caleblloyd

7 ms·

1.
by caleblloyd 17d ago
Pre-workout supplements
2.
by caleblloyd 1mo ago
Totally a financial derivative for Mattress Mack, but probably not for the rest of us.
3.
by caleblloyd 1mo ago
Oreos are an ideal cookie in a milkshake machine fast food era
4.
by caleblloyd 3mo ago
I recently switched off Max flat rate to Enterprise API pricing and I went from 200/mo to 10k/mo with the same usage pattern on Opus. They don’t offer flat rate to enterprises. So Fable would cost me 20k/mo at Enterprise rat
5.
Show HN: CargoWall – eBPF Firewall for GitHub Actions(github.com)
14 points by caleblloyd 6mo ago|2 comments
6.
by caleblloyd 10mo ago
Sure, but say the implementation lets you try 5 codes in that 10 minutes with a 30 minute lockout. An attacker could trigger Account Recovery, blindly try 5 six-digit codes immediately, and have a 0.0005% chance getting into your account.
7.
by caleblloyd 10mo ago
I used Ory Kratos in a Go application a couple years ago by installing it as a dependency. It worked pretty well but in hindsight I would have hosted it as a separate application because it was a pain to bring along all of its dependencies
8.
by caleblloyd 11mo ago
I sometimes dream of what it would have looked like to become a doctor (or PA or similar) instead of choosing Software. Mainly the allure of interacting with and helping more people. This young person sounds like they are motivated enough t
9.
by caleblloyd 1y ago
I still like AWS all these years later. It’s trusted in the enterprise and you can empower people to do what they need to themselves with IAM. And it’s pretty reliable.
10.
by caleblloyd 1y ago
Flash removal broke multiple government sites. I couldn't take a required training course for a few months after flash support was removed and the site was taken offline for an upgrade. I’m sure ActiveX and Silverlight removal did too.
11.
by caleblloyd 1y ago
I don’t quite understand the part of the article that deems that you can skip all the checks under the assumption that this is an older browser, and that there is no CSRF vulnerability. The algorithm seems sane for modern browsers. But you
12.
by caleblloyd 1y ago
I am the Product/Eng Lead and a Co-founder of a company formed ~1 year ago building AI-native developer tooling for Platform Engineers. Have been able to iterate very quickly through PoC phases and get initial feedback on ideas quicker
13.
by caleblloyd 1y ago
We may just get this, along with a $7.25 per hour base wage!
14.
by caleblloyd 1y ago
The reason we are not seeing this in mainstream software may also be due to cost. Paying for tokens on every interaction means paying to use the app. Upfront development may actually be cheaper, but the incremental cost per interaction coul
15.
by caleblloyd 1y ago
Been using gRPC with json transcoding to REST on a greenfield project. All auto generated clients across 3 languages. Added frontend wrapper to pre-flight auth requests so it can dynamically display what users are allowed to do. Claude Code
16.
by caleblloyd 1y ago
I agree. My experience is that regularly scheduled 1:1s without an agenda seem to turn into therapy sessions for a surprising amount of people. I like doing ad-hoc 1:1s with specific agendas though, such as pair programming or an architectu
17.
by caleblloyd 1y ago
Yes. Any language that dynamically links to the OS crypto library (like OpenSSL) is more attractive because your Government customer can install your software on their OS with their FIPS compliant OS crypto library. This moves the needle fo
18.
by caleblloyd 1y ago
The same way they handle it when a vandal does it to a random car at a Walmart parking lot. Nothing at all until one day the manufacturers put sentry mode on every car instead of just Teslas.
19.
by caleblloyd 1y ago
Amen! NATS is how we do AI streaming! JetStream subject per thread with an ordered consumer on the client.
20.
by caleblloyd 1y ago
Some may. If it allows you to skip learning how to navigate a complex web app because the AI experience will help navigate for you, you may be drawn to it.
21.
by caleblloyd 1y ago
It wasn’t a joke, but I do see your point. US subsidies for EVs are massive as well. I guess I just hadn’t dug into the numbers. Now I’m not sure who gives more subsidies, the US or China. The federal tax credit in the US is much higher tha
22.
by caleblloyd 1y ago
Another (possibly bigger) reason cars are cheaper in China is because their government subsidizes the heck out of BYD and the likes. It would be like if Tesla didn’t have to pay anything to build their factories.
23.
by caleblloyd 1y ago
Signed by mostly people at RedHat, which is owned by IBM, which makes Watson, which beat humans in Jeopardy in 2011. > These are early days of AI-assisted software development. Are they? Or is this just IBM destroying another acquisition
24.
by caleblloyd 1y ago
Awesome! Only a little over a billion more to go before GitHub’s very own OpenAPI Spec can start overflowing int32 on repositories too, just like it already does for workflows run IDs! https://github.com/github/rest-api
25.
by caleblloyd 1y ago
Thinking of switching from API access to Max 20x tomorrow for a more consistent bill. Been using $50-100 of Opus tokens through API access per day. Think I’ll hit the Max 20x limits and get put in timeout? I wish Max could automatically ove
26.
by caleblloyd 1y ago
I would prefer the BSL with some sort of trial period grant and source available to closed source. Other nice thing about BSL is it converts to an Open Source license after 3-4 years which addresses the concern “what if the software vendor
27.
by caleblloyd 1y ago
Can you have different people at different levels on the Teams plan? Like 2 pro, 2 max 5x, and 1 max 20x? Them can you have it overflow to API credits once it hits the 5 hours max?
28.
by caleblloyd 1y ago
Ah nice! Unfortunately many people (like me) won’t notice that and will probably not be able to consider using it though if they are using corporate license scanners or blanket enterprise policies that don’t allow LGPL. But that is a nice s
29.
by caleblloyd 1y ago
Looks really neat! I like the looks of the API. LGPL can make it a tough decision to use, since that essentially rules out Single-file publish, R2R, and Native AOT in the .NET world. Your project seems like it could be very useful for edge
30.
by caleblloyd 1y ago
Maybe funny now but once (if?) it can eventually contribute meaningfully to dotnet/runtime, AI will probably be laughing at us because that is the pinnacle of a massive enterprise project.

More ›