Viewing profile — ashishb

The archaic model where every tool gets full access to your home directory was never designed for the scenario where a single npm install will install and execute 100s of packages …

This is true for all CLI tools on Mac and Linux (and other operating systems from that era). Historically, everything you ran was trustworthy. Android and iOS were invented in an e…

> The repo you’re working on, sure. But all files? Yes, any tool, including any coding agent, has access to all files $USER has access to. Sandbox it explicitly to give access to o…

> That every other vowel letter also can is English's low level of phoneticism The level of phoneticism between English language and its latin script is not evenly spread. For exam…

> It's Ram, not Rama, it's yog, not yoga'... And they have no idea what schwa deletion is. It is neither. The fundamental issue is that there is no way to represent the schwa sound…

Many of my friends are surprised that I purchase mp3s and store them in Google Drive instead of listening on Spotify or YouTube. Heck, I even wrote a player for this [1] The proble…

> Are you actually claiming English isn't a mother tongue to anyone? I gave a specific example where neither the coffee wholesaler nor the buyer probably operates day to day in Eng…

> Sanskrit was widely spoken and understood just like Latin or Avestan, in its heyday. Otherwise it wouldn’t be part of the liturgical traditions of Buddhism, Jainism and Nastika t…

> What about Prakrit and Punjabi? There is no official "Prakrit", by definition of the term itself. "Prakrit" just means "natural" and the way I understand it, was the term for all…

Fun fact: the famous "Sentosa" island in Singapore is a spelling variation of the same word.

I think most organizations don't want to increase their Java usage. And the reason is not technical. Technically, it is a great language. Legally, it feels risky to most.

Languages do matter. And I think the only sensible backend languages when starting a new for-profit project is Python, Go, and Rust for 99% use-cases. In other cases, third-party p…

> Because I'm confident nothing will happen if it does Well, best of luck. 1. Amazon has shipped backdoored packages - https://aws.amazon.com/security/security-bulletins/AWS-2025-.…

> But in this particular case isn't the problem that it's sending everything in the sandbox? If a CLI is touching certain files, they are likely to be leaked one way or the other. …

And I run most of them inside sandbox now. Why would you let a markdown linter access your ssh keys?

There is a reason I run all such CLIs inside a sandbox [1] giving limited directory access. Imagine if the CLI pulled your SSH keys or other sensitive information by mistake? Progr…