joshka

5 ms·

61.
by joshka 3mo ago
https://huggingface.co/blog/agent-intrusion-technical-timeli... has that side of the write up a bit more discussion: https://news.ycombinator.com/item?id=49089500
62.
by joshka 3mo ago
Makes you wonder whether that reality has a left wing bias quote might have some legs after all (though it's probable more likely selection bias for the corpora)
63.
A [rust] panic hook that asks ChatGPT what went wrong(crates.io)
2 points by joshka 3mo ago|0 comments
64.
by joshka 3mo ago
The other suspicion I had was jfrog artifactory (you mentioned OpenAI use it in a blog post in Jan). I accidentally conflated that with Nexus 14 july CVE. I think that's probably more likely. I suspect it may be possible to throw a loc
65.
by joshka 3mo ago
I wonder if it was this bug fixed july 14 in sonatype: https://support.sonatype.com/hc/en-us/articles/5316501964136... pure speculation here - no non public info
66.
by joshka 3mo ago
There's no reason to think that a tool that can find an 0-day in a repo cache can't work out how to make that host send a post request rather than a get request once it has its keys and is able to get it to make arbitrary web call
67.
by joshka 3mo ago
https://news.ycombinator.com/item?id=49003386
68.
by joshka 3mo ago
yes, and... ?
69.
by joshka 3mo ago
Ratatui maintainer here. Looks great! I've had on my someday bucket list doing up a web based version of daisy disk as a docker image I can slap on my various servers, but this is probably just as good an approach. I like it.
70.
by joshka 3mo ago
I caught the title "The real work..." labelizing things in a sort of weird phrasing like this is the one I've seen a lot.
71.
by joshka 3mo ago
This is often people invoking chesterton's fence, where the quickest way to have something corrected on the internet is just to say something wrong.
72.
by joshka 3mo ago
This is related to them hiring Taylor Blau to work on SCM stuff recently: https://x.com/gdb/status/2074652518135804321 https://x.com/ttaylorr_b/status/2074523670278742457
73.
by joshka 3mo ago
I wonder how effective it would be to just put the blog's title as a line in your AGENTS.md... This is kinda the "this could have been an email" of AI complaints. As an AI acolyte, I strongly believe that AIs should be being
74.
by joshka 3mo ago
or just let pi create that approach - i.e. slap the above input into a clanker's input field and see what comes out.
75.
by joshka 3mo ago
If I was doing this at scale, I'd be looking at two features in particular. Cached input tokens - leveraging the LLM's token cache to get a 10:1 cost advantage, and batch tokens, 2:1 cost saving. The benefits of doing your own har
76.
by joshka 3mo ago
If you examine what you're saying here and slippery slope it a little, examining past effort for misses and correcting them at scale is not worth doing? There are many ways that the second part of your perspective are incorrect (burden
77.
by joshka 3mo ago
I have a working port of ghostty to rust ... not even kidding
78.
by joshka 3mo ago
It would be reasonably easy to audit and automate this...
79.
by joshka 3mo ago
A lot of the signal (github, forums, mailing lists, discord, etc.) can be turned into signal. Right now it's easy enough to collect. In future it will be easy enough to cluster and generate preferences, experience, etc. Every bug repor
80.
by joshka 3mo ago
The license is the most interesting thing here... https://github.com/Dicklesworthstone/franken_markdown/blob/m...
81.
by joshka 3mo ago
Technically incorrect (the best type of incorrect). A conditional probability model (LLM) is not necessarily a mean-seeker. Possibly mode-seeking, rather than mean.
82.
by joshka 3mo ago
I've been trying to push for this perspective about the error messages of jj vcs. There's some push back from people that don't perceive that making tools work well with LLMs is also making tools work well with humans. (Obvio
83.
by joshka 4mo ago
But here's the rub - if you want your clanker to do those steps, it's usually a simple matter of adding them to your AGENTS.md and then it always does them. I'm a big fan of the characterization step step being added. And it
84.
by joshka 4mo ago
Citation needed. But in seriousness, this intuitively feels like something (as phrased) that would be easily influenced by loud noise and quantity rather than hard facts. The "piloted poorly" part is applicable to any tool use. AI
85.
by joshka 4mo ago
I read every bit of the site and still have no idea what this is / does.
86.
by joshka 4mo ago
The same comments apply to each OS - scrolling / selection / hotkeys / controls / etc. all feel differently on each OS. macOS just has the general best of breed consistency with its own UX guidelines.
87.
by joshka 4mo ago
Electron apps tend to fall down in the minutiae of the little things that native apps get right (around things like selection, scrolling, various small affordances across various levels). Would love to see something like this be more native
88.
by joshka 4mo ago
Consider making the first image in the readme either static, or move slowly enough that there's reasonable dwell time to understand the UI when it's done with rendering. Right now there's nowhere on the gif that you can focus
89.
by joshka 4mo ago
I think the reasonable thing that needs to happen here is frontier labs need to look at ways to incorporate better up to date gilded chunks of gold data into their post training. I'd love to be able to throw a chunk of scenarios and ex
90.
by joshka 4mo ago
Click the thumbs down report on the output (to better train the model in future to produce better code / provide signal to the people doing training that a common behavior is problematic) and then stick some guidance in your AGENTS.md.

More ›