crimsonnoodle58

6 ms·

31.
by crimsonnoodle58 7mo ago
They only need to look at one language to get a statistically meaningful picture into common flaws with their model(s) or application. If they want to drill down to flaws that only affect a particular language, then they could add a regex f
32.
by crimsonnoodle58 7mo ago
Setting min-release age to 7 days is great, but the only true way to protect from supply chain attacks is restricting network access. This needs to be done (as we've seen from these recent attacks) in your devenv, ci/cd and prod e
33.
by crimsonnoodle58 7mo ago
More like the Trivy incident (which led to the compromise of LiteLLM).
34.
by crimsonnoodle58 7mo ago
I had the same idea! Another silly (compression-based) idea I had was to: - Index say google images, or something else with a large amount of URL -> data - Find patterns in the indexed data that match patterns in your data, such that sto
35.
by crimsonnoodle58 7mo ago
Related and also on the front page: https://news.ycombinator.com/item?id=47479183
36.
by crimsonnoodle58 7mo ago
Lets up the ante. After seeing how easily California bent OS developers (commerical and open source) to comply with their local laws, Canada decides they will go one further. They aren't happy with a simple date field that can be easil
37.
by crimsonnoodle58 7mo ago
Why? Why should Linux ever implement local laws like this as core functionality? Especially invasive/anti-privacy ones. If someone wants to introduce an age-verification-ca-module, fine, but not make it core. Yes I understand systemd i
38.
by crimsonnoodle58 7mo ago
I would think the term 'vibe coded', 'vibed', '100% vibes', etc would be far more appropriate and well known, than 'lorem ipsum' when it comes to generating code without reviewing the output. If I saw
39.
by crimsonnoodle58 7mo ago
GrapheneOS user. Disappointing they consider our OS rooted when its actually more secure than stock Android. So if I'm locked out of my 365 sysadmin user by this, what then? Hopefully disabling the hardened memory allocator, as suggest
40.
by crimsonnoodle58 8mo ago
We experienced this exact error this week. Only affected outlook.com users, and not 365 users. Had to supply MS support with proof of ownership of the IP. The whole process took about a week to resolve.
41.
by crimsonnoodle58 8mo ago
Is this part of the keys didn't use to be a secret, now they are issue with google? [1] If so they have a good case on their hands. [1] https://news.ycombinator.com/item?id=47156925
42.
by crimsonnoodle58 8mo ago
Thanks for the clarification. Not that I agree with their stance (the exact same could have been said at the start of the industrial revolution) but I respect it nonetheless.
43.
by crimsonnoodle58 8mo ago
Exactly, you can use it for some tasks. But why "explicitly forbid generative AI". If you use AI to make repetitive tasks less repetitive, and clean up any LLM-ness afterwards, would they notice or care? I find blanket bans inhibi
44.
by crimsonnoodle58 8mo ago
So maybe one day we'll see coding agents like Claude Code create and update an ATTRIBUTION.md, citing all the open source projects and their licenses used to generate code in your project?
45.
by crimsonnoodle58 8mo ago
That theory is being tested. So far no prompt injection has broken in: https://hackmyclaw.com/
46.
by crimsonnoodle58 8mo ago
I've thought about implementing the same at our company. Something that iterates through all our tickets, one shots them and creates PRs. But humans are still left to review the code in the end, and as a developer, code reviewing is on
47.
by crimsonnoodle58 8mo ago
> Electricity comes out the wall. Which unless you have solar, you are paying for. Even if you have solar, you are paying off the panels, batteries and inverter/chargers over a period of time. Nothing is free.
48.
by crimsonnoodle58 8mo ago
That's not what I got. Opus 4.6 (not Extended Thinking): Drive. You'll need the car at the car wash.
49.
by crimsonnoodle58 8mo ago
How far away are we from openclaw agents teaming up, or renting ddos servers and launching attacks relentlessly? I feel like we are on the precipice.
50.
by crimsonnoodle58 9mo ago
Yes the binding interface can be specified, but the default for -p 11434:11434 is 0.0.0.0. IMO the default should be 127.0.0.1 and the user should have to explicitly bind to all via -p 0.0.0.0:11434:11434.
51.
by crimsonnoodle58 9mo ago
Not true for their docker instructions which specify -p 11434:11434 instead of -p 127.0.0.1:11434:11434. [1] Combine that with rootful docker's famous bypass of ufw and you have a publicly exposed ollama, even with a firewall. [2] [1]
52.
by crimsonnoodle58 9mo ago
So, as most of the web is HTTPS now they have DNS requests (if users haven't used a third party DNS like 1.1.1.1), and IP addresses. Maybe the SNI domain name if they are doing packet inspection. Not really sure how useful this would b
53.
by crimsonnoodle58 10mo ago
Same order for me. Also DOS batch files if they count.
54.
by crimsonnoodle58 10mo ago
So SSR is 50ms and LiveView is 10ms, what test was being performed to achieve these timings? Rendering a sample page or rendering doom? Also LiveView is described as "Build rich, dynamic user experiences with server-rendered HTML witho
55.
by crimsonnoodle58 10mo ago
We use squid for egress control on Kubernetes and have also written a controller that runs in a sidecar container next to squid that monitors for custom CRD's, such as a whitelists. The controller then updates squid.conf and reloads sq
56.
by crimsonnoodle58 10mo ago
Rootless docker is more compatible than podman I found. I experienced crash dumps in say mssql with podman, but not with rootless docker. Also rootless docker does not bypass ufw like rootful docker does.
57.
by crimsonnoodle58 10mo ago
Yet said language continues to add imperative-inspired constructs to make up for its limitations.. The end result is still declarative, your just using an imperative language to keep your IaC DRY.
58.
by crimsonnoodle58 10mo ago
Being able to inherit from Ingress and add a parameter of say public=True/False and then it change annotations, middleware, etc and then being able to re-use that across 100s of stacks is very powerful. DRY is not something HCL is good
59.
by crimsonnoodle58 10mo ago
This is particularly frustrating as I've spent the last year writing many thousands of lines of CDKTF Python. HCL just does not have the modularity and expressiveness that Python, or other languages CDKTF supports. I guess I'll sp
60.
by crimsonnoodle58 10mo ago
Correct. Running Ubuntu 25.10 with a RTX 50 series GPU and it just works.

More ›