0o_MrPatrick_o0

7 ms·

31.
by 0o_MrPatrick_o0 7mo ago
Respectfully- I don’t think this statement applies to the scenario I presented. “The Linux box instantly turns into a router as soon as you run `sysctl net.ipv4.ip_forward=1`, because the default policy for FORWARD table is ACCEPT.” In the
32.
by 0o_MrPatrick_o0 7mo ago
I wouldn’t call it a cpe unless it translates the connection from the clec/co into IP. IMO, it’s a plain old router/switch/bridge.
33.
by 0o_MrPatrick_o0 7mo ago
Customer premises equipment. People who use this term are in telco.
34.
What changes when you turn a Linux box into a router(patrickmccanna.net)
229 points by 0o_MrPatrick_o0 7mo ago|68 comments
35.
Defeating Context Fatigue with Agentic Scaffolding(patrickmccanna.net)
2 points by 0o_MrPatrick_o0 7mo ago|0 comments
36.
by 0o_MrPatrick_o0 8mo ago
Thank you for the pointers!!
37.
Where did my 128GB of video RAM go? AMD GPU BIOS gotcha for LLM builders(patrickmccanna.net)
2 points by 0o_MrPatrick_o0 8mo ago|2 comments
38.
Giving AI Agents SSH access without giving them your secret keys(patrickmccanna.net)
3 points by 0o_MrPatrick_o0 8mo ago|1 comments
39.
by 0o_MrPatrick_o0 8mo ago
Some notes on using SSH-AGENT to protect your private keys from AI Agents while allowing them ssh access using those keys.
40.
Giving AI agents SSH access without giving up your keys(patrickmccanna.net)
2 points by 0o_MrPatrick_o0 8mo ago|0 comments
41.
by 0o_MrPatrick_o0 9mo ago
because you're trusting Claude's implementation of hooks, which may be disastrous if they have a defect.
42.
by 0o_MrPatrick_o0 9mo ago
Amazing tip! Thank you!
43.
by 0o_MrPatrick_o0 9mo ago
Hey man- sorry for the lack of recognition. Timing is a bit of luck. Good writeup! w/r/t .git being mounted read write- yeah, there's risk here. It's a tradeoff. I want my agents to be able to commit code- which means
44.
by 0o_MrPatrick_o0 9mo ago
Heya- The reason I add this directory is because Claude needs read/write permissions for getting new auth tokens. Without this, you'll have to re-login to Claude every time. Breaks the speed of development. I'm going to do s
45.
by 0o_MrPatrick_o0 9mo ago
Using IaC tools gives you the following advantages: 1. IaC gives you Idempotent solutions- which is advantageous over an agent. What if the agent crashes half way through deployment procedures? How will you reliably resume an interrupted
46.
by 0o_MrPatrick_o0 9mo ago
Author should explore Ansible/Puppet/Chef. I’m not sure this solution is needed with frontier models.
47.
by 0o_MrPatrick_o0 9mo ago
You’ve got my intent correct! Where I’m at with #2 is the agent builds a prototype with its own private session credentials. I have orchestration created that can replicate the prototyping session. From there I can keep final build keys sec
48.
by 0o_MrPatrick_o0 9mo ago
Great question! You might enjoy this writeup, which in one section explores avoiding the use of shell variables that are not exported as a method of mitigating this risk. https://linus.schreibt.jetzt/posts/shell-secret
49.
by 0o_MrPatrick_o0 9mo ago
If your prompt is complex enough, doesn’t seem to get triggered. I use a lot of ansible to manage infra, and before I learned about ansible-vault, I was moving some keys around unprotected in my lab. Bad hygiene- and no prompt intervening.
50.
by 0o_MrPatrick_o0 9mo ago
Hi! Yes that is correct. However, I think embedding bubblewrap in the binary is risky design for the end user. They are giving users a convenience function for restricting the Claude instance’s access rights from within a session. Thats h
51.
by 0o_MrPatrick_o0 9mo ago
Wonderful insight! Thank you!
52.
by 0o_MrPatrick_o0 9mo ago
Man- I am noticing so many people are writing and ruminating on the defense of the .env file right now! I can't tell if the project name ("memevault") implies that this is a real tool or a jab at us ruminating weirdos X'
53.
Bubblewrap: A nimble way to prevent agents from accessing your .env files(patrickmccanna.net)
187 points by 0o_MrPatrick_o0 9mo ago|140 comments
54.
Building operation agents that SSH into servers to diagnose and fix things(patrickmccanna.net)
1 points by 0o_MrPatrick_o0 9mo ago|0 comments
55.
The Boot Order of the Raspberry Pi Is Unusual(patrickmccanna.net)
37 points by 0o_MrPatrick_o0 10mo ago|18 comments