schmichael

12 ms·

31.
by schmichael 9mo ago
> The problem is, once you “injection-proof” your agent, you’ve also made it “useful proof”. I find people suggesting this over and over in the thread, and I remain unconvinced. I use LLMs and agents, albeit not as widely as many, and ca
32.
by schmichael 9mo ago
I don't think this is accurate. Readonly access (web searches, db, etc) all seem fine as long as the agent cannot exfiltrate the data as demonstrated in this attack. As I started with: more sophisticated outbound filtering would protec
33.
by schmichael 9mo ago
Fair, I forget how broadly users are willing to give agents permissions. It seems like common sense to me that users disallow writes outside of sandboxes by agents but obviously I am not the norm.
34.
by schmichael 9mo ago
I'm unconvinced we're as powerless as LLM companies want you to believe. A key problem here seems to be that domain based outbound network restrictions are insufficient. There's no reason outbound connections couldn't be
35.
by schmichael 9mo ago
> We TOLD you this dynamic web stuff was a mistake. Static HTML never had injection attacks. Your comparison is useful but wrong. I was online in 99 and the 00s when SQL injection was common, and we were telling people to stop using str
36.
by schmichael 9mo ago
Germany was a split country for 50 years. Korea is still a split country. I guess I have to give you Japan, although now you could say "clearly the solution is nukes" if you're just going blindly on data. Even if you think it
37.
by schmichael 10mo ago
https://source.android.com/docs/core/architecture/ipc/binder...
38.
by schmichael 10mo ago
Productivity gains are more likely to be used to increase margins (profits and therefore value to shareholders) then it is to reduce work hours. At least since the Industrial Revolution, and probably before, the only advance that has led to
39.
by schmichael 10mo ago
Citation needed? I spend $0 on AI. My employer spends on it for me, but I have no idea how much nor how it compares to vast array of other SaaS my employer provides for me. While I anecdotally know of many devs who do pay out of pocket for
40.
Fastly, Cloudflare, Netflix, Apple Propose QUIC over TCP/TLS Called QMux(datatracker.ietf.org)
4 points by schmichael 10mo ago|1 comments
41.
by schmichael 11mo ago
Thanks! That’s some nuance I absolutely missed
42.
by schmichael 11mo ago
It’s a fun demo but they never go into buildings, the buildings all have similar size, the towns have similar layouts, there’s numerous visual inconsistencies, and the towns don’t really make sense. It generates stylistically similar boxes,
43.
by schmichael 11mo ago
> Really, setting the interval balances speed of detection/cost of slow detection vs cost of reacting to a momentary interruption. Another option is dynamically adjusting heartbeat interval based on cluster-size to ensure processing
44.
by schmichael 11mo ago
If any of the super wealthy people actively promoting this fantasy actually believed it they wouldn’t be so worried about amassing wealth today. "Over abundance" talk happened during previous technological revolutions too: at best
45.
by schmichael 11mo ago
Who orchestrates the orchestrators? is the question we’ve never answered at HashiCorp. We tried expanding Consul’s variety of tenancy features, but if anything it made the blast radius problem worse! Nomad has always kept its federation lig
46.
by schmichael 11mo ago
Fair enough. I suppose there aren’t many hard real time posts these days in general.
47.
by schmichael 11mo ago
It has to be AI generated or at least edited right? The reliance on bulleted lists. The endless adjectives and declarations. ...but also the subtle... well not exactly errors, but facts I think are open to dispute? Such as: > Together, t
48.
by schmichael 11mo ago
The supposedly bad example is perfectly readable to anyone familiar with Go. A bit of refactoring into first class functions, and you'd have an easy to read, idiomatic, easy to test, well typed code base with obvious places to adjust u
49.
by schmichael 1y ago
> Benioff said he “avidly supported President Trump” http://timesofindia.indiatimes.com/articleshow/124475145.cms
50.
by schmichael 1y ago
The snippet included in the search result does not include or highlight the relevant fact. I feel like you’re not willing to take simple actions to confirm your assertions.
51.
by schmichael 1y ago
I do, and so does Google. When I googled "When was John Howard elected?" the correct answer came back faster in the AI Overview than I could find the answer in the results. The source the AI Overview links even provides confirmati
52.
by schmichael 1y ago
I'm a Go developer and this was still useful for me! Obviously Rust devs are more accustomed to more assistance from their tools than Go devs, but just about every gotcha listed is something that can happen in Go with goroutines, chann
53.
by schmichael 1y ago
Sadly capabilities are older than emacs. I’d welcome advancements here but their practical utility is clearly not a foregone conclusion.
54.
by schmichael 1y ago
vim and emacs are over 30 years old and therefore living with an architecture created when most code was trusted. Encrypting network protocols was extremely rare, much less disks or secrets. I don't think anything about the security po
55.
by schmichael 1y ago
One of the large dependencies they call out is an excellent example: pdf.js. There is no reason for pdf.js to ever access anything other than the files you wish to export. The Export to PDF process could spawn a containerized subprocess wit
56.
by schmichael 1y ago
The Simpsons Springfield Nuclear Plant Security scene in real life. https://www.youtube.com/watch?v=eU2Or5rCN_Y
57.
by schmichael 1y ago
People with motor disabilities seems like a great use case! Cooking and watching TV are two activities that benefit from voice control (due to dirty hands and remotes going missing). Nursing mothers often literally have their hands full. Lo
58.
by schmichael 1y ago
Please stop multitasking while driving. The tech seems neat and all but please stop multitasking while driving, encouraging others to multitask while driving, and building products specifically designed to encourage multitasking while drivi
59.
Saving Lives by Ignoring the Models(statesmanjournal.com)
3 points by schmichael 1y ago|0 comments
60.
by schmichael 1y ago
> So there’s really nothing meaningful here. If it’s not meaningful it should be trivial to beat right? ;) This seems like a super fun game to find the upper bound on IPv4 addresses someone can open a socket from!

More ›