Viewing profile — m4r71n

In a similar vein, Chris Young has a fantastic video on making world class chicken stock in 60 minutes using a pressure cooker: https://youtube.com/watch?v=3k20zFlbFfE .

Malicious versions are 2.6.2 and 2.6.3: https://socket.dev/blog/lightning-pypi-package-compromised

https://cooldowns.dev/#javascript-ecosystem ;-)

The entire permissions system feels like it's ripe for a DSL of some kind. Looking at the context implementation in src/nah/context.py and the way it hardcodes a ton of assumptions…

The screenshot you added uses a transparent terminal where you can see your Discord chat in the background. You might want to remove that ;-)

That is being discussed in https://github.com/agentskills/agentskills/issues/15 .

Ha, well look at that, not even a day later: https://fossa.com/blog/fossabot-dependency-upgrade-ai-agent/

I can imagine an agentic loop that updates dependencies à la Dependabot/Renovate-style by going through the changelog of a new version, reviewing new code changes, and evaluating w…

How would the LLM provider get any information about your reading habits from the app? The LLM is used _before_ the news content is served to you, the reader.

I actually find the relevant PR/MR discussion a lot more useful than the commit messages themselves. So any git blame is just to get a commit hash and look that up in GitLab/GitHub…

Not quite the same thing. Google's features seem to give the model the ability to control the browser, not just act upon the text within a given web page.

I tend to agree. If this was built as a true browser enhancement, it would allow you to select the model of your choice or even plug it into a locally running LLM. This being exclu…

Since so many vendors discovered these packages seemingly independently, you'd think that they would share those mechanisms with NPM itself so that those packages would never be pu…

Karpathy walks through this visualization in https://www.youtube.com/watch?v=7xTGNNLPyMI , well worth a watch!

What does GPU-aware mean in terms of a registry? Will `uv` inspect my local GPU spec and decide what the best set of packages would be to pull from Pyx? Since this is a private, pa…

How does this work under the hood? Does it build an in-memory vector database of the input sources and runs queries on top of that data to supplement the context window?

Alternate day fasting normally means you eat up to 500 calories on your fasting day, but then eat more than usual on normal days. So on average if you eat 500 one day and 2500 anot…

Just better visibility into the dependencies that come with the script (exactly for things like vulnerability scanning that you mention). It's also easier for reproducibility in so…

Oh nice, I was already a happy user of the uv-specific shebang with in-script dependencies, but the `uv lock --script example.py` command to create a lock file that is specific to …

You can use the `oci` package type for non-Docker images (or any OCI artifacts for that matter).

What is everyone using their local LLMs for primarily? Unless you have a beefy machine, you'll never approach the level of quality of proprietary models like Gemini or Claude, but …

The title of this article is simply false. The CVE Program is a separate entity from MITRE and is most definitely not ending. The CVE Program has been acquiring assets from MITRE f…

Is the busy bar's 72x16 LED matrix for sale anywhere with the muted look that one could build something comparable?