Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Codex Security

github.com

Post reply on HN
Print view View original

251–257 of 257 posts

Re: Codex Security

#251

Post by dlahoda »

vsl wrote: post #186
dangelosaurus wrote: post #78

Earlier quoted context omitted.

By default, you can sign in with your ChatGPT/Codex account or use an OPENAI_API_KEY. It also does not require cyber registration but it can help if you encounter refusals. If you give it a try, please feel free to message me, I would love your feedback.

Thing is, you WILL encounter refusals with Sol doing anything remotely adjacent to security work. Which for Codex Security is kinda... problematic. Just a few days back, I was reviewing some small bit of legacy DSA signature verification code, to get a sense of how safe it is to reuse - purely defensive, precautionary work and the context of it was there. But I simply wasn't able to use Codex Security: it threw refus…

yeah, Sol failed to review my pr to my code of my app this way. day after, my openai 200usd subscription down to 20usd one. i started to use my 200usb subscription of google gemini a lot more. got openrouter account and put 200usd here. started to use glm.

Re: Codex Security

#252

Post by sneak »

customguy wrote: post #166
sneak wrote: post #129

Earlier quoted context omitted.

It’s not corruption to simply hire the people you subjectively feel a preference for working for, instead of objective criteria. It’s not public tax funds that fuel salaries, it’s your own money. You get to spend it how you like. Yes, many jurisdictions have outlawed arbitrary discrimination against protected classes (eg race), which is an entirely different matter, and not what we are discussing here.

Yeah, and it's not necessarily mobbing to only tell people you really like about your party. But where it occurs, people never admit it to themselves and justify it in such a way, so that justification is meaningless. All wars of aggression are called a defensive emergency measure. Hundreds and thousands and rarely would anyone say "we'll take this because we can and you're helpless". No matter how glaringly obvious…

You seem to be implying that it’s somehow wrong or bad to hire people that you like versus people that you don’t.

Lots of people prefer others who are like themselves.

Re: Codex Security

#253

Post by ipnon »

tripleee wrote: post #94
ipnon wrote: post #92

Earlier quoted context omitted.

Yes, now that humans write less than 99% of code, the most important criteria for a language isn't readability, which I'd argue was always Python's main selling point, but the underlying runtime. There are practical limits to how fast a Python program can run either under I/O or CPU bound compared to other popular and mature languages with extensive libraries, like Elixir, Go or C++, depending on your use case.

> now that humans write less than 99% of code, the most important criteria for a language isn't readability please tell me you're reading the AI code

I actually don't read any code! For generation I use simulations to ensure satisfactory error rates, for deterministic code I use test suites, and for user interfaces I use good ol' intuition! So I guess you could say I just write extra code that makes reading the code unnecessary. I find it quite strange to be honest! But this is the most effective way for me to ship now.

Re: Codex Security

#254

Post by orangelimesoda »

rustystump wrote: post #141
devmor wrote: post #130

Earlier quoted context omitted.

I see where you're coming from, but as someone who regularly interviews engineers, I don't care about specific tech stacks when evaluating a candidate very much either. I can only think of two positions I've worked in where such a thing really mattered. A good engineer can adapt and catch up without a lot of lead time. For a contractor, I'd be much more specific - but for someone who's going to join my team? I'm look…

This is insane to me. Not every engineering job is entry level or as simple as most fullstack crud. Deeper into industry you find highly specific well defined positions for a given domain. Soft skills matter more the higher the ladder but id take a killer senior who can be difficult over a team of mediocre staff engineers.

Same here. Most difficult people just need a challenge and a little recognition. Give them an area of ownership and you get both.

So-called difficult people who are actually very talented have clashed with middle management types for a long time.

Re: Codex Security

#255

Post by GustavHartz »

TLDR on how it works: It's a small stack of skill files and some JS code that starts a large number of Codex sessions. They all get the prompt and the same scope with a limited set of tools. Not one prompt in the repo contains security advice, performance is obtained only through scaling the number of agents looking at the code
Post reply on HN