kalib_tweli

5 ms·

1.
by kalib_tweli 6mo ago
Good points across the board. I ran into a lot of problems auditing the security of my approach and it was just too easy to circumvent. First lesson was that the architecture had to be secure in structure, not configuration. Otherwise, a no
2.
by kalib_tweli 6mo ago
Would value your opinion on my project to isolate creds from the container: https://github.com/calebfaruki/tightbeam https://github.com/calebfaruki/airlock This is literally the thing I'm try
3.
LLM Proxy for Agent Containers(github.com)
3 points by kalib_tweli 6mo ago|1 comments
4.
by kalib_tweli 6mo ago
LLM proxy for containerized AI agents. The daemon proxies LLM API calls and remote MCP tool calls through a unix socket. The runtime drives the agent loop inside the container. Credentials never cross the socket boundary.
5.
Show HN: Airlock – container agents should never hold credentials(github.com)
2 points by kalib_tweli 7mo ago|0 comments
6.
by kalib_tweli 2y ago
TLDR; visit this link: https://immigration-portal.ec.europa.eu/index_en American living in France for 5 years. Previously worked in NYC startups earning a similar salary to you. Made lots of mistakes that, if I had known be
7.
by kalib_tweli 2y ago
It wouldn't. It's the role of the HTTP server to set the correct content type header.
8.
by kalib_tweli 2y ago
I confirmed that if you explicitly set the Content-Type response header to application/rss+xml it seems to work with Cloudflare Proxy enabled. The issue here is that Cloudflare's content type check is naive. And the fact that CF i
9.
by kalib_tweli 2y ago
There are email obfuscation and managed challenge script tags being injected into the RSS feed. You simply shouldn't have any challenges whatsoever on an RSS feed. They're literally meant to be read by a machine.
10.
by kalib_tweli 2y ago
This is exactly the situation my company ran into. Don't hire a contractor, their incentive won't be aligned with your company and you'll overspend. My company hired me to replace their terrible software vendor and by their o
11.
by kalib_tweli 2y ago
Makefile and docopt. No muss, no fuss. No "works on my machine" issues. I'm running a hand-rolled monorepo with ansible, terraform, and several language projects (JS/TS, Swift, Ruby) that each have a makefile to standard
12.
by kalib_tweli 2y ago
I made training data.
13.
by kalib_tweli 2y ago
The hard part here is idempotency. Ansible is great for a programmer because it's learning for fun. And you just have to spar with your machine to get good. But for a non-programmer, it's understandable you don't want to be b
14.
by kalib_tweli 2y ago
Funny enough I'm on my way to Noirmoutier right now. My wife's family has a house there on the northeast side of the island near where a lot of the oldest houses are. The Passage du Gois is very convenient when driving from Paris
15.
by kalib_tweli 3y ago
Thanks! I'm using this as an experience to teach myself mainly. I'm not an expert cyclist but I prefer to DIY when I can. For example, I looked at tires and wheels as a good litmus test. What were the minimum pieces of information
16.
by kalib_tweli 3y ago
I'm working on a bike part compatibility database for cyclists and anyone else who may work on bicycles. https://builder.bike