Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Codex Security

github.com

Post reply on HN
Print view View original

101–110 of 257 posts

Re: Codex Security

#101

Post by [deleted] »

orangelimesoda wrote: post #56
dangelosaurus wrote: post #13

Hey HN, Michael here, co-founder of Promptfoo and one of the people working on the Codex Security CLI at OpenAI. Thanks for checking this out and for flagging the auth issues. We just open-sourced it, and there's still plenty for us to improve. Expect the product to evolve quickly. If you try it, I'd really appreciate hearing what works well and what you think we should improve. Happy to answer questions here. CLI do…

> Have experience shipping production full-stack products across modern web frontends and backend services. I'm amazed that the requirements are so low (or at least this vague) for jobs at companies like these. Has anyone else had the experience of going to an interview and feeling like you were never asked any qualifying questions? All the questions were easy, your answers were straightforward, you "got them right",…

[deleted]

Re: Codex Security

#102

Post by oefrha »

hellohello2 wrote: post #96
gregwebs wrote: post #41

Just ran it on a small repo. It ran for almost an hour and then got interrupted. It drained half my weekly usage on a Pro plan. npx codex-security scan . [00:00] Preparing scan [00:00] Authentication: stored Codex credentials. [00:03] Preparing scan [01:20] Running scan [01:20] Preflight: worker delegation supported (up to 8 worker slots). [52:47] Running scan codex-security: Could not save the Codex Security scan: R…

Pro is 10$ a month. You get what you pay for lol.

No, Pro is $100 or $200/mo. Even Plus is $20/mo. Where's this $10/mo Pro plan?

Re: Codex Security

#103

Post by paulddraper »

gregwebs wrote: post #41

Just ran it on a small repo. It ran for almost an hour and then got interrupted. It drained half my weekly usage on a Pro plan. npx codex-security scan . [00:00] Preparing scan [00:00] Authentication: stored Codex credentials. [00:03] Preparing scan [01:20] Running scan [01:20] Preflight: worker delegation supported (up to 8 worker slots). [52:47] Running scan codex-security: Could not save the Codex Security scan: R…

So it drained $5?

Can’t speak to the results, but the cost isn’t high.

Re: Codex Security

#105

Post by corndoge »

solid_fuel wrote: post #99
jameshart wrote: post #63

Earlier quoted context omitted.

This sounds like it’s just an app development role, not a security analysis position, so I’m not sure what your complaint is.

Professional app development requires an understanding of security.

I think the evidence contradicts you at this point

Re: Codex Security

#106

Post by cedws »

schrodinger wrote: post #90

Quick tangent if you’re willing to humor me… I've been noticing that many new projects that would have been written in Python or Node a year ago are starting to be written in Go, Rust, etc. Theory: people realized there’s little benefit to Python for agents. As Zep wrote, an “agent is a long-running, concurrent, I/O-bound process that spends most of its time waiting on a model, a tool, or a human[1]” — not a particul…

Is that so? I feel like I’m seeing more Python and TypeScript than ever, especially when it comes to AI tooling, which is disappointing.

I can’t fathom why anybody would want to continue working with dynamically typed languages when they can now get types for free.

Re: Codex Security

#108

Post by corvad »

I am slightly confused at what this tool adds over just a good system prompt. Does this hit cyber limits as well or is that the main selling point?

Re: Codex Security

#109

Post by dannyw »

teaearlgraycold wrote: post #65
ymir_e wrote: post #59

Earlier quoted context omitted.

FYI: Kimi K3 is relatively expensive on open router API pricing for agentic tasks, or at least that's been my experience playing around with it.

They just opened the weights. I expect competition from various providers will drop the price a bit. But you're right. I'd hope a model closer to GLM 5.2's price would be sufficiently useful.

A license and presumably revshare is required for large scale inference as a service of Kimi K3. There's clearly something going on right now with every router at the same or higher price as the Moonshot list price.

So I wouldn't count on competition if $/mil token is actually set by Moonshot, but I would expect $/tok to drop when there's a more competitive frontier open weight model.

Post reply on HN