hirsin

8 ms·

61.
by hirsin 11mo ago
And specifically Sam goto (Google, fedcm) and Dick Hardt (hello, oauth2 spec writer). This was originally thought up a couple (5-6) years ago along side fedcm and privacy sandbox, but before SD-jwt was full baked, so it wasn't as clean
62.
by hirsin 1y ago
Those are the same thing in our system.
63.
by hirsin 1y ago
There's at least the appearance of causation here, with the FCC Chairman publicly saying that broadcasters could get their licenses yanked if they didn't drop Kimmel, and later that suddenly occurring. https://www.cnn.c
64.
by hirsin 1y ago
We also had yet another delay on the new light rail line because the power lines were stolen... Twice, in a week. https://www.king5.com/article/news/local/copper-wire-theft-l...
65.
by hirsin 1y ago
The worst case is when this mentality of "just update your code" leaks out to the rest of us. I'm still scarred from some of the samesite shenanigans, breaking useful (not ads) boxed software because they figured everyone on
66.
by hirsin 1y ago
I assure you it's far too easy to get as many ip addresses as you want if your interest is in avoiding rate limits.
67.
by hirsin 1y ago
The MCP server technically doesn't support DCR. The authorization server for the MCP server does, which is a minor distinction. Have you seen significant need for this? I've been trying to find data on things like "how many M
68.
by hirsin 1y ago
They don't care, they still want support and most leadership teams are unwilling to stand behind a stance of telling customers no.
69.
by hirsin 1y ago
And you're lucky if it's two. If they're not familiar with the rendering engine/docs system/API platform/middleware etc (or just think they aren't), or have low confidence in a debt ridden platform, they&#
70.
by hirsin 1y ago
Hm, I wonder how the double sig problem that SAML would run into will work here. What happens if someone adds an extra sig object there?
71.
by hirsin 1y ago
That works as long as you have no distinctions between objects of a type. _Which_ calendar can they edit? All of them? Putting all the repos you can access into a token is a request we get sometimes. It would be... Difficult.
72.
by hirsin 1y ago
We don't need SDKs, they publish API docs. We don't need packages or functions, we can just write the code ourselves, every time it's needed. We don't need compilers, the computer understands assembly already. It's
73.
by hirsin 1y ago
The point above about enterprise glue is why this is a pull model. In your push model, the onus is on you to go find the scan from one of five backends, traverse whatever hoops of access are needed, and actually handle the files manually. I
74.
Vulnerable MCP project: standard issues with the protocol(vulnerablemcp.info)
1 points by hirsin 1y ago|0 comments
75.
by hirsin 1y ago
Touching on tenancy and the "real" gaps in the spec does help push the discussion in a useful direction. https://vulnerablemcp.info/ is a good collection of the immediately obvious issues with the MCP protocol tha
76.
by hirsin 1y ago
I imagine they'd have all the lovely problems of both EV certs (sure, you're legitimately PayPal Corp, in Malawi) and limited real estate price squeezes. Curation of "good" or "real" websites has been tried bef
77.
by hirsin 1y ago
At one point we were looking at moving a bunch of separate domains under a single dotless domain, due to the threatened death of 3p cookies, so that cookies could be dropped directly onto the cctld (think "you're logged into the e
78.
by hirsin 1y ago
Indeed! But seemingly only for the actual object representation - it's a start, and I wonder if JSON is uniquely suited to LLMs because it's so text-first.
79.
by hirsin 1y ago
In the same way that crypto folks speedran "why we have finance regulations and standards", LLM folks are now speedrunning "how to build software paradigms". The concept they're trying to accomplish (expose possibly
80.
by hirsin 1y ago
This is one of the few places I think it's obvious why MCP provides value - an OpenAPI document is static and does no lifting for the LLM, forcing the LLM to handle all of the call construction and correctness on its own. MCP servers r
81.
by hirsin 2y ago
No there isn't (a big difference) Like, really. If I open ms paint and just do some low effort scrawl, I have copyright on that. Level of effort has not ever decided if something is copyrightable or not. For derivative works, there is
82.
by hirsin 2y ago
No, the exact opposite. This says that if the AI that a bank is paying for locks your bank account in error because your name sounds <ethnicity with a lot of locked bank accounts>, it's the banks problem to fix, not yours to just
83.
by hirsin 2y ago
> I don't see 5-10x more useful features in the software I use, or 5-10x more software that's useful to me, or that the software I'm using is suddenly working 5-10x better, etc. This has bad assumptions about what higher p
84.
by hirsin 2y ago
This. It's extremely expensive to keep core functionality like this in a fork. Every single surface that manifest v2 touches (js runtime, extension hosting, permissions, network, APIs, chrome even) that gets changed upstream has to be
85.
by hirsin 2y ago
Twitter has 80% less revenue than it's peak in 2022, less than it had in 2014. Even if it is more profitable, it's doing a heck of a lot less. The government being 80% less effective would be a very bad outcome here.
86.
by hirsin 2y ago
It's worth noting that many of these are service agreements, not just data. It's tailored/specialized forecasts that are being built for the customer, not simply selling them the data they give to the public for free. So doin
87.
by hirsin 2y ago
We have an existing oversight body, the OIG, which is a couple orders of magnitude larger than DOGE. And a reasonable statement you could defensibly make is that OIG isn't doing enough to curtail spending, the same way you or I aren&#x
88.
by hirsin 2y ago
"generally pro doge" would imply they support what doge is doing, namely shutting things down
89.
by hirsin 2y ago
It's funny. We get up in arms because our boss's boss's boss wants to decide if the work we're doing this sprint is valuable - there's no way they can begin to understand what it is they pay me to do here! They&#x27
90.
by hirsin 2y ago
Is this something like inverse gell-man amnesia? You're aware of the value noaa provides so you're skeptical about removing it, but when we turn the page to talk about another agency removal makes sense again? Not attempting to du

More ›