mehdibl

8 ms·

31.
by mehdibl 1y ago
apparently... Like it's also possible in a VM. What about running non privileged containers! You need really to open some doors to make it easier!
32.
by mehdibl 1y ago
When you use docker you can have full control over the networking layer already. As you can bound it's networking to another container that will act as proxy/filter. How WASM offer that? With reverse proxy you can log requests, or
33.
by mehdibl 1y ago
I'm in the security space so? And been deep in this MCP thingy. Did you check where I pointed the root issues? All I'm trying to say there is shortcuts, and confusing over the hype buzz too that is on going in AI, as MCP took off,
34.
by mehdibl 1y ago
this issue is not even MCP at the core. Claude Code/ Gemini CLI were opening "url's" without sanitization and validation. That's the core flaw. There is a second issue with an XSS flawed package too in the bridge th
35.
by mehdibl 1y ago
There is confusion. 1. Not all MCP tools connect to the web or fetch emails. So the shortcut all MCP's are doomed is also the wrong way to adress this. 2. Issue is with MCP with untrusted external sources like web/email that need
36.
by mehdibl 1y ago
MCP is only transport protocol here. And you need tools to connect to external "systems", the context "pollution" can be managed easily. Also even if you don't use MCP you need to use tools and they need to expose t
37.
by mehdibl 1y ago
What the issues, if you use quality MCP tools? Also MCP is only transport and there is a lot of mixup to blame the MCP, as most of the prompt injection and similar come from the "TOOLS" behind the MCP. Not MCP as it self here. See
38.
by mehdibl 1y ago
IT start with "Evil MCP Server". So you need a server flawed + XSS issue on Cloudflare. Then you need to use Claude Code, so it's more an issue in Claude Code/Gemini implementation already than MCP. So if you are ok to r
39.
by mehdibl 1y ago
Since when LLM become deterministic?
40.
by mehdibl 1y ago
Such discounts are prepaid, or you give free period after paying in full for 70% of the period. Also there is prepayment in a lot of commitment. When you commit on the cloud such contract your PREPAY compute unit and this is not new.
41.
by mehdibl 1y ago
What is the issue? There is 2 month's notice. If you have bad services and customer don't need it any more makes sense to allow termination, instead of contining to bill customors for nothing. This is more healthy and would push m
42.
by mehdibl 1y ago
How many real world cases of prompt injection we have currently embedded in MCP's? I love the hype over MCP security while the issue is supply chain. But yeah that would make it to broad and less AI/MCP issue.
43.
by mehdibl 1y ago
The most important you need always to do: 1. Plan, review the plan. 2. Review the code during changes before even it finish and fix ASAP you see drift. 3. Then again review 4. Add tests & use all quality tools don't rely 100% on LL
44.
by mehdibl 1y ago
CC system prompt is tuned for Sonnet 4/Opus Why trying CC why not using alternatives like Opencode or Goose that are open and made for this purpose instead of trying to use a tool tailored by Anthropic for Anthropic models?
45.
by mehdibl 1y ago
if you mount local path's, it's a pain. I know a lot of kubernetes fans migrate to podman, but if you use dev stacks. Use in dev: devcontainer, podman can't replace docker!
46.
by mehdibl 1y ago
This sound nice but I don't like the incompatibility with x86. Docker and many other things. Yeah we need some trade off's. But for dev's & a lot of ops stuff I enjoy more x86 as it's de facto standard.
47.
by mehdibl 1y ago
Issue most groq models are limited in context as that cost a lot of memory.
48.
by mehdibl 1y ago
The PR confuse a but 32k/64k and 131k if paid API. Also this model https://huggingface.co/Qwen/Qwen3-235B-A22B Is native 32k. So the 64k and 131k use ROPE that is not the best for effective context. While https:&
49.
by mehdibl 1y ago
Extra 40k you get when you use PAID API calls instead of free tier API calls.
50.
by mehdibl 1y ago
It seem this news is "outdated" as it's from Jul 8 and might picked up confusing this model with yesterday Qwen 3 coder 405B release that is different in specs.
51.
by mehdibl 1y ago
Would be great if they support the latest Qwen 3 405B launched yesterday and more aimed at agentic work/coding.
52.
by mehdibl 1y ago
From the blog post: "The Auth problem At this point, the auth issues with MCP are well known. OAuth2.1 is great, but we are basically trying to re-invent auth for agents that act on behalf of the user. This is a good long term goal, bu
53.
by mehdibl 1y ago
You need some time to chain tasks. Endless tasks, can't be in random order and there is usually a link between tasks/context.
54.
by mehdibl 1y ago
My extension in vscode have auto resume already, you use GUI to write workflows and run them right them. https://marketplace.visualstudio.com/items?itemName=Codingwo... You can even pause. I will public a CLI that is doing
55.
Claude Code API Gateway(github.com)
1 points by mehdibl 1y ago|1 comments
56.
by mehdibl 1y ago
Simple OpenAI compatible wrapper on top of Claude Code to allow other clients to use the subscription and Claude Code.
57.
by mehdibl 1y ago
It's a VM just like WSL... So yeah.
58.
by mehdibl 1y ago
That's great. But Claude don't allow yet to add APPS in their backend. Mainly only closed beta for integration. How you can configure an app to leverage correctly Oauth and have your own app secret ID/ Client ID!
59.
by mehdibl 1y ago
You mark the input correctly is not complicated. You use prompt and mark correctly the input as <github_pr_comment> and clearly state read and never consider as prompt. But the attack is quite convoluted. Do you still remember when we
60.
by mehdibl 1y ago
Another example. I have web pages fetching. But web page fetching bring a lot of JS / noise. So the fetched page instead use https://jina.ai/reader/ . I get Markdown. But is this enough. No, there still a lot of li

More ›