jFriedensreich

8 ms·

91.
by jFriedensreich 7mo ago
My only positive experience reporting bugs post early startup was with the chromium team, i get usually assigned to a dedicated reproducer that verifies and is reachable for helping them recreate in a matter of a few days. I had two experie
92.
by jFriedensreich 7mo ago
FUD is crypto and tech bro speech. Using containers without vm, gvisor or similar is just irresponsible.
93.
by jFriedensreich 7mo ago
Honestly, I am really surprised to not be bored of it more. Yet it seems to be existential enough, diversifying and developing fast enough to stay interesting. If the tooling gets boring, there will be some drama, if the corporate side gets
94.
by jFriedensreich 7mo ago
Probably the first marketing website ever to feature pictures from rotten.com, i enjoyed it but this was not expected.
95.
by jFriedensreich 7mo ago
A sleeper compromise that cannot execute can still not reach its goal. Generally speaking outdated dependencies without known compromise in a sandbox are still better than the latest deps with or without sandbox.
96.
by jFriedensreich 7mo ago
That assumes you even need an install script. 90% of install scripts just check the platform and make the binary executable and put it in the right place. Just give me links to a github release page with immutable releases enabled and pur
97.
by jFriedensreich 7mo ago
Just because this attack example did not contain container escape exploits does not mean this is safe. Its better than nothing but nothing that will save us.
98.
by jFriedensreich 7mo ago
You are not being downvoted because the core premise is wrong but because your framing as a choice between being locked out of general purpose computing vs security is repeating the brainwashing companies like apple and meta do to justify t
99.
by jFriedensreich 7mo ago
I would split the agent loop totally from the main project of tightbeam, no one wants yet another new agent harness we need to focus on the operational problems. Airlock seems interesting in theory but its really hard to believe this could
100.
by jFriedensreich 7mo ago
firecracker does not run on macos and has no GPU support
101.
by jFriedensreich 7mo ago
Thanks for the pointer! Love the premise project. Just a few notes: - a security focused project should NOT default to train people installing by piping to bash. If i try previewing the install script in the browser it forces download inste
102.
by jFriedensreich 7mo ago
We have one where thats possible: workerd (apache 2.0) no new language needed just a new runtime
103.
by jFriedensreich 7mo ago
Containers can mean many things, if you mean plain docker default configured containers then no, they are a packaging mechanism not safe environment by themselves.
104.
by jFriedensreich 7mo ago
Its a weird notion of a distributed object, even in 2014, I think i would never consider calling the methods of a distributed object directly with something linke RPC but instead replicate the objects with a replication protocol and then us
105.
by jFriedensreich 7mo ago
We just can't trust dependencies and dev setups. I wanted to say "anymore" but we never could. Dev containers were never good enough, too clumsy and too little isolation. We need to start working in full sandboxes with defenc
106.
by jFriedensreich 7mo ago
the latest codex or opus 4.6 depending what works better. the trick is not to work on giant rebases at all. use commit stacks that constantly rebase on trunk so will constantly have small conflicts that are simple to resolve rather than wai
107.
by jFriedensreich 7mo ago
where?
108.
by jFriedensreich 7mo ago
"Basically the point I'm making is that as programmers there's no line between professional and amateur" >> The author has not encountered a next level professional environment that is not available to consumers. T
109.
by jFriedensreich 7mo ago
starts with “based on the fundamentally sound approach of using CRDTs for version control”. How on earth is crdt a sound base for a version control system? This makes no sense fundamentally, you need to reach a consistent state that is what
110.
by jFriedensreich 7mo ago
users also dont have time to find and report bugs until the next release and also get even more desensitized to things being broken so will report less likely, or just clone and fix something only for themselves because issues and prs are m
111.
by jFriedensreich 7mo ago
opencode stands out as one of the few agents with a proper client server architecture that allows something like openchambers great vscode extension so its possible to seamlessly switch between tui, vscode, webapp, desktop app. i think ther
112.
by jFriedensreich 7mo ago
this runs kubernetes in a vm on your machine and is targeted at enterprises. we need some of these sandbox and policy primitives but please a bit more lightweight and docker compose!
113.
by jFriedensreich 7mo ago
how is this real life more than a monitor, its just bigger pixels. i was expecting programmable live cells or something mechanical
114.
by jFriedensreich 7mo ago
Finally, I have been saying this for months and generally to big backlash. The only two aspects missing are the role of central mcp gateways and code mode. We don't know 100% how these will be used optimally but thats what the future w
115.
by jFriedensreich 7mo ago
8 frameworks except the only decent looking one (opencode) seems a very weird choice, especially as the claw naming is mentioned too much on this page to my liking (Which would be zero times). Also the choice of naming an agent prompt SOUL.
116.
by jFriedensreich 7mo ago
If i read this correctly its completely absurd. secrets can never even touch an agents sandbox, not as file not as env var not as anything. Agents can only be allowed to reach services via proxies that handle secrets and do permissions and
117.
by jFriedensreich 7mo ago
yeah it totally does not remain coherent past 200k, would have been too nice.
118.
by jFriedensreich 7mo ago
My testing was extremely disappointing, this is not a context window that magically extends your breathing room for a conversation. I can tell blindly at this point when 150 - 200 k tokens are reached because the coding quality and coherenc
119.
by jFriedensreich 7mo ago
I wonder what value gpl even has in a world where i can trivially reimplement whatever a company builds on a permissive license and does not share. I see still a place for things that are low level, algo heavy, real world test heavy and cri
120.
by jFriedensreich 7mo ago
The claw cesspool boldly thinks they are smart for just making all these things and probably thinks they came up with novel ideas, when everyone who has the slightest clue what is going on is petrified. Its clear these concepts are going to

More ›