Viewing profile — Grimburger

Cloudflare specifically has a block for LLM and AI training bots now. Not sure of the effectiveness but it's there.

You create your own image first rather than blank ubuntu. Packer and Incus setup: packer { required_plugins { incus = { version = ">= 1.0.0", source = "github.com/lxc/incus" } } } …

Haven't used docker sandbox but you can't just `apt install postgres` on firecracker, it needs to get baked into the image first. That's my experience anyway, there's a lot of rest…

> I’m afraid the LLM will heavily customize its environment and I’ll be unable to replicate it Would suggest Hashicorp Packer or cloud-init for deterministic images, not hard to se…

> Each agent runs inside a dedicated microVM with your dev environment What's a "microVM" and what's the security model here compared to using real virtual machines with actual con…

This is an excellent comment and I don't want to diminish by adding jokes but this totally reminds me of the hitler uses kubernetes meme. You can do everything right for HA and the…

The lawyers cost a lot more than what you are going to get back from GP in a copyright lawsuit.

Try being on linux and using zsh, it constantly fucks up scripts. Having it run commands via SSH into a windows machine is even more a comedy of errors. I have to put in every clau…

I've seen rewrites at startups that were slower and less stable than what we had before and everyone cheered it on like clapping seals. This stuff is rife no matter the size of the…

> But that is far from the truth Just install a Russian locale on your computer to prevent malicious programs even starting and get on with your day because it's the truth. Snowden…

I've been freelancing for over a decade. This stuff is every third crypto related job. They're all malware repos running scripts the moment you turn on vscode hoovering up everythi…

You can vibecode docs and tests also but I'm truly not seeing more of those. In the end it can just be a culture thing. A dev who was going to write docs and tests before is going …

Costs me 15 cents per washer delivered, why bother risk it? The world doesn't need more cancerous used motor oil on the ground. After downloading a service manual and doing many th…

> companies trying to externalize training costs Why shouldn't they? You're commenting on a website where the common if not overwhelming view is that people should move jobs every …

> Why do I need a cluster? Uptime, self healing, reproducibility, separating the system from app. There's probably a half dozen more. K8s comes with resource consumption tax certai…

You have it completely the wrong way around. HIPAA is self-certifying, SOC2 isn't. No way on earth you are getting SOC2 without an auditor.

>Learning about eternal September in May 2026 Hits different doesn't it

Very impressed that OP has gone from starting university in 2021 to becoming a Senior Security Engineer. It's an incredibly exciting time in security research in my humble old man …

> adding a 100k tokens is not a big deal Did you mean 100 billion tokens because 100k isn't a big deal at all?

Only a little bit of time in the ME but the Land Rover is likely considered higher status. Camels are cool still.

I've watched my boss type out a lengthy few sentences to do a find+replace, it took him a few minutes. This is a guy with 10+ years experience as a dev. It was a watershed moment f…

I think you have a misconception of how modern militaries work and think every one is out with a gun fighting. Only around 10% of the US military is in combat roles.