antihero

5 ms·

31.
by antihero 3mo ago
But that's the thing, without the decades of work, it wouldn't BE trivial. Everyone is standing on the shoulders of those which came before. If LLMs allow us to combine the incredible decades of effort and knowledge and experience
32.
by antihero 3mo ago
They aren’t purely for that, they also contribute to how an application feels to use in a creative manner.
33.
by antihero 4mo ago
Careful with that dangerous knowledge, you’ll end up in a list.
34.
by antihero 4mo ago
I asked it what the cheapest train fare would be for my partner to get somewhere and it hallucinated the two together railcard rules to the point it would have got us a fine. That said, British train fares are arguably more convoluted than
35.
by antihero 4mo ago
Ah, thanks for your write up - was just reading it when I saw the comment. This has royally fucked a lot of people.
36.
by antihero 4mo ago
Doesn't Postgres' UUID type just do this for you anyway? Why would you store it as as str column and not the inbuilt type for this? https://www.postgresql.org/docs/current/datatype-uuid.html If you are u
37.
by antihero 4mo ago
Nope, the public repos are what the on-machine payload creates. Sorry, I worded that wrong, I meant it exfiltrates to . The main attack is using compromised repo keys to: * Create malicious actions to JSON dump and exfiltrate all GitHub or
38.
by antihero 4mo ago
We're trying to figure this out, we've nailed it to the developer machine but not sure how that machine got infected. Possibly through GHA.
39.
by antihero 4mo ago
Attack is called "Hades - The End for the Damned", it exfiltrates secrets including ALL ORG GITHUB ACTIONS SECRETS via creating compromised actions, through GitHub public repos with encrypted payloads.
40.
Supply chain attack alert: .github/setup.js
27 points by antihero 4mo ago|14 comments
41.
by antihero 5mo ago
Nah in competitive industries you need to build features and out compete people and getting AI to do that whilst architecting things well due to experience and having time to think more about the important stuff but have a lot of the more b
42.
by antihero 5mo ago
Our company started monitoring our Claude usage so I've started coding personal stuff manually again and it's...really fun!
43.
by antihero 5mo ago
Yeah, this is pretty good devex from the hackers.
44.
by antihero 5mo ago
I would prefer my builds to break than the ecosystem to be compromised. That said, once unpublished the version should be permanently unavailable to prevent publishing over known good versions.
45.
by antihero 6mo ago
Am I going to have to make it rewrite all the stuff 4.6 did?
46.
by antihero 6mo ago
It's free and simple and handles HTTPS termination and can be set up easily using terraform/pulumi. Interestingly, in the early hours of this morning I switched from Cloudflare Tunnels to a rathole/traefik based solution (wel
47.
by antihero 6mo ago
I actually really like not having to worry if some licensing deal means my access to music I love gets shut off.
48.
by antihero 6mo ago
Can tailscale funnel do custom domains yet? Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).
49.
by antihero 6mo ago
It is nice to download an app and then just point it at a public URL as opposed to having to rely on the device being in the same tailnet.
50.
by antihero 6mo ago
What purpose would this serve in any way? Could it be that their data source is tied to satellite data that is now being blacked out?
51.
by antihero 6mo ago
Business idea for Anthropic: What if they provided (likely costly) audits, without providing access to the model?
52.
by antihero 7mo ago
Yep, I was gastowning some draft PRs to get a prototype built quickly. The polecat FE PR managed to request a review from @claude (normal ok), and then given that in isolation the PR was fine due to having hardcoded draft schemas (though it
53.
by antihero 7mo ago
npm is claiming this doesn’t exist
54.
by antihero 7mo ago
And what stops it making total garbage that wrecks your codebase?
55.
by antihero 7mo ago
Well that's the thing, AI can mean anyone with an idea can build it, but only the people that own stuff will be able to leverage that to own more stuff .
56.
by antihero 7mo ago
This looks like awesome awesome fun! Will let you know how it runs. What a wonderful idea <3
57.
by antihero 7mo ago
If OP feels "humiliated" reading a silly item from a menu their dominatrix must have the easiest job in the fucking world.
58.
by antihero 7mo ago
You just set up CI/CD on GitHub and have it dump an image into ghcr it’s trivial. Claude excells at seeing up workflows. I don't know why anyone bothers with Dockerhub at all really.
59.
by antihero 7mo ago
Ah cool, that said: If your tool is primarily for Claude Desktop (or mobile if hosted), that surely needs the MCP to actually do anything right?
60.
by antihero 7mo ago
How is it at running something like microk8s? Also do you have to build your own binaries for anything not in the distro?

More ›