f311a

8 ms·

121.
by f311a 7mo ago
GuardDog, but it's based on regexes
122.
by f311a 7mo ago
They did not even try to hide the payload that much. Every basic checker used by many security companies screams at `exec(base64.b64decode` when grepping code using simple regexes. hexora audit 4.87.1/2026-03-27-telnyx-v4.87.1.zip
123.
by f311a 7mo ago
JQ is very convenient, even if your files are more than 100GB. I often need to extract one field from huge JSON line files, I just pipe jq to it to get results. It's slower, but implementing proper data processing will take more time.
124.
by f311a 7mo ago
There is no such tool, but you can use other static analyzers. Datadog also has one, but it's not AST-based.
125.
by f311a 7mo ago
Their previous release would be easily caught by static analysis. PTH is a novel technique. Run all your new dependencies through static analysis and don't install the latest versions. I implemented static analysis for Python that dete
126.
by f311a 7mo ago
They actually did not add LinkedIn specifically. It's an AI translator that accepts anything in the `to` field. https://translate.kagi.com/?from=en&to=Crypto%20Scammer&text...
127.
by f311a 7mo ago
Why is this upvoted? The author did not even bother to read what he wrote. > SOC 2 Type II ready Huh? You vibecoded the repo in a week and claim it ready?
128.
by f311a 7mo ago
> I still understand how everything works, That's partly an illusion. Try doing everything manually. After only using inline suggestions for six months a few years ago, I've noticed that my skills have gotten way worse. I becam
129.
by f311a 7mo ago
I was talking about total deps, not direct. By installing something like Celery, you get 8-10 extra dependencies that, in turn, can also have extra deps. And yeah, extra deps can conflict with each other as well.
130.
by f311a 7mo ago
My medium-sized Django projects had close to 100 dependencies, and when you want to update to a new Django version, the majority of them must be updated too. Thankfully, updating to a new Django version is usually simple. It does not requir
131.
by f311a 7mo ago
I love the batteries that RoR or Django gives you, but then I also remember how much time it takes to maintain old projects. Updating a project that was started 5-6 years ago takes a lot of time. Part of that is managing dependencies. For D
132.
by f311a 7mo ago
I tried to find any recent issues related to AI in the Vim repo, but did not find any. Offending commit https://github.com/vim/vim/commit/fc00006777594f969ba8fcff67... Just Claude as a co-author.
133.
by f311a 7mo ago
I mean, they could decompress it once when using a language for the first time. It will still be fully offline, but with a bit uncompressing.
134.
by f311a 7mo ago
Funny enough, they are less than 10MB when compressed. I guess they could use something like upx to compress these binaries. The whole Linux release is 15mb, but it uncompresses to 16MB binary and 200MB grammars on disk. Why do we need to h
135.
by f311a 7mo ago
Language grammars are ~200-250MB though. They are in a separate folder, and often they are all bundled to support all the languages. Some of them are HUGE. .rwxr-xr-x 4.6M aa 6 Mar 21:52 ocaml-interface.so .rwxr-xr-x 4.6M aa
136.
by f311a 7mo ago
No, expectations have shifted. In a lot of companies, managers expect you to use LLMs to produce more features faster.
137.
by f311a 7mo ago
It's a mobile CPU. They did not modify it. Mobile devices run with a single USB port.
138.
by f311a 7mo ago
That's only true for M Macs. Intel Macs with 8 GB of RAM perform pretty poorly.
139.
by f311a 8mo ago
You don't want a browser with a bunch of RCEs that can be triggered by opening a web page...
140.
by f311a 8mo ago
It's good enough if you don't go wild and allow LLMs to produce 5k+ lines in one session. In a lot of industries, you can't afford this anyway, since all code has to be carefully reviewed. A lot of models are great when you d
141.
by f311a 8mo ago
You are losing your personality by modifying your text with LLMs. It saves you how much, 1 minute of writing?
142.
by f311a 8mo ago
> isn't just "high demand", but "contractual lock-out." The "isn't just .., but .." construction is so overused by LLMs.
143.
Turning YouTube into Cloud Storage [video](youtube.com)
1 points by f311a 8mo ago|0 comments
144.
by f311a 8mo ago
You are living in a fantasy. We are nowhere near this, and engineers who understand fundamentals very well are the ones in demand.
145.
by f311a 8mo ago
It's already, that's why Microsoft abandoned GitHub
146.
by f311a 8mo ago
That's because they still struggle hard with out-of-distribution tasks even though some of them can be solved using existing training data pretty well. Focusing on out-of-distribution will probably lower scores for benchmarks. They foc
147.
by f311a 8mo ago
They are trained pretty hard to transpile the code between languages and do this pretty well because this can be done using RL. You can force the agent not to use unsafe, this is why it burned $20000. Thousands of attempts against good test
148.
by f311a 8mo ago
No, Apple ecosystem is bad enough already in software terms. Just let me use my computer as I want. "An idiot admires complexity, a genius admires simplicity." Terry A. Davis
149.
Why I'll Never Drive a Modern Car Again [video](youtube.com)
8 points by f311a 8mo ago|2 comments
150.
by f311a 9mo ago
Just look at the closed PRs of their project. General technical knowledge is so low it's insane. It attracts weird people.

More ›