chrismarlow9

6 ms·

31.
by chrismarlow9 5mo ago
surely concats of user input, stdout of external dependencies, and non-deterministic output feeding back directly to an eval is safe. it's never been a problem before. not even trying to check the boxes when it comes to security anymor
32.
by chrismarlow9 5mo ago
It's been my default search for years. Lately for quick one shot AI prompts I use duck.ai (they put some basic effort into anonymizing your chat: https://duckduckgo.com/duckduckgo-help-pages/duckai/ai-chat-...
33.
by chrismarlow9 5mo ago
Yeah, ETF is a function of strategy, asset, financing methods and many other things. Varying leverage alone can multiply one ETF into 3 or 4. Other than showing that there's more risk in a collapse than just the single security I'
34.
by chrismarlow9 5mo ago
We've been down this road when backlinks ran the game. It eventually ends with parasitic hosting. Find a domain with authority and spam whatever mis information or spam you'd like AI to run there. Or buy a domain that has trust al
35.
by chrismarlow9 5mo ago
Sounds about right. Security is a joke everywhere right now. First to market is all that matters anymore and security is the very first thing to be thrown out when it stands in the way.
36.
by chrismarlow9 5mo ago
100% agreed. use the non-deterministic thing that is right 90% of the time to generate a deterministic thing that is right 100% of the time. one of the key things I add to my prompts is: - Please consult me when you encounter any ambiguous
37.
by chrismarlow9 6mo ago
Blackhat SEO spamming knew this 20 years ago
38.
by chrismarlow9 6mo ago
I am a Senior DevOps/Infrastructure/Full-stack engineer. First 10 years of my career was software development (LAMP & C# work). Last 10 years have been DevOps, SRE, and Infrastructure where I often still ended up in the code.
39.
by chrismarlow9 6mo ago
I use local models on a Mac mini for most things and fall back to the hosted ones when they can't get the job done. Of course you have to break the work into smaller pieces yourself that a local model can understand. One good side effe
40.
by chrismarlow9 6mo ago
A better rule is "complicate only if necessary"
41.
by chrismarlow9 6mo ago
You're not alone. I was hoping for the same.
42.
by chrismarlow9 7mo ago
We propped the entire economy up on it. Just look at the s&p top 10. Actually even top 50 holdings. If it doesn't deliver on the promise we have bigger problems than "oh no the code is insecure". We went from "I thin
43.
by chrismarlow9 7mo ago
Do you feel the same about AWS?
44.
by chrismarlow9 8mo ago
I don't have time to put together a submission but I'm willing to bet you can use this: https://github.com/kjdev/php-ext-jq And replicate this command: jq -R ' [inputs | split(",") | {url: .[
45.
by chrismarlow9 8mo ago
The slow part as a senior engineer has never been actually writing the code. It has been: - reviews for code - asking stakeholders opinions - SDLC latency (things taking forever to test) - tickets - documentations/diagrams - presentati
46.
by chrismarlow9 8mo ago
Not nearly enough context to be a front page post but here we are. Does everyone just give up on all fundamental expectations including determinism when they see AI in the title? Is the AI final boss to take over the front page of hacker ne
47.
by chrismarlow9 2y ago
I call this difference being a developer who is on call vs being a developer who is not on call
48.
by chrismarlow9 2y ago
I can't wait to see how these AI models maintain backward compatibility
49.
by chrismarlow9 2y ago
Yeah the under 31 surprised me. That alone would bring a shortage.
50.
by chrismarlow9 2y ago
To have easy compatibility with other devices. Why wouldn't they say yes?
51.
by chrismarlow9 2y ago
That's some fancy words friend.
52.
by chrismarlow9 2y ago
This smells like when Google released Gemini to have a product in the space.
53.
by chrismarlow9 2y ago
Because most places never needed kubernetes but used it to put their technical debt on a credit line. So what do you do when they try to collect? Well you just take out another loan to pay off the first one.
54.
by chrismarlow9 2y ago
You can use similar tricks to sniff auto fill data with arrow keys, a fake pacman game, and hidden form fields using focus.
55.
by chrismarlow9 2y ago
Oh there's more luck required than that. You have to get lucky many times to win at a 10x stock. - You have to be lucky enough to find it when it's cheap. - You have to be lucky enough to hold on to it even if it loses money - You
56.
by chrismarlow9 2y ago
What's to stop me from installing custom certs and MITM your login session proxying the info. Or an extension to harvest the data after you login. I'm pretty sure if I have root it's game over one way or another. The surface
57.
by chrismarlow9 2y ago
I think this thread is missing that coding is a pretty small part of running a tech company. I have no concerns about my job security even if it could write all the code, which it can't.
58.
by chrismarlow9 2y ago
They do keep an eye out, but for lobbying money. The tax system is a good example.
59.
by chrismarlow9 2y ago
Should be a makefile so you can type 'make pizza'
60.
by chrismarlow9 2y ago
The cure is to teach from an early age about impulse control, moderation, and how to spot signs of addiction in yourself early. This goes for: Social media Drugs and alcohol Food Or literally any other addiction. I don't think this is

More ›