btown

9 ms·

121.
by btown 5mo ago
And if you want your Helm to run on certain deploys, and maintain a declarative set of the variables given to charts over time, thinking you can use Helmfile and some custom GitHub Actions… “my dear friend you have built a GitOps.” (I tend
122.
by btown 6mo ago
Is there a way to say: I am happy to pay a premium (in tokens or extra usage) to make sure that my resumed 1h+ session has all the old thinking? I understand you wouldn't want this to be the default, particularly for people who have on
123.
by btown 6mo ago
Trying to engage in good faith: would you likewise say that the notion of sports medicine is irrelevant? That even though professional athletes have unique stresses on parts of their bodies that are not common in a general population, uniqu
124.
by btown 6mo ago
The question is, is everyone integrating a special SpaceX correction in their algorithmic trading? Because if a dip in the index due to SpaceX causes old algorithms to think it’s a more structural issue (well, more than it is), and sell on
125.
by btown 6mo ago
If a product has no bugs, it is not sufficiently ambitious to be worth using!
126.
by btown 6mo ago
That's the old meta, now it's Tumblr post voiceovers overlaid on Minecraft parkour runs!
127.
by btown 6mo ago
And met his co-producer for the (Tony-winning!) show at Lars Ulrich's birthday party! He's doing something right. https://archive.is/ZcTJm
128.
by btown 6mo ago
Ternus recently gave an interview where he said this about the initial flop of Apple Maps: > “When we started out with maps, it was an ambitious undertaking. It was bumpy,” said Ternus. “But the team had just been over the years just pus
129.
by btown 6mo ago
You could have a meaningful wall between administrative/deployment interface backends and the customer server backends - only the latter get access to services that have the private keys to decrypt the at-rest storage of secure variabl
130.
by btown 6mo ago
Via the incident page: > Environment variables marked as "sensitive" in Vercel are stored in a manner that prevents them from being read, and we currently do not have evidence that those values were accessed. However, if any of
131.
by btown 6mo ago
"Nobody ever got fired for putting their band page on MySpace."
132.
by btown 6mo ago
At least when I tried it last, Claude Cowork tried to spin up an entire virtual machine to sandbox itself properly - and not only is that sandboxing slow to start up, it also makes it difficult to actually interact freely across your filesy
133.
by btown 6mo ago
Any single company might be able to proactively defend themselves from attackers, but will companies invest the tokens in this? Most people simply don't care until it's too late. And in a world where companies begin to suffer from
134.
by btown 6mo ago
https://developers.cloudflare.com/email-service/reference/po... Cloudflare is very transparent about their prefixes and reverse DNS, which is generally a good thing for the ecosystem! But it makes it trivial for o
135.
by btown 6mo ago
My understanding from the paper is that doing so should cause certain things in Apple's hardware security enclaves to break a signing chain, and a server-side MDM system integrated with Apple servers can detect this. But I'm not f
136.
by btown 6mo ago
From the paper: https://github.com/Layr-Labs/d-inference/blob/master/papers/... > Apple’s attestation servers will only generate the FreshnessCode for a genuine device that checks in via APNs. A
137.
by btown 6mo ago
The problem, though, is that this turns "one of our developers was hit by a supply chain attack that never hit prod, we wiped their computer and rotated keys, and it's not like we're a big target for the attacker to make much
138.
by btown 6mo ago
Are there any ways in Cloudflare to mitigate against this? If all sports matches basically mean "our clients can't access our Cloudflare backed app in Spain" then it's worse than fewer-nines; it's a correlated event
139.
by btown 6mo ago
Can't stop the signal, Mal.
140.
by btown 6mo ago
Any information about what the $295 Studio license adds for Photos specifically? Having trouble finding a feature matrix. Is scripting from an external system (like Claude Code) easier/only possible with the full Studio version?
141.
by btown 6mo ago
IMO the thing that AI will change is the type of target. It's reasonable to assume that if you launch a website for a small business nowadays - sure, you'll get phishing attempts, port scans, attempts to submit SQL injections into
142.
by btown 6mo ago
> But when you run your code in production, the KISS mantra takes on a new dimension. It’s not just about code anymore; it’s about reducing the moving parts and understanding their failure modes. This sentence, itself, takes on new meani
143.
by btown 6mo ago
I’d argue that learning about the effectiveness of AI models and techniques, benefits from voices with different contexts, as well as voices that may be differently aligned with bull vs. bear cases of macro AI strategy. And those voices may
144.
by btown 6mo ago
But you can do other things to mitigate this. For instance, give each app a set of rolling daily encryption keys, and encrypt new messages at rest. Remove the app, remove all keys. Nightly, remove the oldest key. Perhaps have the entire key
145.
by btown 6mo ago
Gosh, Dan, in seeing your response here - I'm truly sorry I wrote this. While I still find opt-out telemetry distasteful and dangerous, I over-generalized to React in a hurtful way. You've been an incredible influence on me and I
146.
by btown 6mo ago
This would be true if the algorithm changes were limited to for-you feeds. But the larger problem is that the set of people willing to pay for X are boosted in replies. So if that set of people, which tends towards a certain political bias,
147.
by btown 6mo ago
"Dad, why do our coffee filters advertise that they can run fast fourier transforms?" "Well, kid, back in the year 2026, there was this bicycle bell.."
148.
by btown 6mo ago
To be sure, the problem isn't that the plugin injects behavior into the system prompt - that's every plugin and skill, ever. But this is just such a breach of trust, especially the on-by-default telemetry that includes full bash c
149.
by btown 6mo ago
Similarly, one of the great things about Python (less so JS with the ecosystem's habit of shipping minified bundles) is that you can just edit source files in your site_packages once you know where they are. I've done things like
150.
by btown 6mo ago
Benchmarks are meaningless until the pelican benchmark comes out: https://simonwillison.net/

More ›