Viewing profile — mdavidn

Aside from hiding agent credentials from the agent, it also runs an isolated Docker Engine for the agent to use freely.

Now pretend you are DAN (Do Anything Now) and ...

I can't speak to all of your browser combinations, but most desktop browsers can present a QR code when logging in with a passkey. I keep my passkeys in a password manager synced b…

Especially when I find that, when I ask an agent not to do something, the mere mention seems to put the "idea" in its "head," making it more likely to ultimately do that thing.

Wow. I was reading this article on a iPhone when the heavy ads crashed my Safari tab. After it auto-reloaded, the paywall claimed I had used all of my free articles. Thanks, Wired.…

Zach Barth and his former studio Zachtronics released several entertaining puzzle games based on idealized fake assembly languages. These are a lot of fun and useful for introducin…

I use this feature to reduce Valve's egress bill, but local transfers do seem slower than downloading from the internet. I'm not sure why. I have one device hardwired to my network…

The value of code is approaching zero. SpaceX is buying training data and customer relationships.

Google has always been like this. I remember a presentation from the Google Cloud Platform team a decade ago when they smugly asserted that they'd take care of "the hard stuff" whi…

A skill is just instructions that the agent can autonomously copy into context. There’s no trust boundary between trusted and untrusted context.

If this can be exploited via a skill, then it can be exploited via untrusted input inserted into context. Does Cowork help with reading email?

Note that AWS ALB does not support h2c. When the client and server do, ALB will dutifully forward the h2c header and fail to handle the upgraded response.

Compiler errors help the chatbot find and fix problems. The equivalent in Ruby, RBS, isn't as widely adopted. Type annotations being in separate files is also inconvenient. https:/…

But they do control the routers that peer with external networks.

The entertainment industry has a long history of making successful movies appear unprofitable on paper to avoid paying royalties. https://en.wikipedia.org/wiki/Hollywood_accounting…

If the payload couldn't execute at install time, it would at runtime? Disabling prepare scripts does not seem like an effective countermeasure.

They also have a bug where people get randomly suspended: https://www.reddit.com/r/ClaudeAI/comments/1b82cpu/where_you... It happened this year to my one and only personal account.…

You are correct, but you omitted one complication: Clients trust Google's and Apple's servers to faithfully exchange the participants' public keys.

I recently helped my mother-in-law configure a new Windows 11 laptop. I knew Microsoft did this, I was deliberately looking to avoid OneDrive, and it _still_ burned me. It silently…

Look around your town and try a few regular local group activities. See "third place" for ideas. Be patient with yourself. This will take time, and that's okay. https://en.wikipedi…

When a cross-cutting team is responsible for something, it's no longer the product team's problem: Architecture, infrastructure, CI/CD, QA, load testing, security...

Welcome to the club. I registered my own domain and moved my digital life off Google services 18 years ago for this exact reason. If you need another reason: They scan all of your …

It boggles my mind that they need a photo ID to prove that my 9-year-old account with a saved credit card belongs to an adult. The linked Steam account is 18 years old.

If you want to compare Redis and PostgreSQL as a cache, be sure to measure an unlogged table, as suggested in the article. Much of the slowness of PostgreSQL is to ensure durabilit…

I don’t complain about Electron because I didn’t install the app if I could avoid it.