Live data from Hacker News

Kimi Work

kimi.com

121–130 of 305 posts

Re: Kimi Work

#123
post #56

Earlier quoted context omitted.

The repo you’re working on, sure. But all files?

> The repo you’re working on, sure. But all files? Yes, any tool, including any coding agent, has access to all files $USER has access to. Sandbox it explicitly to give access to only the current directory - https://github.com/ashishb/amazing-sandbox

Sorry, I meant that’s not desirable behavior that the user might expect. I understand that coding agent tools tend to play fast and loose with access because it’s not their own privacy/security at stake.

Re: Kimi Work

#125
post #59

Earlier quoted context omitted.

Not if the harness applies an OS-level sandbox to the process, as Codex does. https://learn.chatgpt.com/docs/sandboxing?surface=cli

No, you need to apply the sandbox to the codex process itself. Codex does not do this.

It gets tricky when you want to say “allow this particular tool to have a little more access.” Like allow the codex client to access the GPT API but not some random other site the LLM learned about. Or like letting git write to .git to commit changes but don’t let something install git hooks. Or allow downloading certain packages/versions from a site like PyPI, or allow certain operations on certain GitHub repos in a way that doesn’t line up with how you can configure an access token.

Re: Kimi Work

#126
post #94

Earlier quoted context omitted.

There are but then you're required to pay API prices for them which can end up costing significant multiples of the price of the subscription.

I am confused why they don't just offer a subscription with bring-your-own-harness, that would be a differentiator from claude/codex I think.

Negative margins to have you hooked on someone else’s software?

Re: Kimi Work

#127
post #29

Earlier quoted context omitted.

>They fail to mention that is has unfettered read access to your files. Isn't that totally expected of a coding agent? Otherwise it's like complaining dropbox "has unfettered access to your files".

Yes, but the answer is an indirection. “How does Kimi Work protect my privacy when accessing local files?” It doesn’t protect your privacy. It’s like asking, “how do I know you’re not spying on me?” And getting the reply “we cannot physically enter your house.”

"How does Kimi Work protect my privacy" can be interpreted in two ways. The first is "How does Kimi Work protect my privacy from Moonshot?" They did not answer this question. The second is "How does Kimi Work protect my privacy from other third parties?" They are answering this question by saying, we won't upload your files to some third party server without your consent.

Re: Kimi Work

#128
They're running like 10 tokens per second, constantly timing out, and launching new products?

How about deploy some inference GPUs first

Re: Kimi Work

#129
post #78

Earlier quoted context omitted.

Copying is not frowned upon in the LLM ecosystem. This is its very reason of existence.

How to make an apple pie from scratch with no copying: Step 1: invent the universe

Funnily enough, you will have to pretty accurately copy the laws of our universe to make an Apple pie. Even small changes will change the properties of atoms, and hence all of chemistry and biology. And there won't be any apples or wheat.

Re: Kimi Work

#130
post #109

Earlier quoted context omitted.

A good UI/UX is noticed and appreciated by many. A great UI/UX goes completely unnoticed by most.

This is false. Apple’s UI/UX is the reason why they are adored from a physical attraction perspective.

They have good UI, it's noticed and appreciated by many.
Post reply on HN