Viewing profile — thomas34298

> reduce the risk of data exfiltration Yet, their tools such as codex are able to read ALL FILES on my PC without explicit permission unless you spawn them within a container: http…

Does that version of Codex still read sensitive data on your file system without even asking? Just curious. https://github.com/openai/codex/issues/2847

That's the entire point of sandboxing, so none of what you listed would be accessible by default. Check out https://github.com/anthropic-experimental/sandbox-runtime and https://gi…

Codex can read any file on your PC without your explicit approval. Other agents like Claude Code would at least ask you or are sufficiently sandboxed.

If you directly ask Codex to read ~/.ssh/id_rsa, it will usually decline due to "safety concerns". However, the sandbox which the agent is running in doesn't restrict reads outside…

Interesting fact: Codex has access to all the files your current user has access to as well, even if you just opened it in the src directory.

Sam tweeted "taking care of my kid in the hospital": https://x.com/sama/status/1895210655944450446 Let's not assume that he's lying. Neither the presentation nor my short usage via…

Have you even tried it out locally and asked about those things?

>BUGFIX: Don't ignore SSL errors (sledgehammer999) > https://www.qbittorrent.org/news There should be a security notice IMO.

Changelog: https://typst.app/docs/changelog/0.12.0/

Recently, I decided to try out Claude for a month and bought the subscription right when mine for ChatGPT ended. However, after just a few days, I noticed how sluggish and inconven…

Most important changes starting November 1, 2024: - OSCP+ will replace regular OSCP with a three-year expiration (old lifetime certificates remain valid) - Removal of bonus points …

I'm looking for LLM-based web application scanners capable of finding vulnerabilities that aren't typically detected by traditional scanners like in Burp Pro. Even though LLMs are …

There is a lot of porn. X even added official rules for it: https://help.x.com/en/rules-and-policies/adult-content I don't have an iPhone, but I know that you can access it via the…

I think the same argument could be made for Twitter/X. The app stores by Google and Apple specifically disallow pornographic material, yet the app is full of it. Once you're big an…

Not everything revolves around scientific journals and their archaic rules. For my team Typst was a perfect LaTeX replacement and we've been happy ever since we switched. It is eas…

FWIW there is already partial LaTeX support for Typst via the mitex package: https://github.com/mitex-rs/mitex

I'd say a strict Content Security Policy (at least script-src 'self' WITHOUT unsafe directives) is even more important to keep the impact contained, so you'd have to put your scrip…