alexbecker

5 ms·

1.
Claude Changes My Code(alexcbecker.net)
2 points by alexbecker 5mo ago|0 comments
2.
by alexbecker 10mo ago
I'm working on _prompt injection_, the problem where LLMs can't reliably distinguish between the user's instructions and untrusted content like web search results. Just published a blog post a few minutes ago: https:/&#
3.
by alexbecker 1y ago
Generally the threat model is that a trusted user is trying to get untrusted data into the system. E.g. you have an email monitor that reads your emails and takes certain actions for you, but that means it's exposed to all your emails
4.
by alexbecker 1y ago
There have been attempts like https://arxiv.org/pdf/2410.09102 to do this kind of color-coding but none of them work in a multi-turn context since as you note you can't trust the previous turn's output
5.
by alexbecker 1y ago
The problem is there is no real way to separate "data" and "instructions" in LLMs like there is for SQL
6.
by alexbecker 1y ago
I doubt Comet was using any protections beyond some tuned instructions, but one thing I learned at USENIX Security a couple weeks ago is that nobody has any idea how to deal with prompt injection in a multi-turn/agentic setting.
7.
The Hard Problem of Prompt Injection(alexcbecker.net)
4 points by alexbecker 1y ago|0 comments
8.
by alexbecker 1y ago
Lately I've been trying to detect/mitigate prompt injection attacks. Wrote a blog post about why it's hard: https://alexcbecker.net/blog/prompt-injection.html
9.
Show HN: Practice Languages with AI Characters(kata.chat)
1 points by alexbecker 2y ago|0 comments
10.
by alexbecker 2y ago
After reading Judith Butler for a class in college, reading "Professor of Parody" was such a breath of fresh air. Nussbaum is a clear thinker who doesn't take BS kindly.
11.
Show HN: Kata – An AI app for practicing languages(kata.chat)
1 points by alexbecker 2y ago|0 comments
12.
by alexbecker 7y ago
The argument as I understand it is that group 2 mostly does not care about being protected from their government or even agrees with the government's actions, and they get to benefit from continued access to Apple's superior produ
13.
by alexbecker 7y ago
I run a similar, maybe even more boring stack for my less-than-one-person company [PyDist]( https://pydist.com ): - PostgreSQL database - Nginx proxy in front of Django apps for UI and API servers (I use gunicorn instead of uWSGI
14.
(Almost) Never Delete a Release(pydist.com)
3 points by alexbecker 7y ago|0 comments
15.
Over 10k releases have been deleted from PyPI(pydist.com)
2 points by alexbecker 7y ago|0 comments
16.
Ask HN: Alternatives to Atlassian Confluence?
16 points by alexbecker 7y ago|17 comments
17.
by alexbecker 7y ago
Running a python package registry has some unique challenges, so it makes sense not to start with it (I run such a registry: https://pydist.com ). For example, Python has a distinction between distributions (the actual file downl
18.
Ask HN: What collaboration software does your team use?
5 points by alexbecker 7y ago|1 comments
19.
You Are Probably Misusing Opacity(alexcbecker.net)
2 points by alexbecker 7y ago|0 comments
20.
by alexbecker 7y ago
DevPi is a good solution if you want to self-host a Python package index. PyDist has some additional features like API keys and download statistics which I think are nice, but the main selling point is that you don't have to set up and
21.
by alexbecker 7y ago
Why would you not expect someone to charge for this? There are many services that charge for hosting private packages (rather than making them public to the world); I'm not aware of _any_ service that does so for free.
22.
by alexbecker 7y ago
Yes, you can use --index-url. I assume you're referring to how --extra-index-url means that pip will randomly choose which index to try to install from, potentially installing a public package by the same name instead of your private p
23.
Show HN: PyDist – Private Python Package Hosting(pydist.com)
25 points by alexbecker 7y ago|18 comments
24.
by alexbecker 7y ago
It's worth pointing out that while modern hash functions are believed to be infeasible to unscramble (technically, to require exponential time), none have been proven so. In fact, proving the mere existence of such a function would p
25.
Show HN: Own Private PyPI(pydist.com)
4 points by alexbecker 7y ago|1 comments
26.
by alexbecker 7y ago
Ah, looks like you can set that up. But it's not as convenient, because 1) you have to provision the remote repository and 2) instead of transparently installing from PyPI, you have to specify the remote repository each time you instal
27.
by alexbecker 7y ago
In fact I'm hoping to get some time this weekend to make a PR implementing this! (I'm assuming the reason you/Donald Stufft haven't done so is time, rather than disagreement over whether this is a good solution or some u
28.
by alexbecker 7y ago
Expanding on jep42's answer, there are a few problems: - The package manager can't tell whether the package will be able to support your system or not, so if this is e.g. an optional dependency your install will probably break ins
29.
by alexbecker 7y ago
It looks like they don't include the binary in the package at all, and instead the package has custom install code that downloads it during install. Which works, but it completely bypasses the package manager and would certainly take m
30.
by alexbecker 7y ago
Because right now you can only upload individual distributions to PyPI. A release is implicitly created when you upload the first one. If PyPI implemented that change, you could only have one distribution per release. The proper fix would

More ›