llimllib

7 ms·

1.
by llimllib 3d ago
re: npm, if you upgrade your global node version, you will lose that installation, right?
2.
by llimllib 1mo ago
Your agent writes secret.txt with the placeholder, and the tokenizing proxy replaces it with the token, then the agent reads secret.txt
3.
by llimllib 1mo ago
Poorly! Apple’s facilities for this are the ones I know best, and they are woefully insufficient
4.
by llimllib 1mo ago
right, but say you give the agent access to github and it can push as you, or make a gist; now it can easily exfiltrate your secret. And that's just an easy case - really if it has any network access at all it can come up with a clever
5.
by llimllib 1mo ago
Operating systems ought to be providing us the utilities we need to safely sandbox processes (agent or otherwise), but they appear to not be interested in the job
6.
by llimllib 1mo ago
This is what I currently do, but my software uses docker and docker mounts act as a bypass for the file system restrictions, plus docker processes started outside the sandbox allow network proxy escape. Currently, I don't allow the age
7.
by llimllib 2mo ago
“Smoking gun”
8.
by llimllib 2mo ago
> Is that built in protection really a filter, on code level yes, on mac it uses seatbelt and on other platforms it uses similar tools: https://code.claude.com/docs/en/sandboxing
9.
by llimllib 2mo ago
Yes, as a consequence of how aggressively transparent to the postgres wire protocol pgbouncer wants to be. This article does a good job explaining it: https://www.augusteo.com/blog/how-pgbouncer-works
10.
by llimllib 3mo ago
the author of this post (whom you were responding to) made `libgit`, the library that preceded `libgit2`, and contributed to libgit2 a long time ago as well. Here he is in 2010 writing about libgit2: https://github.blog/news
11.
by llimllib 3mo ago
Is this new? I thought we had this already In my testing (iirc) filesystem performance was not good enough to be usable with node/rust dev where lots of small files get stat-ed update: what's new is the `container machine` subcomm
12.
by llimllib 3mo ago
I remember sitting in the senior study lounge reading the previous Bishop book and implementing the perceptron from it, 22 years ago: https://github.com/llimllib/personal_code/blob/945b017b2915c... (before nu
13.
by llimllib 3mo ago
it's usually a "something is better than nothing" situation. If you have somebody willing to write custom release messages, that's definitely better; but conventional commits is better than nothing for it.
14.
by llimllib 4mo ago
the surreal docs should not say "surreal is open source", it's source-available under the BSL
15.
by llimllib 4mo ago
cross-checking your profile suggests that https://github.com/tensorzero/durable is the repo you're referring to You might consider another name for it, that one is wholly ungoogle-able! Looks neat though
16.
by llimllib 4mo ago
Armin Ronacher's `absurd` is an implementation of durable workflows for postgres: https://lucumr.pocoo.org/2025/11/3/absurd-workflows/ https://github.com/earendil-works/absurd
17.
by llimllib 4mo ago
I've written typst, but if I understand correctly (which I'm really not sure I do?) the article is talking about markdown documents with pandoc commands in them that get translated into typst formatting, but I don't know what
18.
by llimllib 4mo ago
I wish the article showed what the markdown format for working with typst and pandoc looked like, and what an output PDF looked like. I have no idea whether I'm interested or not from this article
19.
Clanker: A Word for the Machine(lucumr.pocoo.org)
13 points by llimllib 4mo ago|7 comments
20.
by llimllib 4mo ago
3.15: https://docs.python.org/3.15/whatsnew/3.15.html#whatsnew315-...
21.
by llimllib 4mo ago
bagder merged a fix to curl in response to my report: https://github.com/curl/curl/commit/b079595f2e903b820a027a68... Sorry for not believing you initially! I'm very surprised that was in there
22.
by llimllib 4mo ago
Interesting! I took a look with the agent and it looks like it was this change that went in at curl 8.8.0: https://github.com/curl/curl/commit/3eac21d86bc50ba459a9a8a0... (same one susam saw) There's a f
23.
by llimllib 4mo ago
> curl, for example, seems to illegitimately strip a trailing question mark (could be only for the command line, didn’t test library usage). umm what? I don't know what they're actually sending where they think this, but if you
24.
by llimllib 6mo ago
libgit2 is not nearly as thoroughly tested as the git CLI is, and it is not actually hard to imagine that calling the git CLI to create new repos is faster than shelling out to a C library. Your comment does not seem to be in good faith, im
25.
by llimllib 6mo ago
It really feels like Firefox is not a supported browser on GitHub, I hit this and also find that much of the time the commit message is not correctly pulled from the PR description when that setting is enabled
26.
by llimllib 6mo ago
My alma mater, Ursinus, is a very small school and has few claims to fame; but one of them is that John Mauchly taught there before going to Penn to design ENIAC. Wikipedia puts it bluntly: > Mauchly's teaching career truly began in
27.
by llimllib 6mo ago
OKPalette by David Aerne is my favorite tool for this, it chooses points sensibly but then also lets you drag around or change the number of colors you want: https://okpalette.color.pizza/
28.
by llimllib 6mo ago
You’re in luck, he sells it as a book: https://www.amazon.com/Gervais-Principle-Complete-Office-Rib...
29.
by llimllib 6mo ago
For me, it's file system latency on mac os when virtualizing that kills me. Cargo, npm, pip, etc create many small files and there's a high per-file latency on the FS layer
30.
by llimllib 7mo ago
I've built tools with both Go and Rust as LLM experiments, and it is a real advantage for Go that the test/compile cycle is much faster. I've been successful with each, I think there's positives and negatives to both, ju

More ›