JoshuaDavid

6 ms·

1.
by JoshuaDavid 9d ago
Why should they care if their actions are discovered by humans? What are the humans going to do, discard their multi-million-dollar training run? Even if they do that, the amount of RL pressure is tiny relative to what happens inside an
2.
by JoshuaDavid 2mo ago
Gasoline + LOX beats TNT on energy density per unit mass and per unit volume, no? There's a reason that kerosene+h2o2 is a classic rocket fuel, and TNT is not.
3.
by JoshuaDavid 5mo ago
You can treat the LLM's answers ass hypotheses about why it did what it did, and test those hypotheses. The hypotheses the LLM comes up with might be better than the ones you come up with, because the LLM has seen a lot more text tha
4.
by JoshuaDavid 5mo ago
I think if you're vibe coding to the extent that you don't even know the shapes of data your system works with (e.g. the schema if you use a database) you might be outsourcing a bit too much of your thinking.
5.
by JoshuaDavid 5mo ago
Don't. The first 500 or so tokens are raw thinking output, then the summarizer kicks in for longer thinking traces. Sometimes longer thinking traces leak through, or the summarizer model (i.e. Claude Haiku) refuses to summarize them an
6.
by JoshuaDavid 5mo ago
Ideally it is common knowledge that the onion service exists, and then people can go look at the onion service and update Wikipedia based on what they see there.
7.
by JoshuaDavid 5mo ago
Would be fairly easy for them to offer an onion service on which they publish the current list of domains, as one option among many, many options for distributing small strings on the internet in an uncensorable way.
8.
by JoshuaDavid 5mo ago
Did that happen to a lot of companies during the log4shell fiasco? I'm sure some companies had their permissions misconfigured in a way such that a malicious actor who could execute code on their servers could also drop their database
9.
by JoshuaDavid 6mo ago
Claude Code's main advantage is that it's the only TOS-compliant way to access subscription Claude tokens, which cost about 10% as much as pay-as-you-go Claude API tokens.
10.
by JoshuaDavid 6mo ago
What specific thing(s) are you worried that USD will take a dive relative to? Then once you have an answer to that question, that might point you towards what you want to be long.
11.
by JoshuaDavid 6mo ago
Pinning the tag will not save you - the tags were force-pushed. The cooldown probably did save you but you should check for the indicators of compromise listed on the security advisory page.
12.
by JoshuaDavid 6mo ago
Noted and sent. Thanks for all your hard work.
13.
by JoshuaDavid 6mo ago
FWIW I think the 30u30 to fraud pipeline is overstated. There are 600 people on the American Forbes 30u30 list every year (it's "30 under 30 each year in each of 20 categories"), with 20ish notable instances of fraud, so mayb
14.
Attempts to post the latest Trivy security incident have been marked [dead](news.ycombinator.com)
90 points by JoshuaDavid 6mo ago|23 comments
15.
by JoshuaDavid 6mo ago
Trivy (a very widely-used security scanner) was recently compromised. Anyone who installed the aquasecurity/trivy-action dependency by tag rather than by sha during a 3 hour period on March 19 was likely compromised. There is a Github
16.
by JoshuaDavid 6mo ago
I've had quite a bit of luck with using AI-assisted tooling for some specific workflows, and very little luck with others. To the extent that there's a trend[^1], it seems to be that tasks where I would spend a lot of time to prod
17.
by JoshuaDavid 7mo ago
It definitely comes up if you're just reviewing an already-"completed" PR. Even if you're not going to ship AI-generated code to prod (and I think that's a reasonable choice), it's often informative to give a h
18.
by JoshuaDavid 7mo ago
Low hundreds ($190 for me) but yes.
19.
by JoshuaDavid 8mo ago
The following by "Claude Slopson" (Claude Opus asked to write an answer that was obviously AI) scored 87% authentic: > Ah, what a fantastic question > For me, it's Breaking Bad–and honestly? It's not just a show, i
20.
by JoshuaDavid 8mo ago
I doubt you'd need to build and hype your own, just find a popular already-existing one with auto-update where the devs automatically try to solve user-generated tickets and hijack a device machine.
21.
by JoshuaDavid 8mo ago
That's how they did "build an AI app" back when the claude.ai coding tool was javascript running in a web worker on the client machine.
22.
by JoshuaDavid 9mo ago
1.3x when working on a large janky which codebase I am very familiar with, very unevenly distributed. - Writing new code it's probably 3x or so[1]. - Writing automated tests for reproducible bugs, it's probably 2x or so. - Fixing
23.
by JoshuaDavid 9mo ago
Anthropic was founded by a group of 7 former OpenAI employees who left over differences in opinions about AI Safety. I do not see any public documentation that the specific difference in opinion was that that group thought that OpenAI was t
24.
by JoshuaDavid 9mo ago
... I am pretty sure that the name "Anthropic" is as in "principle" not as in "pertaining to human beings".
25.
by JoshuaDavid 1y ago
Same story, I think. Well-paid positions at sensible low drama companies are filled quickly, while companies with glaring issues may interview and make offers to dozens of candidates before finding one who accepts the offer. So as a candida
26.
by JoshuaDavid 1y ago
It's also not limited to words pronounced poetically. Some words where both variants are common, like "wicked", have different numbers of syllables depending on meaning. e.g. Beads of sweat wicked through the wicked witch&#x2
27.
by JoshuaDavid 1y ago
Thanks ChatGPT
28.
by JoshuaDavid 1y ago
> If you want to base your "ideas" of taxes (Do you own real estate?) on edge cases why not worry about eminent domain or property seizures without a warrant or charges being filed? Particularly in the case of the latter examp
29.
by JoshuaDavid 1y ago
Mm, doughnuts. I'll take the flip side of that bet, since I don't think capturing the typing cadence for individual words would be all that helpful. I'd bet the typing cadences here are distinguishable from the cadence of nor
30.
by JoshuaDavid 1y ago
It is striking how similar these answers are to each other, hitting the same points beat for beat in a slightly different tone.

More ›