, i have a lot of the same problems, so i'm not trying to come off overly judgmental here. but i view it as a personal problem that I struggle to finish a book these days, or to invest sustained attention in a challenging side project or even, at times, a fucking video game. (i've caught myself scrolling youtube shorts in my chair at my pc, procrastinating playing a video game of all things).

what you describe (and again, what I also experience, maybe to a slightly lesser extent) doesn't seem conducive to a happy and fulfilling life - or at least it seems fair to guess that a life without the dopamine addiction you're diagnosis could be happier and more fulfilling.

whats the security problem here? all mutations go through the server authority and clients can only load data they have access to. the only thing i see is users being able to read cached versions of private content that was accidentally set to public then private again, and if that happens to you something is wrong with your access controls. and its also not a big deal for most organizations.

User permission can often be very dynamic. Sync engines (local first ones even more so) give them access to a much larger set if that data in a client side database.

This also makes them much more vulnerable to a data leak/breach if their device gets compromised or stolen as the data is all on their device.

The client having access to only what it needs in terms of data and making that as ephemeral as possible is a big part of defence in depth.

we still got newer companies out of china like moore threads working on gaming gpus, they had to pause new production because of the whole ai shortage but it looks like they might restart. is it usable for any serious gaming right now? no. but its already fighting the nvidia/amd monopoly together with intel.

as long as there is a market the producers will come, even in a super capital intensive industry like this. and it looks like nvidia is partially going back on the whole data center push with rtx spark. its just one high end product but it shows they know a lot of people want local gaming and local inference.

worldwide means israel russia and china so far. all countries that dont exactly like internet freedom and have a long history of spying and censorship. this might be a side effect of some government policy against p2p networks designed to make it harder to bypass censoring isps.