bob1029

36 ms·

571.
by bob1029 7mo ago
> My current expectation is that the Cowork/Codex set of "professional agents" for non-technical users will be one of the most important and fastest growing product categories of all time, so far. I agree this is going to
572.
by bob1029 7mo ago
I'm having a hard time figuring out if I could use this as a replacement for something like AWS WorkMail or E365. The "Agentic" inbox looks really nice, but is this intended for humans to use? I am really confused due to the
573.
by bob1029 7mo ago
The LLMs seem to struggle at anything that isn't relatively well anchored in whatever space. HTML documents have a lot of foundation to them in the training data, so they seem to perform well by comparison to other things. I just spent
574.
by bob1029 7mo ago
I think this is more of a case of the product getting worse incidentally. Contrast with leaders who are actually making things worse on purpose . Apparently, for no other reason than to be ugly and mean about it. I've been on this ear
575.
by bob1029 7mo ago
https://docs.oracle.com/cd/B16276_01/doc/win.102/b14305/arch...
576.
by bob1029 7mo ago
> are you suggesting that the API requests are signed with a private key stored in an HSM, and the JWT certifies the public key? Is that common? Very. The thing that certifies the public key is called a JWK. https://datatracke
577.
by bob1029 7mo ago
The neat thing about JWT is that there are no secrets to scan for. Your secret material ideally lives inside an HSM and never leaves. Scanning for these private keys is a waste of energy if they were generated inside the secure context.
578.
Pseudo-Chinese(en.wikipedia.org)
5 points by bob1029 7mo ago|0 comments
579.
by bob1029 7mo ago
Crazy how it's always a data problem in the end.
580.
by bob1029 7mo ago
The thing that kept screwing up my exercise regimen was external factors like weather, overcrowding, etc. The exercise itself is already hard enough. Fighting a crowd or a blizzard makes it even more difficult. I found that an indoor erg (r
581.
by bob1029 7mo ago
You can do this everywhere. Not just libraries. I take great pleasure in using the old 2022 LTS builds of Unity. The stability of these products is incredible compared to the latest versions. I simply have to ignore console errors in unity
582.
by bob1029 7mo ago
I don't understand the need for this level of engineering. It appears we are going for an opaque bearer token here. The checksum is pointless because an entire 512 bit token still fits in an x86 cache line. Comparing the whole sequence
583.
by bob1029 7mo ago
I am still using the chat completion APIs exclusively. I tried the agent APIs and they're way too opinionated for me. I can see 100% of the tokens I am paying for with my current setup.
584.
by bob1029 7mo ago
JSON is extremely fast these days. Gzipped JSON perhaps even more so. I find that JSON blobs up to about 1 megabyte are very reasonable in most scenarios. You are looking at maybe a millisecond of latency overhead in exchange for much dense
585.
by bob1029 7mo ago
> Nowadays many people are pushing AI-assisted code, some of them in a responsible way, some of them not. So... what do we do? You hold them accountable. Once upon a time we used to fire people from their jobs for doing things poorly. Pe
586.
by bob1029 7mo ago
It's amazing how often highly-polished web infrastructure gets put into the trash in pursuit of narrow objectives like avoiding a full page load. Very few applications actually benefit from being a single page. You tend to lose a lot m
587.
by bob1029 7mo ago
The ability to endure some degree of suffering seems essential for building high quality products. Getting in front of the customer as often as possible and proving things end to end is very painful. But it provides the most feedback and ge
588.
by bob1029 7mo ago
This seems like a good time to advertise the post/redirect/get pattern. https://en.wikipedia.org/wiki/Post/Redirect/Get Not strictly about hijacking back navigation but it can make experience less b
589.
by bob1029 7mo ago
The user is always a customer of the product in my mind. I don't use the term to mean a purely financial relationship.
590.
by bob1029 7mo ago
I feel like we already have enough abstractions in this space. Having any constraints at all in your tools is actually a good thing. PRs on top of ordinary git was a good step. This seems like one too many.
591.
by bob1029 7mo ago
I don't understand the urgency around quantifying every aspect of the software process. Surely, we are in agreement that money in must at least equal money out if the company is to be viable? This is a simple quickbooks report, is it n
592.
by bob1029 7mo ago
I've got a dual path system to keep costs low and avoid TOS violations. For general queries and investigation I will use whatever public/free model is available without being logged in. Not having a bunch of prior state stacked up
593.
by bob1029 7mo ago
I'm with you on the ethical part, but everything is a spectrum. All the AI leadership are some shade of evil. There's no way the product would be effective if they weren't. I don't like that Sam Altman is a lunatic, but
594.
by bob1029 7mo ago
This is mostly about thread communication. With SQLite you can guarantee no context switching. Postgres running on the same box gets you close but not all the way. It's still in a different process.
595.
by bob1029 7mo ago
There was a time when I thought he might be right. That time has come and gone. I fear that Gary may have to find a different shtick this year.
596.
by bob1029 7mo ago
It's probably the most ideal metric but it's impossible to find in meaningful timeframes.
597.
by bob1029 7mo ago
We've already got a really extreme version of this. https://en.wikipedia.org/wiki/GNSS_reflectometry
598.
by bob1029 7mo ago
I think a proper OpenAI vs Anthropic flame war might actually do this community some good. Let's just have it out. Avoiding violation of the x vs y technology rule seems to have resulted in a lot of pent up energy. I don't see the
599.
by bob1029 7mo ago
I strongly disagree with the part about IAM roles for EC2 > a useful improvement (especially given the urgency after the Capital One breach) but in my view just a mitigation of one particular exploit path rather than addressing the funda
600.
by bob1029 7mo ago
I've started keeping important signing keys in cloud HSM products. Getting AWS KMS to sign a payload is actually very straightforward once you've got your environment variables & permissions set up properly.

More ›