cube00

33 ms·

541.
by cube00 1y ago
With more of Firefox's rendering migrating to Rust, there's got to be a market for a memory safe alternative to Electron now.
542.
by cube00 1y ago
> despite decades of effort to attempt to force-fit all applications into a browser, sometimes just a damn program that runs natively on the CPU is a much better fit for the task WebAssembly will run natively if ECMAScript is holding you
543.
by cube00 1y ago
> > We are 100% at a point where people can just "Tell the computer what you want in a web page, and it will work" > I await the good software. Where is the good software? Exactly this, it looks great on the surface until
544.
by cube00 1y ago
Give it time, we always like them in the beginning.
545.
by cube00 1y ago
Especially when they decide you've used too much and shake you down for a higher business or enterprise plan.
546.
by cube00 1y ago
> Now, sending an email is as easy as adding a binding to a Worker and calling send I hope it's easier to setup then the current mess of needing to use Wrangler to setup the send_mail binding the CF worker console can't even sh
547.
by cube00 1y ago
> I’ve even heard of people being told they need to be “at their desks at 9am” and “expected to stay until 5pm at a minimum.” PMs always manage to end their day on time with "I'm heading out for a bit, I'll be back online
548.
by cube00 1y ago
I got lectured this week that I wasn't working fast enough because the client had already vibe coded (a broken, non-functional prototype) in under an hour. They saw the the first screen assembled by Replit and figured everything they c
549.
by cube00 1y ago
If you have tens of thousands of repos with branches to match you'll be scanning all year. Proxy NPM with something like Artifactory which stops the bad package getting back in or ending up in any new builds. Follow it up with endpoint
550.
by cube00 1y ago
I'd be keen to see that survey given how many projects I see with so few GitHub sponsors that I can't see how you'd derive a full time wage.
551.
by cube00 1y ago
postinstall is running on the developer's machine, from an endpoint security perspective, it's the actual developer performing the malicious actions, their machine, their IP address and their location.
552.
by cube00 1y ago
> But right now there are still no signed dependencies Considering these attacks are stealing API tokens by running code on developer's machines; I don't see how signing helps, attackers will just steal the private keys and sig
553.
by cube00 1y ago
> The tools we use to build software are not secure by default, and almost all of the time, the companies that provide them are not held to account for the security of their products. The companies? More like the unpaid open source com
554.
by cube00 1y ago
QuillBot reports 100% AI for section "Why This Document is Historically Important"
555.
by cube00 1y ago
> servers hosting LLMs, which I wouldn't even consider a huge security concern The new problem is if the LLMs are connected to tooling. There's been plenty of examples showing that with subtle changes to the prompt you can jail
556.
by cube00 1y ago
That sounds expensive, those LLM API calls and tokens aren't cheap.
557.
by cube00 1y ago
Hopefully we have local AI by then, big tech will no doubt put filters in to stop you using their service to filter their own ads.
558.
by cube00 1y ago
> In the short term it will feel liberating They won't feel so liberated when they find ads embedded in the model's response in ways that make it difficult to uBlock.
559.
by cube00 1y ago
> It will be just a food for AI of some corporation. Food that said corporation makes a profit off while paying the author nothing.
560.
by cube00 1y ago
Did you mean the current models that are still stuck in 2023? > what's the latest year of data you're trained on > ChatGPT said: My training goes up to April 2023. There's a reason they're not willing to update t
561.
by cube00 1y ago
"AI models collapse when trained on recursively generated data" https://news.ycombinator.com/item?id=41058194
562.
by cube00 1y ago
Data retention is legal's bread and butter. There's no chance such a decision is accidently made by reusing code. Anytime data is recorded legal is immediately asking about retention so they don't end up empty handed in front
563.
by cube00 1y ago
It's nice to see the newer models are suffering after being exposed to training on their own slop. If they had done this in a more measured way they might have been able to separate human from AI content such as doing legal deals with
564.
by cube00 1y ago
To consent to sharing your data for training Docusign AI models, your organization (as the account owner) must first agree to share data through your Docusign service agreement. After providing consent, the setting will be turned on by d
565.
by cube00 1y ago
Make no mistake this will be coming to the team plan. The only difference is your account owner will decide for the whole team.
566.
by cube00 1y ago
> That seems very transparent to me. Grabbing users during start up with the less privacy focused option preselected isn't being "very transparent" They could have forced the user to make a choice or defaulted to not train
567.
by cube00 1y ago
> It is sad to see how Broadcom cannot do padding right for mobile… It's on brand when you consider how badly the styling in Rally needs an update.
568.
by cube00 1y ago
It's too bad the LLMs will hallucinate and mess up the content while doing that migration.
569.
by cube00 1y ago
AI writes inaccurate summaries and then consumes its own slop so it can hallucinate the answer to the PM's questions after misreading said slop. Much like dubbing a video tape multiple times, it's going to get worse as you add mor
570.
by cube00 1y ago
You can store low quality audio cheaply on cold storage so I suspect that's the real legal record if it got that far.

More ›