Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Darwin – Automate Your GitHub Project with AI

darwin-ai.dev

Post reply on HN
Print view View original

41–50 of 67 posts

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#41

Post by justinclift »

throwaway63820 wrote: post #23

I like it! I built a command line AI coding assistant for my projects ( https://codemancer.codes ) when GPT-4 first came out, but still think this space is wayyy under explored given the possible capabilities.

Although it has a mention of "GPL" at the bottom of the readme in your repo:

https://github.com/0xmmo/codemancer/

... it doesn't have anything else.

Generally the text of the GPL license is placed in a file (named "COPYING" or "LICENSE") in the root directory of the repo. Might want to add it so its super clear. :)

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#43

Post by nox101 »

justinclift wrote: post #40
mlamina wrote: post #15

Earlier quoted context omitted.

I get that! In order to check out the repo, these permissions are required though. What could I do to make you feel comfortable granting those permissions?

> What could I do to make you feel comfortable granting those permissions? Literally nothing. Ain't gunna happen. :( :( :(

I wish all devs on github had this attitude. 9 out of 10 github integrations ask for blanket permission to do everything to all repos and 4 out of 5 library devs give them those permissions. It's a a bunch supply-side breaches waiting to happen.

IMO, I think I feel like github should be ashamed for even making it possible to ask for blanket permissions. I think they should have designed their permission system to make it harder to do such a thing. Like maybe it shows a list of repos and asks "which ones, which permissions per, etc...". Not sure if that's enough but I think they need to do more.

As it is, the easiest path for a company to integrate with github is to ask for blanket permissions because then they can setup and/or add any hooks etc automatically. No work on the user's part. But, that contributes to making the entire infrastructure of the world less secure (because much of the world's infrastructure depends on these repos) and it feels irresponsible for github to indirectly encourage it.

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#44

Post by mlamina »

haswell wrote: post #18
mlamina wrote: post #15

Earlier quoted context omitted.

I get that! In order to check out the repo, these permissions are required though. What could I do to make you feel comfortable granting those permissions?

Complete transparency and clarity about how data is used, stored, what systems get to see it, and minimizing privileges would be a starting point IMO. Ask yourself the same question: what would make you feel comfortable handing the keys to your GitHub account to me, haswell, for a tool that I decide to share here?

Thank you! Based on the feedback I saw here, I'll create some diagrams and more details about how things work under the hood. Will also work on the privileges issue.

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#45

Post by mlamina »

bbor wrote: post #35

As someone who’s also solo-employed on AI development, I love your work based on the copy - will try when I get home. Please, tho, do some thinking about safety if you haven’t. There’s a lot that can go wrong between “nothing” and “paperclip apocalypse”, and I think the autonomy you’re giving machines here should only be done with great care. https://www.lesswrong.com/posts/kpPnReyBC54KESiSn/optimality...

Thank you! I've been so busy trying to build my idea that in this early stage, AI safety hasn't been top of mind. The comments here show that this clearly needs to be a top priority moving forward.

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#47

Post by justinclift »

mlamina wrote: post #44
haswell wrote: post #18

Earlier quoted context omitted.

Complete transparency and clarity about how data is used, stored, what systems get to see it, and minimizing privileges would be a starting point IMO. Ask yourself the same question: what would make you feel comfortable handing the keys to your GitHub account to me, haswell, for a tool that I decide to share here?

Thank you! Based on the feedback I saw here, I'll create some diagrams and more details about how things work under the hood. Will also work on the privileges issue.

Please make sure it doesn't request access to private repos. That would be far more considerate of your potential users.

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#48

Post by erhaetherth »

nox101 wrote: post #43
justinclift wrote: post #40

Earlier quoted context omitted.

> What could I do to make you feel comfortable granting those permissions? Literally nothing. Ain't gunna happen. :( :( :(

I wish all devs on github had this attitude. 9 out of 10 github integrations ask for blanket permission to do everything to all repos and 4 out of 5 library devs give them those permissions. It's a a bunch supply-side breaches waiting to happen. IMO, I think I feel like github should be ashamed for even making it possible to ask for blanket permissions. I think they should have designed their permission system to mak…

FWIW, when I integrate APIs, I always try to ask for as little as possible. Years ago I was trying to integrate some 3rd party logins and they're all trying to give me the user's email address. I'm like I don't even need that, just give me a unique identifier I can throw in my DB. Nothing more.

Better yet, I should be able to request a list of "required" permissions and "optional" permissions. Sometimes optional stuff is handy for optional features or to prefill stuff for the user to make it easier on them but not required for the app to function.

Re: Show HN: Darwin – Automate Your GitHub Project with AI

#49

Post by pests »

throwaway63820 wrote: post #23

I like it! I built a command line AI coding assistant for my projects ( https://codemancer.codes ) when GPT-4 first came out, but still think this space is wayyy under explored given the possible capabilities.

Have you checked out aider-chat? Seems very similar to what you're working on.
Post reply on HN