apgwoz

5 ms·

1.
by apgwoz 3mo ago
16MB requirement! I wish all stuff was lightweight, like this! We’ve lost our way…
2.
by apgwoz 3mo ago
So sad. :( Om was off my radar for the last 10 years or so, and then I recently encountered an article he wrote ( https://om.co/2023/02/05/why-modern-leica-m-is-a-great-lands... ) about his adoption of Leica M
3.
by apgwoz 4mo ago
How many layoffs does a company have to do before realizing it’s in their best interest to start asking other companies to take the employees they don’t want to employ anymore? Also, 75% placement seems wildly successful. Why isn’t Cisco al
4.
by apgwoz 5mo ago
It’s absolute baseline, but yes, it relies entirely on the platform’s permissions model, the administrator who assigns permissions, and the application authors to not create vectors for env var dumps. :) But honestly, if you’re in the conta
5.
by apgwoz 5mo ago
The Ed Zitron rant will be phenomenal.
6.
by apgwoz 5mo ago
Ah. The article has since been updated to point out that it’s not plaintext, but encrypted at rest (which would be expected). OK.
7.
by apgwoz 5mo ago
You’re thinking too much. When you run the app, the system decrypts the secrets and makes them available as env vars (or some other mechanism). In an admin ui, you list the names of secrets only, and provide a “reveal” or a “replace” on eac
8.
by apgwoz 5mo ago
Not at all. I was simply making a joke on the parallel exploration of states.
9.
by apgwoz 5mo ago
You pretty much have to assume someone is going to put sensitive data in an input like this. Encryption by default is the only sensible choice.
10.
by apgwoz 5mo ago
Yeah, but… what if?
11.
by apgwoz 5mo ago
And his successor John Turnip.
12.
by apgwoz 5mo ago
Yes! I’ve been trying (and failing!) to get people to understand this. Build the high leverage tools while the tokens are cheap. Unfortunately, I haven’t figured out the right set of high leverage tools. :)
13.
by apgwoz 5mo ago
As another data point, I pay for Pro for a personal account, and use no skills, do nothing fancy, use the default settings, and am out of tokens, with one terminal, after an hour. This is typically working on a < 5,000 line code base, so
14.
by apgwoz 5mo ago
It takes longer, but a spade is better than bare hands. The goal is to speed up finding valid vulnerabilities, and be faster than humans can do it.
15.
by apgwoz 5mo ago
I use the models to look for vulnerabilities all the time. I find stuff often. Have I tried to do build a new harness, or develop more sophisticated techniques? No. I suspect there are some spending lots of tokens developing more sophistica
16.
by apgwoz 5mo ago
Why? They claim this small model found a bug given some context. I assume the context wasn’t “hey! There’s a very specific type of bug sitting in this function when certain conditions are met.” We keep assuming that the models need to get b
17.
by apgwoz 5mo ago
The benefit here is reducing the time to find vulnerabilities; faster than humans, right? So if you can rig a harness for each function in the system, by first finding where it’s used, its expected input, etc, and doing that for all functio
18.
by apgwoz 5mo ago
There’s no doubt that stuff is print making. My point is that there are multiple ways of doing (within each of these): relief, Intaglio, lithography, screen printing, offset. So if you say, “I’m a print maker,” it describes basically nothin
19.
by apgwoz 5mo ago
I like your stuff! I’ve been coveting a plotter for a while, but I’m pretty sure it won’t get used enough to justify the expense. :/ I do find the term “printmaking” hilarious because there’s just sooo many ways to make prints. I tried
20.
by apgwoz 5mo ago
You _can_ do trampolines, but that is kind of infectious, or needs to be very explicit with extra code, etc.
21.
by apgwoz 6mo ago
It’s also deterministic, unlike llms…
22.
by apgwoz 6mo ago
> That's like a truck company using horses to transport parts. Weird choice. Easy way to claim more “horse power.”
23.
by apgwoz 6mo ago
https://sigusr2.net/lemons.html
24.
by apgwoz 6mo ago
The point this article makes, that suddenly agents can do the work of customizing free software, completely makes sense. But, the reality is that the Free Software movement is opposed to the way Lemons are built today, and would not accept
25.
by apgwoz 6mo ago
The key to this argument is that we won’t need to rely on Anthropic/OpenAI soon — will they exist in the same way they do today in 12-18 months? The “open” models are getting better and better, and people are figuring out ways to make
26.
by apgwoz 6mo ago
I was hoping someone made this comment! It remains high on my list of Frontalot songs. Big fan of “I’ll Form the Head” and “Stoop Sale” also from that album as well.
27.
by apgwoz 6mo ago
I honestly don’t remember what the frame rate was, but it definitely improved when I upgraded to a Pentium 100. I distinctly remember a buddy giving me some RAM (2x4MB) which allowed me to play on the 486. I was so happy! The DX2s _were_ a
28.
by apgwoz 6mo ago
I played Quake on a 486 66Mhz DX2 with 16MB of RAM in the 90s. On the lowest resolution, but it was fine.
29.
by apgwoz 6mo ago
Whoops! Not spent, raised.
30.
by apgwoz 6mo ago
> Anthropic claiming that its total revenue since January 2025 as $5 billion contradict that its expected run-rate revenue for the year 2026 is $19 billion? Isn’t the “exceeding $5BN” comment a lifetime revenue? … on $30BN (edit: previou

More ›