_pdp_

14 ms·

241.
by _pdp_ 6mo ago
Well the project is promising something without providing any details how exactly this is achieved which to me is always a huge red flag. Digging deeper I can see it is effectively pg_vector plus mcp with two functions: "recall" a
242.
by _pdp_ 6mo ago
> What would you call this new paradigm? I call it Terms of Service Violation. :)
243.
by _pdp_ 6mo ago
Signup for all major providers (pro plan) and round-robin between all of them. This is the only way to protect against not having access to all of these heavily subsidised subscriptions. See what happened to Copilot.
244.
by _pdp_ 6mo ago
A very expensive model for API usage. Fine in codex I think.
245.
by _pdp_ 6mo ago
I hate it when there is absolutely zero information how this is supposed to work at http level. At least describe the contract. In most cases there is no need to install yet another sdk if the implementation is simple and obvious.
246.
by _pdp_ 6mo ago
Here is an interesting find. Let's say that you have two agents running concurrently: A & B. Agent A decides to push a message into the context of agent B. It does that and the message ends up somewhere in the list of the message r
247.
by _pdp_ 6mo ago
There are many use-cases outside of spam and slop. For example, take a picture of your garden. Ask chatgpt to give you ideas how to improve it and a step by visual guide. Anything that can be expressed visually is effectively target for thi
248.
by _pdp_ 6mo ago
I was reffering to Vercel. Other cloud environments have much better mechanisms for securing secrets.
249.
by _pdp_ 6mo ago
Sensitive does not mean it is not readable. It is just simply not exposed through the UI. It can be easily leaked if you return a bit too much props from the action functions or routes. The only way to defend against these types of issues i
250.
by _pdp_ 6mo ago
Once you have a session token, which is what you get after you complete the oauth dance, you can issue requests to the API. It is simple as that. The minted token had permission to access the victim's inbox, most likely, which the atta
251.
by _pdp_ 6mo ago
> OAuth trust relationship cascaded into a platform-wide exposure > The CEO publicly attributed the attacker's unusual velocity to AI > questions about detection-to-disclosure latency in platform breaches Typical! The main fai
252.
by _pdp_ 6mo ago
If I have to make a guess, it wasn't just any Google Workspace app but Gmail. The attacker gained broad access to the victim's inbox. They where then able to login into some internal systems using magic links or one-time codes. It
253.
by _pdp_ 6mo ago
Good luck on that opus plan.
254.
by _pdp_ 6mo ago
This is my point ... it is a change of perspective. They are best suited for cooperation for now.
255.
by _pdp_ 6mo ago
I posted this comment in another thread so reposting it here because it seems to be on topic. --- IMHO, the biggest problem with OpenClaw and other AI agents is that the use-cases are still being discovered. We have deployed several hundred
256.
by _pdp_ 6mo ago
There is value but it is hard to discover and extract outside of a few known areas - like coding, etc.
257.
by _pdp_ 6mo ago
> We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel. Blame it on AI ... trust me... it would have
258.
by _pdp_ 6mo ago
When you use AWS you pay for software. When you use Hetzner you pay for the hardware. Only one can go infinitely more expensive! With decades of well engineered open source software and some help from AI virtually anyone can run their own b
259.
by _pdp_ 6mo ago
> Is the newer generation going to accept that they have to please the AI? Well obviously the narrative that is pushed is to stop learning to code, don't become a doctor, stop perusing careers in law, creative writing, and art. Why?
260.
by _pdp_ 6mo ago
We are spending many multiples of that and currently shopping around. Microsoft could have handled this better. They decided not to.
261.
by _pdp_ 6mo ago
Longer version of the comment https://www.linkedin.com/pulse/imperceptible-upgrade-petko-d...
262.
by _pdp_ 6mo ago
IMHO there is a point where incremental model quality will hit diminishing returns. It is like comparing an 8K display to a 16K display because at normal viewing distance, the difference is imperceptible, but 16K comes at significant premiu
263.
by _pdp_ 6mo ago
I believe there was also a statement made around producing a working exploit too. I might be mistaken. That being said, it shouldn't be surprising. Exploits are software so...yah.
264.
by _pdp_ 6mo ago
Good! However, ... Sending and receiving is in my mind the easy part. The hardest part is to make this work with actual AI agents. This is the same problem as with sub-agent communication because you need to implement all kinds of additiona
265.
by _pdp_ 6mo ago
I posted this comment in another thread so reposting it here: --- IMHO, the biggest problem with OpenClaw and other AI agents is that the use-cases are still being discovered. We have deployed several hundred of these to customers and I thi
266.
by _pdp_ 6mo ago
Why though? What is the point of this? I thought they are building towards an AGI.
267.
by _pdp_ 6mo ago
All of the recent news read like something that could happen in a cyberpunk novel - AIs that defend vs AIs that do the attacks. I think were are already here. I wrote something about this, if you are interested: https://go.cbk.ai
268.
by _pdp_ 6mo ago
The real threat is not security but bad actors copying your code and calling it theirs. IMHO, open source will continue to exist and it will be successful but the existence of AI is deterrent for most. Lets be honest, in recent times the on
269.
by _pdp_ 6mo ago
If the post does not have any use-cases proving value then perhaps this is something yet to be validated, i.e. the burden on the users, not the creators.
270.
by _pdp_ 6mo ago
find ./ \( -name '*.c' -o -name '*.cpp' \) -exec agent.sh -p "can you spot any vulnerabilities in {}" \;

More ›