kjok

5 ms·

31.
by kjok 1y ago
What is so fundamentally different for AI agents?
32.
by kjok 1y ago
Ah ha.
33.
by kjok 1y ago
You're right that registries are under-resourced. But, if automated malware scanning actually worked, we'd already see big tech partnering with package registries to run continuous, ecosystem-wide scanning and detection pipelines.
34.
by kjok 1y ago
> automated scanners seem to do a good job already of finding malicious packages. That's not true. This latest incident was detected by an individual researcher, just like many similar attacks in the past. Time and again, it's
35.
by kjok 1y ago
> on the other hand, the previous supply chain attack was found by automated tech. Are you sure about this? Would love to see which ones.
36.
by kjok 1y ago
I think there's some confusion here. No automated scan was able to catch the attack. It was an individual who notified these startups.
37.
Ask HN: Is ChatGPT/Claude suggesting to use malicious NPM packages?
2 points by kjok 1y ago|0 comments
38.
by kjok 1y ago
> managed pull-through caches implemented via tools like Artifactory This is why package malware creates news, but enterprises mirroring package registries do not get affected. Building a mirroring solution will be pricey though mainly d
39.
by kjok 1y ago
Why should MS buy any of these startups when a developer (not any automated tech) found the malware? It looks like these startups did after-the-fact analysis for PR.
40.
by kjok 1y ago
The kind of shady practices we have seen from this company, any self-respecting individual will be ashamed except Zuck. He has done more to rot the collective brain of a generation than any single figure in tech history. The truth is, Meta
41.
Ask HN: What measures are you taking to stop AI crawlers?
6 points by kjok 1y ago|14 comments
42.
by kjok 1y ago
I wonder how this is not a tarpit idea that YC famously ask founders to avoid.
43.
by kjok 1y ago
> In short, it's not consumers who want robots to buy for them, it's producers who want robots to buy from them using consumers dollars. This. Humans are lazy and often don’t provide enough data on exactly what they are looking
44.
by kjok 1y ago
For those who said NO, have you looked into alternative providers like PrivateGPT?
45.
by kjok 1y ago
Curious to know if you've evaluated LLMs for this use case (e.g., role playing)? If yes, what are your thoughts?
46.
by kjok 1y ago
I run a SaaS to help open-source devs monetize their GPL-licensed SDKs/libs. Going good so far.
47.
by kjok 1y ago
Solutions relying on JavaScript that runs in user-controlled browsers are vulnerable to attacks and manipulation.
48.
by kjok 1y ago
> Employ at least one developer What kind of developer? full/part-time or 1099 contractor?
49.
by kjok 1y ago
How does fast-cold-start help here? What use cases did it enable that were previously not possible with a warm pool of Docker containers?
50.
by kjok 2y ago
I believe that FOSS maintainers can gain financial independence and sustain their projects by "selling" hardened FOSS projects (think supply-chain security assurance) to consumers. I'm working on enabling this. DM me if inter
51.
by kjok 2y ago
But you still have to visit websites (or use apps) to do tasks online like booking tickets, getting stuff delivered, or paying bills. They are all tracking us. Do you also plan to pay for AI agents that do these chores on your behalf?
52.
by kjok 2y ago
What are the use cases?
53.
by kjok 2y ago
Did you evaluate Fly.io?
54.
by kjok 2y ago
How is this diff from e2b.dev?
55.
Show HN: Stopping bots and fraud in online surveys
4 points by kjok 2y ago|1 comments
56.
by kjok 2y ago
I’ve a proposal. I’ve created a Hypervisor that can launch lightweight and efficient VMs, similar to containers. Workloads in these VMs behave like isolated processes (isolated from other VMs) You can pack and sell 10x more VMs. Unlike trad
57.
by kjok 2y ago
This looks great! I couldn’t find your pricing page though.
58.
by kjok 2y ago
> We wanted to build data cleaning software with LLMs, before we realized no one really cared about messy data. This sounds like a good problem to solve with LLMs, and honestly I'm a bit surprised to hear that nobody cared about dat
59.
by kjok 2y ago
Very cool. Is there a reason to choose AWS lambda over other tech (say Cloudflare workers)?
60.
by kjok 2y ago
Works for my use case: packing dependencies and deploying. If you're considering alternatives for your use case. What do you think Docker replacement would look like?

More ›