KurSix

4 ms·

61.
by KurSix 6mo ago
It’s hilarious how people are blaming Claude for a human being a total snake. Trademark squatting is the oldest legal trick in the book. AI just gave Andy the leverage to fake "official" status and look busy while the rest of the
62.
by KurSix 6mo ago
It’s funny how a standard power grab over cash and control is being packaged as some "Holy War against AI" Highlighting the Claude usage in the headline is a blatant move to bait the anti-AI crowd and farm sympathy points. The rea
63.
by KurSix 6mo ago
This is a fundamentally different beast. BI tools run a predictable set of joins, but an LLM agent is a monkey with a grenade - it can easily hallucinate a 7-way CROSS JOIN or a recursive CTE without a base case. Your read replica will hit
64.
by KurSix 6mo ago
I'm curious how your analyzers handle those tricky MIPS edge cases like split address loads via lui and addiu where you have interleaved instructions in between. If Ghidra fails to collapse those into a single reference, does your math
65.
by KurSix 6mo ago
Regarding the bots: since you're building a privacy-first product, you should look into a Proof-of-Work captcha (like Hashcash or mCaptcha). Just have the user's browser mine hashes for a couple of seconds before issuing the trial
66.
by KurSix 6mo ago
Mad respect. I tried extracting a clean .o file out of a statically linked ELF once, and it's an absolute nightmare. How are you handling switch tables and indirect jumps? Without dynamic analysis, it's sometimes physically imposs
67.
by KurSix 6mo ago
Thanks for this thread. I'm so tired of reading about yet another "AI wrapper for sending emails" raising a $5M seed round that I almost forgot what actual engineering looks like. The whole industry feels like a Gold Rush rig
68.
by KurSix 7mo ago
It's clear that there's growing recognition of the drawbacks of too much screen time
69.
by KurSix 7mo ago
It's also a reminder that there's often a gap between what technology companies market to the masses and what the people behind those technologies actually endorse for their families
70.
by KurSix 7mo ago
It's interesting that the Swedish government isn't completely rejecting digital tools but rather seeking a balanced approach, introducing them when students are ready for them
71.
by KurSix 7mo ago
People are just playing around with parallel agents because it looks cool on Twitter. In real prod, 90% of your time isn't spent typing lines of code, it's spent trying to figure out implicit business requirements and debugging un
72.
by KurSix 7mo ago
Spreading agents across git worktrees sounds awesome right up until the merge step. Sure, they're isolated on the filesystem, but when five parallel Claudes rewrite the exact same base class or interface for their own local needs, you&
73.
by KurSix 7mo ago
What you're describing (hidden key exchanges with Trust-On-First-Use) is exactly what Signal and WhatsApp already do - they just hid all the math under the hood and tied it to your phone number. A pure Web of Trust where normal people
74.
by KurSix 7mo ago
Hashing every X seconds is just a Merkle tree, the tech for that has been around forever. But cryptography only protects the container, not the semantic meaning inside it. If verifying a video requires spinning up this massive crypto infras
75.
by KurSix 7mo ago
Just go look on HuggingFace. It's packed with uncensored models from the Dolphin Llama 3 70B family that will happily write you a recipe for napalm while swearing like a sailor. Meta's guardrails lasted exactly one week before the
76.
by KurSix 7mo ago
That only proves the scammer isn't using an OpenAI or Anthropic API. Spinning up Llama 3 70B Uncensored on a rented instance and hooking it up to an unfiltered voice engine is literally a two-hour job. Local weights couldn't care
77.
by KurSix 7mo ago
Sure they could, but then you trim the video by 2 seconds, tweak the colors, or just send it over WhatsApp, which recompresses the file with its own encoder. The hash breaks instantly. Cryptography protects bits, but video is about visual m
78.
by KurSix 7mo ago
Picture this: your grandma calls you in a panic, and you tell her, "Drop me your public PGP key so I can verify the signature".. PGP is dead outside of niche geek circles exactly because key management is basically an unsolvable p
79.
by KurSix 7mo ago
Those incidents with curl and sqlite were caused by a mob of script kiddies dumping source code into ChatGPT and spamming bug bounties for quick cash. This tool is built by actual Google devs who are active on the kernel mailing list. They
80.
by KurSix 7mo ago
You don't even need an LLM for this stuff. GCC has the __cleanup__ attribute, and kernel static analyzers like Smatch have been catching missing unlocks for a decade now. People just ignore linter warnings when submitting patches, so t
81.
by KurSix 7mo ago
Written in Rust, tests a C kernel, using the Google Gemini API... classic 2026. I'd bet 90% of the actual useful work this agent does is just dumb pattern-matching for typical vulnerabilities (use-after-free, uninitialized vars) that t
82.
by KurSix 7mo ago
That's actually super smart. If you're just piggybacking on native debugger pauses and Mojo IPC instead of hardcoding custom locks into V8, the patchset is genuinely microscopic. I take back the meat grinder comment - with a diff
83.
by KurSix 7mo ago
I get the readability point, but maybe look into embedded DSLs like they do in Lisp or Elixir? You get your custom, readable syntax inside a macro, but it compiles down to native code so you still get to keep all the tooling and perks of th
84.
by KurSix 7mo ago
The funny thing is that RSS solved the "too many websites" problem 20 years ago
85.
by KurSix 7mo ago
I think the lesson is that redundancy can exist at different layers
86.
by KurSix 7mo ago
The contrast with modern software development is striking. Today we often rely on fast iteration and patching problems in production. Spacecraft software is the opposite
87.
by KurSix 7mo ago
The XPath idea sounds great in theory, but it falls apart in a second on the modern web. Most sites (React/Vue/Tailwind) generate classes like div.flex-col.xg-9a, and the DOM structure completely changes on every single deploy. Th
88.
by KurSix 7mo ago
Google is never going to upstream Chromium code that lets an external API arbitrarily freeze V8 and the render loop, purely based on the security model and stability requirements of a consumer browser. Your only real path forward is maintai
89.
by KurSix 7mo ago
Finally someone realized that CDP just doesn't cut it for agents and dug straight into the engine. Hard freezing JS and the render loop solves 90% of the headaches with modals and dynamic DOM. Architecturally, this is probably the best
90.
by KurSix 7mo ago
To answer your question: this should 100% just be tooling on top of an existing language rather than a custom syntax. By ditching the mainstream, you're not just losing parsers, you're throwing away profilers, debuggers, LSP suppo

More ›