insanitybit

5 ms·

1.
by insanitybit 8d ago
Just use TLS / mTLS over the tunnel, no?
2.
by insanitybit 8d ago
As someone building a language with an LLM, it is exactly an exploration of curiosity. I have a lot of ideas, I don't always know how to implement them, and I certainly lack the time. The LLM can write the code, I can guide it, and I c
3.
by insanitybit 15d ago
I agree, but I think most people actually don't think that's true when it comes to services that primarily do IO.
4.
by insanitybit 16d ago
At work we're moving almost everything to Rust on our backend. Massively reduced memory usage and significant latency improvements relative to our Typescript codebase. Even for code that you'd expect to work well in TS, a near 1 t
5.
by insanitybit 17d ago
Once a day I see a comment somewhere on the internet and go "Yes, perfect, this is the dumbest thing I'll read today. Great, that's out of the way". This is the one today!
6.
by insanitybit 22d ago
Because Javascript theoretically can't just access files on disk. Control over the render would let you do that, if not for the process level sandbox, which constraints things like file access, system, calls, etc. But the process i
7.
by insanitybit 22d ago
I would assume in this case that there's full renderer control, not just a bypass of the in-process isolation.
8.
by insanitybit 22d ago
> Could they have added a "no internet access" goal constraint? They could have blocked network access and required that it use a tool. That would have made limiting and monitoring network access even easier.
9.
by insanitybit 22d ago
I don't agree, although it is likely the case. But even if you don't teach an agent about a sandbox bypass, it doesn't matter. Does it know curl? Does it know DNS? Does it know proxying? Then it knows how to pull this off, an
10.
by insanitybit 26d ago
I doubt there are many things in this universe that are unambiguously good, but Chrome's sandboxing is certainly as close as anything. You can make your arguments about noscript if you'd like (I have a great respect for the projec
11.
by insanitybit 26d ago
The reality is that Chrome users still have sufficient ad blocking so as to not be impacted by this. What will be interesting is if it stops being sufficient, at which point I think people will migrate. But until then, why would they? Most
12.
by insanitybit 26d ago
No need to be revisionist. Chrome brought amazing work to the table. The multiprocess, sandboxed system was incredible - it's not to say that Chrome was the first (IE did it earlier) but it was certainly way ahead of Firefox for a long
13.
by insanitybit 27d ago
Yes, undoubtedly. Anyone in denial of this should be legally barred from programming.
14.
by insanitybit 27d ago
Who cares what mojo handles? This is about Zig and memory safety.
15.
by insanitybit 27d ago
I haven't needed `unsafe` for performance since crates like zerocopy etc exist. It's been years, and I've worked hard to shave nanoseconds off of code, using valgrind to measure single digit changes to branch predictions.
16.
by insanitybit 27d ago
2026 and developers still use memory unsafe languages. I hope we get regulated at this point, disgusting.
17.
by insanitybit 28d ago
Sweet, okay so we're on the same page and the culture is still alive.
18.
by insanitybit 28d ago
I'm not sure what you're saying, or how it is not what I'm saying? You're giving examples of places to read documentation, and I'm saying that the expectation was that behaviors caused by not checking documentation
19.
by insanitybit 28d ago
> That not knowing your API to the core makes you a bad programmer. Seriously, this was a huge thing in C and C++, where you had to know/remember/know to look up very specific error codes and conditions in an API and if you did
20.
by insanitybit 28d ago
> With AI people aren't reading, writing, or thinking about the code. Writing, definitely. Reading, maybe. Thinking is another thing. I can think about code in a lot of ways just by reading a description of the code, or knowing how
21.
by insanitybit 28d ago
Contracts are not a "reinvented" form of copyright. This isn't even uncommon.
22.
by insanitybit 28d ago
There is no price to pay on the type system that was imposed by tokio. I assume you're saying something like "I have to add 'static in generics" or something? It has absolutely paid off, there are many people not using t
23.
by insanitybit 28d ago
You would only have to include it if the library uses `spawn`, as far as I am aware, or some tokio specific type, which is the same as any other library.
24.
by insanitybit 28d ago
This is surprisingly common, from what I can tell.
25.
by insanitybit 28d ago
If someone asked me what a DB is, I'd probably start the conversation with the exact description "a file-backed map, like a hashmap".
26.
by insanitybit 28d ago
The same reason as ever. Not everyone wants to use the same runtime.
27.
by insanitybit 28d ago
At one point I was using TLA+ but it just made the problem "is the spec right?" or "does the code match the spec?". I could ensure that the properties defined in the spec were valid, but that didn't seem to translat
28.
by insanitybit 1mo ago
> Can it be fully hands-off? No. But I think, as will all things, their both subject to the rise of the "technician"s. A mechanic doesn't change your brakes or flush your oil, a technician does. You don't see a doctor
29.
by insanitybit 1mo ago
Having been an engineer and then a founder (and CEO), neither can be automated. Both require organizational work to be effective, and developer productivity is so profitable in an outsized way that you'd always just hire more if you co
30.
by insanitybit 1mo ago
I'm really not convinced that these models are even that much more intelligent, as opposed to simply being more token aggressive. I do not find Fable that much smarter than Opus 4.6, and no Opus model seems to have improved things mu

More ›