Viewing profile — novaleaf

that's pretty nice illustration work, I'd agree, keep doing it :D

Frontier models can hack you, we should have access to tools assisting defense. I ranted about this in a prior thread [1] Claude doesn't have a "Security whitelist" for small biz. …

as others mentioned, it sounds like "Off to Be the Wizard". Unfortunately I wouldn't call it a great series. It starts off strong but drags. IIRC I got through half of the second b…

With Openai and Anthropic, you can opt-out of training. Kimi you can't.

> I guess part of it is also that I don't mind doing 'hand-edits' like for example LLMs love to say "// so and so removed" I just go and remove that manually later rather than bein…

Agree, out of the two, I can get Codex to design and implement security systems (Fable just refuses to discuss). I've only used K3 a little bit, but I found that being able to disc…

Yeah it's not cheap, it's just the normal $200 subs for each.

I applied for individuals. I did their verification steps and answered questions in a few minutes, so that was indeed easy. The problem is that was all that happened. No followup, …

keep in mind that Kimi trains on your data, so if you care about that, sandbox what it has access to.

I think security is an integral part of any production software, and if you get value from LLM's in software development, it seems likely they can be useful in security too. My poi…

I don't think it's nefarious, but the end result leads to a pretty frustrating experience by anybody needing actual security work. (and without the organizational deep pockets to o…

Some irony: I subscribe to Claude and Codex (20x plans), and now Kimi. Why Kimi? because K3 is the only frontier model I can have a serious conversation with about my product's sec…

Reminds me of the gain-of-function, COVID lab leak hypothesis. It seems like humanity just can't stay away from Pandora's box.

frontier vs "not quite" :D

makes me wonder if the starbucks story is fiction too :P

no, I didn't get access to sol until a few hours ago. I just have my claude protocol files linked to inside codex. trying Sol this morning for the first time, so I can't really com…

I sub both codex and claude at 20x. I like opus+fable more than gpt5.5 because it seems gpt tries to finish tasks by leaving any ambiguity unresolved. claude seems better at surfac…

I think the story was Starbucks -> Seattle's Best Coffee, not McD's --> BK. but it does work I guess.

reminds me of SBC's (Seattle's Best Coffee) strategy, which was decidedly not Nash: put a store across the street from every Starbucks.

it works by ppl harvesting low ranked submissions and resubmitting them via a (unofficial) voting ring.

I used to live in Thailand, and over the last 10 or so years it seems that the kind of DIY content you find on Youtube has had a positive effect. Before then it was difficult to fi…

yeah, for example, just send a hash of the domain used. but then maybe people would say anthropic is spying on everyone, instead of targeted spying...

obligatory link: https://en.wikipedia.org/wiki/Parallel_construction

it was released a few hrs ago as "Fable 5". it's an incremental improvement over Opus 4.8.

just yesterday I felt that claude code was being aggressive in it's defense, so I lead my response with "Spicy Take! Here's why I think the bug is happening...." Because of syncopa…