_pdp_

17 ms·

301.
by _pdp_ 7mo ago
I am not saying this is the reason for this compromise but the sudden explosion of coding assistant like claude code, and tools like openclaw is teaching entire crop of developers (and users) that it is ok to have sensitive credentials .env
302.
by _pdp_ 7mo ago
LLMs are not very good at generating ideas - unless you ask them to go crazy - then they can generate interesting ideas that quickly become repetitive. But the initial set is actually good in my own experience. As for writing, we need to ke
303.
by _pdp_ 7mo ago
If this site does not run on top of a google sheet then don't believe it.
304.
by _pdp_ 7mo ago
So? This feature is available to everyone and you have zero idea how many people actually use it. If I go to one of your GPL projects and I ask a simple question to find out what this project is about, you will be perfectly "ok" t
305.
by _pdp_ 7mo ago
Exactly. This affects anyone using VS Code or Copilot with proprietary data, including all the users automating workflows through the Copilot SDK and the like. A perfect storm. Did anyone from GitHub's legal team actually authorise thi
306.
by _pdp_ 7mo ago
So? You guarantee that this setting is durable and will never revert? Or you guarantee that no client-side bug on that page will not override the setting with null value when you click save on something else? Please.
307.
by _pdp_ 7mo ago
Copilot, or "chat with Copilot" is a button that is available on every page right next to the search bar. I don't have to be a Copilot user to click on it. This change is malicious, and it doesn't only affect Copilot use
308.
by _pdp_ 7mo ago
I have never seen any app reset/loose setting before.
309.
by _pdp_ 7mo ago
Rather than defending this absurd decision, GitHub could instantly win back trust by admitting they f*** up and reversing it entirely. If they want to incentivise people to contribute their sources and copilot sessions, they could easily ma
310.
by _pdp_ 7mo ago
So you will train on data collected from free users working on GPL and copyrighted projects?
311.
by _pdp_ 7mo ago
So you handover access to stripe to your AI agent? Is this how this works?
312.
by _pdp_ 7mo ago
We do this already but I bet this is not how people imagine it to be. There is still a review process to accept contributions.
313.
by _pdp_ 7mo ago
Can someone enlighten me how exactly an AI agent will signup for a service like Stripe without going through the standard KYC process when opening an account? Am I misunderstanding what this does? Perhaps. I am asking the lazy web.
314.
by _pdp_ 7mo ago
So this is a wrapper on top of a wrapper on top of Claude Code (which is a wrapper) on top of the API. Considering that Open Claw requires 2GB of RAM and Claude Code is by no means a "lightweight" CLI either, I would argue that th
315.
by _pdp_ 7mo ago
As we begin to discover, there isn't a one-size-fits-all solution to the problem. The memory architecture you would use for a coding assistant is sort of different from the memory architecture you might use for a research assistant, wh
316.
by _pdp_ 7mo ago
Microsoft doing dumb things once again. Who in their right mind will opt into sharing their code for training? Absolutely nobody. This is just a dark pattern. Btw, even if disabled, I have zero confidence they are not already training on ou
317.
by _pdp_ 7mo ago
Open source will be bigger than ever, but not necessarily for the right reasons. IMHO, as coding agents mature, we will see a surge in open-source projects. Most will remain obscure due to poor discoverability and growing competition for us
318.
by _pdp_ 7mo ago
From a security standpoint, I'm glad that people are starting to pay attention to basic security practices. That said, while I'm hardly a fan of MCP (judge for yourself by reviewing my previous comments on the matter), at least it
319.
by _pdp_ 7mo ago
IMHO there are not that many and this is a good thing. You can build them.
320.
by _pdp_ 7mo ago
I mean this is basically the foundation of any cyberpunk novel. You don't need to read that far ... just look at the works of Gibson, Neal Stephenson, Philip K. Dick and Richard Morgan. From Neuromancer and Snow Crash to Altered Carbon
321.
by _pdp_ 7mo ago
Take some working code. Ask an LLM to fix bugs. Measure performance and test coverage. Feed the results back into the LLM. Repeat. This has been the standard approach for more complex LLM deployments for a while now in our shop. Using diffe
322.
by _pdp_ 7mo ago
Our company started migrating our tech stack from USA to EU. We are about 90% there with a few small dependencies that could be resolved but we have not yet tackled.
323.
by _pdp_ 7mo ago
https://news.ycombinator.com/item?id=47315878
324.
by _pdp_ 7mo ago
> AI agents already read AGENTS.md (or CLAUDE.md, .cursorrules, etc.) as project instructions. This kernel uses that mechanism to teach the agent how to remember. Dude, this is just prompts. It is as useful as asking claude code to write
325.
by _pdp_ 7mo ago
It depends who you ask. You cannot say that breaking the social contract (the fabric of society, if you will) is generally a good thing, although I am sure some will find opportunities for growth. After all, the phoenix must burn to emerge,
326.
by _pdp_ 7mo ago
I forgot to mention why I brought up the idea of who is making the contribution rather than how (i.e., through an LLM). Right now, the biggest issue open-source maintainers are facing is an ever-increasing supply of PRs. Before coding assis
327.
by _pdp_ 7mo ago
AI ultimately breaks the social contract. Sure, people are not perfect, but there are established common values that we don't need to convey in a prompt. With AI, despite its usefulness, you are never sure if it understands these value
328.
by _pdp_ 7mo ago
You are correct. One minor note. The skill issue isn't about failing to prompt it correctly, but rather failing to understand what it actually does. There's an entire crop of professionals who believe we can Harry Potter our way o
329.
by _pdp_ 7mo ago
There is a lot of positive comments in this thread so you are doing something right. You asked for feedback though. There are chat apps that basically incorporate all the features of this editor so I am not really sure who is this for. If t
330.
by _pdp_ 7mo ago
The openclaw security model is the equivalent of running as root - i.e. full access. If that is insecure the inverse of it is running without any access as default and adding the things that you need. This is pretty much standard security 1

More ›