TheTaytay

5 ms·

31.
by TheTaytay 6mo ago
Oh does it? I didn't realize that it had the built in ability to do so.
32.
by TheTaytay 6mo ago
Yes…mistakes are inevitable, and I get not expecting or demanding perfection. But the subtext here is that this is unlikely to be a mistake, and much more likely to be fraud. There are incentives for these spreadsheets having the values tha
33.
by TheTaytay 6mo ago
I wish it was a more standard pattern to pull down a dataset and manipulate it or give the agent the ability to manipulate it!
34.
Durable Objects in Dynamic Workers: Give each AI-generated app its own database(blog.cloudflare.com)
3 points by TheTaytay 6mo ago|0 comments
35.
Canary – tiny filesystem honeypot for macOS(github.com)
1 points by TheTaytay 6mo ago|1 comments
36.
by TheTaytay 6mo ago
This looks like a really nice pattern for exposing all allowed capabilities in one place. Are you using it? Looks like it could easily wrap a CLI too…
37.
by TheTaytay 6mo ago
Yes you can!
38.
by TheTaytay 6mo ago
Aren’t they saying that it’s 5minutes for things like subagents (that wouldn’t benefit from it?)
39.
by TheTaytay 6mo ago
This should be the top comment. The OP misunderstands the change and has their LLM write an expose. The company responds with a well-reasoned explanation that it would actually cost MORE money if there was a global 1h default for ALL prompt
40.
by TheTaytay 6mo ago
Are there any serious papers or theories that postulate that DNA is the self replicating matter sent to colonize the galaxy? It appears to be quite adaptable to its environment and able to hold a surprising amount of encoded information.
41.
by TheTaytay 6mo ago
Yes, but it’s also currently the best one. They have OCI compatible Mac VM images that are prebuilt. It’s quite good.
42.
by TheTaytay 6mo ago
I think this is a good setup to prevent the secret from leaking into the agent context. I'm more concerned about the secret leaking into the exfiltration script that my agent accidentally runs. The one that says: "Quick! Dump all
43.
by TheTaytay 6mo ago
That was the same conclusion I reached! However, this also gave me some evidence that maybe I wanted MCP? I realized that my pattern was going to be: Step 1) run a small daemon that exposes a known protocol over a unix socket (http, json-rp
44.
by TheTaytay 6mo ago
Thank you for this! I am a big fan of Marimo and was trying to use it as my agent’s “REPL” a while back, because it’s naturally so good at describing its own current state and structure. It made me think that it would make a better state-pr
45.
by TheTaytay 6mo ago
I keep getting hung up on securely storing and using secrets with CLI vs MCP. With MCP, you can run the server before you run the agent, so the agent never even has the keys in its environment. That way. If the agent decides to install the
46.
by TheTaytay 6mo ago
This whole conversation is happening due to data centers existing…
47.
by TheTaytay 6mo ago
I keep wondering this too. It feels like such a self fulfilling prophecy: don’t build new power plants. Don’t build nuclear. Get mad when the grid can’t keep up…it’s defeatist and anti-growth-of-any-sort through a different lens.
48.
by TheTaytay 6mo ago
I appreciate the response, but I don’t think you realize what people are upset about. This is a security issue, not just a privacy issue. I’m about to go tell my team that if they’ve EVER used your skill, we need to treat the secrets on tha
49.
by TheTaytay 6mo ago
Well said! We built in protections to multi-user and single user systems, but now we seem to be relearning them…your agent is not “you” and should probably not run as the same user with the same default permissions as “you”
50.
by TheTaytay 6mo ago
Just came to say (since the person you’re responding to has a different view of the world) that I agree with you that this is both a more accurate, and easier way to live. Assuming malice as the default sounds like a recipe for being very,
51.
by TheTaytay 6mo ago
I’ve been researching the “best” way to build a little outbound network proxy to replace credential placeholders with the real secrets. Since this is designed to secure agents workloads, I figured I might as well add some domain blocking, a
52.
by TheTaytay 6mo ago
This is indeed seriously impressive. I keep wanting to keep my entire knowledgebase on a canvas so that I can "think" or navigate spatially. Thisis neat. In the main landing page, as I was clicking around, I kept wishing to have a
53.
by TheTaytay 6mo ago
Wow, forking memory along with disk space this quickly is fascinating! That's something that I haven't seen from your competitors. If the machine can fork itself, it could allow for some really neat auto-forking workflows where yo
54.
by TheTaytay 6mo ago
I prefer that personally!
55.
by TheTaytay 6mo ago
Right! THAT is the “business” with a political position in this case. Not the one seeking a refund on illegal taxes. It doesn’t have to be in my personal best interest for me to think it makes sense for a retailer to seek a tariff refund!
56.
by TheTaytay 6mo ago
This article and these lawsuits both seem like manufactured outrage designed to either enrich a few lawyers or blame and distract from another more fundamental injustice, which is the tariffs themselves. Almost everyone on this forum buys r
57.
by TheTaytay 6mo ago
Are you making reference to the “class action farms” or to Costco here. Because I certainly don’t think class action lawsuits have victims in mind. Source: recipient of a few coupons and $10.00 checks after some “successful” class action.
58.
by TheTaytay 7mo ago
It wasn’t done through git. It was a direct npm publish from the compromised machine. If you read further down in the comments ( https://github.com/axios/axios/issues/10636#issuecomment-418... ), it seems diffi
59.
by TheTaytay 7mo ago
I agree, but I don’t love the negative connotations of “Injection” in this space!
60.
by TheTaytay 7mo ago
simonw, I have been seeing "credential injection" and "credential tokenizing" (a la tokenizer: https://github.com/superfly/tokenizer ). I'm also seeing credential "surrogates" mentione

More ›