Earlier quoted context omitted.
In most cases security is not a matter of adding anything in particular, but a matter of just not making specific types of mistakes.
Is there ever a reason to store passwords in plaintext instead of as a hash? Even in a prototype.
GPT-5.3-Codex
561–570 of 634 posts
Re: GPT-5.3-Codex
#562Earlier quoted context omitted.
We'll see. The first two things that they said would move from "emerging tech" to "currently exists" by April 2026 are: - "Someone you know has an AI boyfriend" - "Generalist agent AIs that can function as a personal secretary" I'd be curious how many people know someone that is sincerely in a relationship with an AI. And also I'd love to know anyone that has honestly replaced their human assistant / secretary with a…
People have been in love with machines for a long time. It's just that the machines didn't talk back so we didn't grant them the "partner" status. Wait for car+LLM and you'll have a killer combo.
Re: GPT-5.3-Codex
#563Earlier quoted context omitted.
You should look into Kilo Pass by Kilo Code ( https://kilo.ai/features/kilo-pass ). It's basically a fixed subscription and your credits roll over each month, and you get free extra credits too which are used up first before paid credits. It's similar to paying for Cursor except the credits roll over which is why I'm contemplating moving to it, because I don't want to be locked into any one LLM provider the way Claud…
I was wondering how KiloCode Kilo Pass pricing compared to OpenRouter's top-up pricing, and did some digging and discovered the main difference is that OpenRouter provides a standard API key (sk-or-...) that works in any application (LangChain, curl, your own Python apps), while Kilo Pass credits are tied to the Kilo Gateway, which is designed to power the KiloCode Extension (VS Code/JetBrains) and CLI. KiloCode does…
Re: GPT-5.3-Codex
#564Can someone explain the difference between this and VSCode agent chat? Except the fact that it's a separate app?
Re: GPT-5.3-Codex
#565Earlier quoted context omitted.
> Yeah, these benchmarks are bogus. It's not just over-fitting to leading benchmarks, there's also too many degrees of freedom in how a model is tested (harness, etc). Until there's standardized documentation enabling independent replication, it's all just benchmarketing .
For the current state of AI, the harness is unfortunately part of the secret sauce.
Re: GPT-5.3-Codex
#566It is absurd to release 5.3-Codex before first releasing 5.3. Also, there is no reason for OpenAI and Anthropic to be trying to one-up each other's releases on the same day. It is hell for the reader.
Why is it absurd?
Re: GPT-5.3-Codex
#567Earlier quoted context omitted.
That just seems like a UI difference. I've always interrupted claude code added a comment and it's continued without much issue. Otherwise if you just type the message is queued for next. There's no real reason to prefer one over the other except it sounds like codex can't queue messages?
The problem is if you're using subagents, the only way to interject is often to press escape multiple times which kills all the running subagents. All I wanted to do was add a minor steering guideline. This might be better with the new teams feature.
When they ask approval for a tool call, press down til the selector is on "No" and press tab, then you can add any extra instructions
Re: GPT-5.3-Codex
#568Earlier quoted context omitted.
A significant portion of engineering time is now spent ensuring that yes, the LLM does know about all of that. This context can be surfaced through skills, MCP, connectors, RAG over your tools, etc. Companies are also starting to reshape their entire processes to ensure this information can be properly and accurately surfaced. Most are still far from completing that transformation, but progress tends to happen slowly…
[flagged]
Also what are you even proposing/advocating for here?
This meta-state-of-company context is just as capturable as anything else with the right lines of questioning and spyware and UI/UX to elicit it.
Re: GPT-5.3-Codex
#569Earlier quoted context omitted.
I'm personally 100% convinced of the opposite, that it's a waste of time to steer them. we know now that agentic loops can converge given the proper framing and self-reflectiveness tools.
> given the proper framing This sounds like never. Most businesses are still shuffling paper and couldn’t give you the requirements for a CRUD app if their lives depended on it. You’re right, in theory, but it’s like saying you could predict the future if you could just model the universe in perfect detail. But it’s not possible, even in theory. If you can fully describe what you need to the degree ambiguity is remov…
Trying to get my company to realize this right now.
Probably the most efficient way to work, would be on a video call including the product person/stakeholder, designer, and me, the one responsible for the actual code, so that we can churn through the now incredibly fast and cheap implementation step together in pure alignment.
You could probably do it async but it’s so much faster to not have to keep waiting for one another.