Viewing profile — apgwoz

16MB requirement! I wish all stuff was lightweight, like this! We’ve lost our way…

So sad. :( Om was off my radar for the last 10 years or so, and then I recently encountered an article he wrote ( https://om.co/2023/02/05/why-modern-leica-m-is-a-great-lands... ) …

How many layoffs does a company have to do before realizing it’s in their best interest to start asking other companies to take the employees they don’t want to employ anymore? Als…

It’s absolute baseline, but yes, it relies entirely on the platform’s permissions model, the administrator who assigns permissions, and the application authors to not create vector…

The Ed Zitron rant will be phenomenal.

Ah. The article has since been updated to point out that it’s not plaintext, but encrypted at rest (which would be expected). OK.

You’re thinking too much. When you run the app, the system decrypts the secrets and makes them available as env vars (or some other mechanism). In an admin ui, you list the names o…

Not at all. I was simply making a joke on the parallel exploration of states.

You pretty much have to assume someone is going to put sensitive data in an input like this. Encryption by default is the only sensible choice.

Yeah, but… what if?

And his successor John Turnip.

Yes! I’ve been trying (and failing!) to get people to understand this. Build the high leverage tools while the tokens are cheap. Unfortunately, I haven’t figured out the right set …

As another data point, I pay for Pro for a personal account, and use no skills, do nothing fancy, use the default settings, and am out of tokens, with one terminal, after an hour. …

It takes longer, but a spade is better than bare hands. The goal is to speed up finding valid vulnerabilities, and be faster than humans can do it.

I use the models to look for vulnerabilities all the time. I find stuff often. Have I tried to do build a new harness, or develop more sophisticated techniques? No. I suspect there…

Why? They claim this small model found a bug given some context. I assume the context wasn’t “hey! There’s a very specific type of bug sitting in this function when certain conditi…

The benefit here is reducing the time to find vulnerabilities; faster than humans, right? So if you can rig a harness for each function in the system, by first finding where it’s u…

There’s no doubt that stuff is print making. My point is that there are multiple ways of doing (within each of these): relief, Intaglio, lithography, screen printing, offset. So if…

I like your stuff! I’ve been coveting a plotter for a while, but I’m pretty sure it won’t get used enough to justify the expense. :/ I do find the term “printmaking” hilarious beca…

You _can_ do trampolines, but that is kind of infectious, or needs to be very explicit with extra code, etc.

It’s also deterministic, unlike llms…

> That's like a truck company using horses to transport parts. Weird choice. Easy way to claim more “horse power.”

https://sigusr2.net/lemons.html

The point this article makes, that suddenly agents can do the work of customizing free software, completely makes sense. But, the reality is that the Free Software movement is oppo…