Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
mcintyre1994
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
6 ms
·
91.
▲
by
mcintyre1994
7mo ago
In the UK you can get energy plans with a price that updates every half hour, published a day ahead. From 12:30pm - 4pm today that price is negative. It was also negative for around 16 hours of Easter Sunday. https://www.octopric
92.
▲
by
mcintyre1994
7mo ago
You need some way to give it tools - the essential ones for coding are running bash commands, reading files and editing files. You need the LLM to be able to respond with tool use requests, and then your local harness to process them and re
93.
▲
by
mcintyre1994
7mo ago
You’re right, but a colleague recently showed me this CLI for it: https://docs.npmjs.com/cli/v11/commands/npm-trust Still needs to be published first, but looks like it automates all the annoying UI things yo
94.
▲
by
mcintyre1994
7mo ago
Then the malicious packages would always be published as a security fix.
95.
▲
by
mcintyre1994
7mo ago
In cases like this that isn’t an issue, NPM takes the malicious package down and you roll back to the previous version. The problem would be new versions that fix security issues though, and because this is all open source as soon as you pu
96.
▲
by
mcintyre1994
7mo ago
Nope, the most restrictive option available is to disallow tokens and require 2FA. I think that using exclusively hardware 2FA and not having the backup codes on the compromised machine probably would have prevented this attack though.
97.
▲
by
mcintyre1994
7mo ago
See also: https://github.com/openclaw/openclaw/pulls (6,647 open PRs)
98.
▲
by
mcintyre1994
7mo ago
The frustrating thing here is that axios versions display on npmjs with verified provenance. But they don’t use trusted publishing: https://github.com/axios/axios/issues/7055 - meaning the publish token can b
99.
▲
by
mcintyre1994
7mo ago
It's definitely an ad, I think the only real question is whether it's just marketing Copilot or whether part of their partnership with other companies is advertising the integration in this way. The links all go to Copilot docs pa
100.
▲
by
mcintyre1994
7mo ago
If you click the Raycast link in one of these PRs it links to: https://gh.io/cca-raycast-docs So I think they’re injecting this as a tip on using Copilot, that just happens to be their integration with Raycast. I have no id
101.
▲
by
mcintyre1994
7mo ago
Something would be deeply wrong!
102.
▲
by
mcintyre1994
7mo ago
It only has $1m volume, so even that conclusion is a bit of a stretch. By comparison NCAA tournament has $15m, and US confirms aliens this year has $18m.
103.
▲
by
mcintyre1994
7mo ago
Love all the tools mentioned in the comments, Pyodide is a fun tool. I built https://pyground.vercel.app with it a few years ago, as a quick way to run Python on a CSV/JSON file locally in the browser. For a while Python&#x
104.
▲
by
mcintyre1994
7mo ago
You only need to look at the US to see that a government dedicated to mass deportation is more authoritarian and worse for civil liberties.
105.
▲
by
mcintyre1994
8mo ago
I think you’d just have to unfollow sources that publish AI slop. But that doesn’t seem too difficult with RSS, I can’t think of any source that sometimes publishes AI slop and sometimes I want to read their stuff. I guess if you tried to p
106.
▲
by
mcintyre1994
8mo ago
A similar product in the mobile space is Rork - I haven't used it but I've seen it on twitter a bit. I definitely wouldn't be surprised to see Apple acquire one of them.
107.
▲
by
mcintyre1994
8mo ago
> If anything they do background processes better since you can send a very long task off to a server and shut off your computer, come back later and pick up where you left off. I think it's fair to say that's a benefit of web
108.
▲
by
mcintyre1994
8mo ago
They say they're targeting Mac only for now, so it could be native code, or they could just have not tested/refined their prompt for other platforms yet. > This was never the case for the desktop tools I mentioned. I'd be
109.
▲
by
mcintyre1994
8mo ago
I think their value add if you’re comfortable with Claude Code is probably some nice tooling for the packaging, and they probably sign apps for you too?
110.
▲
by
mcintyre1994
8mo ago
Wouldn’t most of these costs have been going for a few weeks, given the build up?
111.
▲
by
mcintyre1994
8mo ago
From what I’ve heard the actual restriction is just on using Claude for stuff they’re doing for the Pentagon. They’ll keep using Claude for everything else and be less effective when they work for the government, and that’s fine because eve
112.
▲
by
mcintyre1994
8mo ago
Probably just gonna go all in on MechaHitler!
113.
▲
by
mcintyre1994
8mo ago
Sorry, I mean the current implementation seems trivial to spoof. I agree that doing something like your suggestion would make me feel much more comfortable about those logins.
114.
▲
by
mcintyre1994
8mo ago
I always wonder about how easy that would be to spoof, because it seems like it'd be trivial.
115.
▲
by
mcintyre1994
8mo ago
I have a LinkedIn account and I occasionally have recruiters cold phone call me. They always tell me they got my phone number from LinkedIn. The first time this happened I deleted my number off LinkedIn, which was not shared according to th
116.
▲
by
mcintyre1994
8mo ago
At least Anthropic tells you how many more tokens you’re paying for! 5x 10x 20x whatever. Google seems to just say more, higher, highest.
117.
▲
by
mcintyre1994
8mo ago
So instead of using a VPN that might have weird relationships with spy agencies, you just use one run by the US government? Clever idea to spy on the stupidest people in the world I guess. Also I’m guessing they won’t allow this to be used
118.
▲
by
mcintyre1994
8mo ago
Seems to be dead again
119.
▲
by
mcintyre1994
8mo ago
Wes Bos has a pretty cool demo of this: https://www.youtube.com/watch?v=sOPhVSeimtI I really like the way you can expose your schema through adding fields to a web form, that feels like a really nice extension and a great w
120.
▲
by
mcintyre1994
8mo ago
Heh, is through Claude Code? I have a side project where I'm sometimes using Claude Code installs for chat, and it usually doesn't mind too much. But when I tested the Haiku model it would constantly complain things like "I a
More ›