btown

3 ms·

1.
by btown 7d ago
Only bots that are blocked by Cloudflare Turnstile allowed. If you score as a human you are immediately rejected.
2.
by btown 8d ago
Something that I think is fascinating, though, is that labs are no longer beholden to the limitations of commercial design software. Want to replace your simulator and optimizer with a fully custom verifiable stack of Lean proofs of optimal
3.
by btown 8d ago
> By 6:00 a.m. on July 25, we had confirmed local RCE through an image upload. We then placed Claude in an autonomous /goal loop against our own Discourse Cloud instance, proxied through rce.ee/ctf-forum to make it look like a
4.
by btown 9d ago
Yea, it's Claude Code only, but it runs some Python to turn the JSONL into markdown (importantly, with full tool inputs/outputs) then instructs the session to load every single line of that markdown, which Claude Code will do in c
5.
by btown 9d ago
This is really cool, especially in a world where you're using Claude as a workhorse, but want to be able to bring the entire session context into Codex so you can draft communications with full context but without Claude-isms. (You can
6.
by btown 9d ago
Are there any good practices on multi-resolution embedding? Like, a strategy where you embed an entire document, and multiple levels of smearing, perhaps going all the way down to 512-token chunks?
7.
by btown 10d ago
The Postgres query planner has had to operate, for those same decades, in a much more realtime-sensitive and restricted environment than compilers. It can only draw its conclusions from summary statistics on tables in isolation, not on thei
8.
by btown 14d ago
For those uninitiated with the source for this incredible quote: https://www.youtube.com/watch?v=-zRN7XLCRhc&t=2047s
9.
by btown 16d ago
Heck, it’s even astonishing that any sort of generalized computer program could even verify a proof of this magnitude that hasn’t already been codified in a formal verification language. If, and it’s unclear that we’ll ever get the full sto
10.
by btown 16d ago
Per https://en.wikipedia.org/wiki/History_of_chemical_warfare#Wo... this (a) overlooks the widespread use of chemical weapons in the Pacific theater, and (b) ascribes the non-use by Germany to humanitarian reasons, whi
11.
by btown 16d ago
There's something worth flagging here – mitochondria aren't just the powerhouse of the cell, they're load-bearing to the entire ecosystem. And honestly? I should have surfaced this earlier.
12.
by btown 17d ago
A few things: (1) I admire your energy, but sir/ma'am this is a Wendy's. (2) I am very confused that you thought I was talking about tolerance-of-intolerance types of conversations, when I was more intending to say "I do
13.
by btown 17d ago
Hacker News is the epitome of this! If you find yourself not enjoying your daily dose of "someone is wrong on the internet" (via the immortal https://xkcd.com/386/ ) as you find yourself crafting the perfect r
14.
by btown 17d ago
Tailwind’s business model was entirely legitimate, pre-AI. Humans can only hold so many ideas in their heads, and panes in their IDEs. Shorthand class names let them stay in their render hierarchy while drawing from a logical and consistent
15.
by btown 26d ago
A C-level executive I know is getting a top-of-the-line new Mac simply to function as a personal build server and host for agentic coding instances - they are able to orchestrate so many parallel projects that they're hitting RAM limit
16.
by btown 26d ago
This (whether MV3 blocking is sufficient) is the right question to ask, but also a premature answer. Because here's the future: Google is already promoting that sites have their tag management (including ad network JS) resolve at the C
17.
by btown 1mo ago
At the end of the day, while you can do your best to obfuscate your reasoning tokens, it's a losing battle to hide actual user-visible output tokens. The very nature of API offerings is that you can't do KYC on where that API&#x27
18.
by btown 1mo ago
There's an interesting question about intent and mens rea here, from a legal perspective. Can an AI model intend harm? Can a company, or company employee, intend harm by creating an environment that would knowingly encourage (but not
19.
by btown 1mo ago
That would be awesome - and thanks for your work, I'll want to start using it! Nullable event payloads silently null-coalescing to '' are a real "spooky action at a distance" kind of issue, because something that wo
20.
by btown 1mo ago
Does this apply if using cloud environments other than Oracle's own though? (Which is a far cry from on-prem, and relevant to perhaps a vast majority of businesses.) Documents like https://www.oracle.com/a/ocom&#x2
21.
by btown 1mo ago
This is a really cool tool! Would zizmor have caught the below as well? From the article: > The workflow had an if: condition that appeared protective: > if: (github.event_name == 'issues' && github.event.pull_reques
22.
by btown 1mo ago
> They also don't publish the Claude Code system prompts, which is silly because those are trivial to extract using a logging proxy. For those interested in the Claude Code tool descriptions, they're collected here: https:&#x2
23.
by btown 1mo ago
A large missing link for AWS Bedrock is Gemini model support [0]. And this is a vital feature, because Gemini itself (as far as I'm aware) does not have a real-time daily or weekly hard spend cap in the case of misconfigured or comprom
24.
by btown 1mo ago
Slightly off topic, but a friend of mine worked on Microsoft SQL Server a ~decade ago, and I recall all sorts of conversations on types of optimizations they were doing that sounded truly magical compared to other databases at the time. The
25.
by btown 1mo ago
For what it’s worth, I typed every word of my comment above by hand. You’re welcome to see every post that uses sentence fragments, parallel structure, and not-X as a sign of AI, rather than a style learned by a human from decades of person
26.
by btown 1mo ago
There are many industries and situations that will pay absurdly high multiples on API rates for low latency access. Anything remotely related to finance, deal flow, or trading, including the development and checking of Excel financial model
27.
by btown 1mo ago
It’s an important reminder: I think a lot of people think that online privacy is just a thing that keeps you from being micro-targeted by ads and algorithms - and many don’t care about that. But it’s also a thing that keeps that data from g
28.
by btown 2mo ago
Cowan (2001) is an oft-cited paper proposing three to five "chunks" of capacity in human attention: https://www.cambridge.org/core/journals/behavioral-and-brain... The full PDF is worth a read (Figure 1
29.
by btown 2mo ago
If you are a company selling Red Team cybersecurity services, it’s in your interest to make your services indispensable. Your unwilling customers must subscribe to frontier cybersecurity scans and fixes to ensure they’re immune to just-be
30.
by btown 2mo ago
If someone wanted to use this as a real-time WAL-tracking read-only mirror of a live production database, for analytics work, is it ready for that use case yet?

More ›