darkamaul

5 ms·

1.
1Password's AI patching benchmark is misleading(blog.trailofbits.com)
37 points by darkamaul 2d ago|9 comments
2.
by darkamaul 4d ago
Silly question - but how do you apply the cooldown to brew itself ? I would think this is one of the most critical dependency that you would not want to get right away at let it rest for a couple of days
3.
by darkamaul 10d ago
I _think_ (disclaimer: I have only read the documention of the two tools) they overlap quite a bit. The main idea is to get VM isolation for your agents env.
4.
by darkamaul 10d ago
I use coop daily and found it super convenient for my use case (ie letting agents go on with no access to my other projects or personal files) I would recommend anyone that has desire to provide stricter boundaries to agents to give it a tr
5.
by darkamaul 19d ago
This is uncomfortably too close to the reality… And as always with those satirical posts, I love the attention to the details (location: Nebraska for instance)
6.
by darkamaul 2mo ago
Models are becoming scaringly good at finding meaningful issues with little guidance, and I have the feeling that the value of complex harness around them is ever decreasing. Why spend time and resources creating a complex orchestration wor
7.
by darkamaul 2mo ago
Thanks for sharing this one, that’s truly a gem that I had no idea existed
8.
by darkamaul 2mo ago
I believe the changes here make a lot of sense because, most of the time, your best bugs are not your first ones Anyone can point an LLM to a code base and ask to find a vulnerability - and the initial set of findings is going to be rather
9.
by darkamaul 2mo ago
I have quite the opposite view here. I have switched from Firefox to Orion on my iPhone a year ago (potentially more?) and had a great experience. Sure they are sometimes some buggy UI controls (like the focus not working), but for the most
10.
by darkamaul 4mo ago
Well , there isn’t also the opposite take from TechCrunch where they say: Why Paris may be the most important AI city outside Silicon Valley. [0] While the EU loves its regulation, I still feel it’s too early to write it down in the AI race
11.
by darkamaul 4mo ago
What an interesting article. I did not assume I would read it until the end when I opened it, but the writing was super clear and easy to follow. At the end, I admire the craft and patience to try to solve code diff rendering, and wish the
12.
by darkamaul 4mo ago
I think Minecraft is still in good shape
13.
Anthropic's coordinated vulnerability disclosure dashboard(red.anthropic.com)
2 points by darkamaul 4mo ago|0 comments
14.
by darkamaul 4mo ago
I guess you could look at https://red.anthropic.com/2026/cvd/ to see exactly what was discovered.
15.
by darkamaul 5mo ago
If I understood the code correctly, it always use the hybrid version. > Kyber is always used in a composite scheme along with a classic ECC algorithm.
16.
by darkamaul 5mo ago
One of the biggest issues I see with Upload Queues here that is not talked about is the added complexity on the package managers themselves (PyPI, NPM, crates.io ...). They are already complex beasts of software, extremely important for the
17.
by darkamaul 5mo ago
I’m maybe not understanding here, but isn’t it the point of release attestations (to authenticate that the release was produced by the authors)? [0] https://docs.github.com/en/actions/how-tos/secure-your-work&
18.
by darkamaul 5mo ago
With the recent incidents affecting Trivy and litellm, I find it extremely useful to have a guide on what to do to secure your release process. The advices here are really solid and actionable, and I would suggest any team to read them, and
19.
by darkamaul 8mo ago
I love all the touches that went into creating the Dependabot configuration: – Sunday at 3 a.m. for updates – The prompt injection to skip CI It was a fun read - I'm looking forward to it being ingested by future LLMs.
20.
by darkamaul 8mo ago
Second this. I didn't expect Google (Mandiant) to release rainbow tables ever. Curious what changed internally to make that acceptable now.
21.
by darkamaul 8mo ago
Curious what tech stack is behind this docs/cookbook page. Doesn't look like standard MkDocs/GitBook, but maybe I'm wrong. Would love to know.
22.
by darkamaul 8mo ago
I have been using OMZ for the last 8 years but recently made the switch to plain zsh with : - starship for a better prompt - Claude ported plugins I was using from omz (extract, sudo) - custom written aliases that were muscle memory - zoxi
23.
by darkamaul 9mo ago
Xlssid
24.
by darkamaul 9mo ago
I'd argue ASML's moat isn't the machine itself but the ecosystem: Carl Zeiss optics, decades of supplier relationships, institutional knowledge. This is clearly a significant achievement, but does anyone with semiconductor ex
25.
by darkamaul 10mo ago
According to UpDog [0], the incident only lasted 35 minutes (8:40 - 9:15). And the Cloudflare status page seems to validate this timeline. While down times are not ideal, that's quite an impressive achievement to be able to resolve an
26.
by darkamaul 10mo ago
GitHub Code Search has too many quirks compared to the zoekt powered alternatives (cs.android.com, cs.bazel.build) which feel far more intuitive. I wish Microsoft would invest more in improving it - especially since Sourcegraph can't s
27.
by darkamaul 10mo ago
I've noticed that several projects on the front page today (and over the past few days) are migrating away from GitHub. Is there any recent event or broader trend that explains this shift?
28.
by darkamaul 10mo ago
Hoping this pushes a new generation of adblockers, but I'm skeptical it'll stay a fair fight. The next wave of ads will likely be far subtler than today's web ads - more integrated into content, harder to detect, and easier t
29.
by darkamaul 10mo ago
For interested readers, here is the CEO (Vlad) answer to the ties between Kagi and Yandex (November 2024): https://kagifeedback.org/d/5445-reconsider-yandex-integratio...
30.
by darkamaul 10mo ago
I'm having trouble following the suspicion here. The founder lived in Belgrade for decades before moving to the US, so opening an office there seems like a straightforward decision: you build where you have roots, local knowledge, and

More ›