logicx24

6 ms·

1.
Why Jet Engines Aren't "Made in China"(aakash.substack.com)
6 points by logicx24 4mo ago|0 comments
2.
America Doesn't Have the Stomach for Growth(aakash.substack.com)
6 points by logicx24 5mo ago|1 comments
3.
Why Are BART and MUNI always broke(n)?(aakash.substack.com)
4 points by logicx24 6mo ago|0 comments
4.
Help I'm a software engineer who's scared of game dev(medium.com)
1 points by logicx24 6mo ago|0 comments
5.
Show HN: Drawbridge – Drop-In SSRF Protection for Python(github.com)
1 points by logicx24 7mo ago|0 comments
6.
Why SSRFs Are the Trickiest Security Issue in Modern Web Apps(tachyon.so)
3 points by logicx24 7mo ago|0 comments
7.
by logicx24 7mo ago
Yup. I just wrote about this last week: https://tachyon.so/blog/sandboxes-wont-save-you Of all the problems in agent security, sandboxing solves the easiest problem.
8.
by logicx24 7mo ago
What I meant to say was, the agents (like Claude Code) often have a "Allow all instances of this command in the session," and that persists to a whitelist for that session. The mechanic here is actually just a prefix match, so `AP
9.
by logicx24 7mo ago
But if I don't connect it to stuff, then what is it useful for?
10.
by logicx24 7mo ago
One insidious thing is whitelists. If you allow the bot to run a command like `API_KEY=fdafsafa docker run ...`, then the API_KEY will be written to a file, and the agent can then read that in future runs. That bit me once already.
11.
by logicx24 7mo ago
Yeah, agreed. This is probably what that middleware would look like. That's also where you'd add the human approval flow.
12.
by logicx24 7mo ago
True. But it can help me create a lot of useful text so I can represent my self better. I do wonder what happens when everyone is using agents for this, though. If AI produces the text and AI also reads the text, then do we even need the in
13.
Sandboxes won't save you from OpenClaw(tachyon.so)
112 points by logicx24 7mo ago|103 comments
14.
by logicx24 7mo ago
Disclosure - I run https://tachyon.so/ , an AI SAST tool. It makes sense that SAST is better for the provided task. The CWE Top 25 seem like issues focused around patterns. Each one has a strictly enumerated set of vulnerabl
15.
by logicx24 7mo ago
If Donald Trump did this, he wouldn't be criminally liable either.
16.
by logicx24 7mo ago
Regular people would not be held liable for this. It would be a dubious case even if a human helped another human to do this.
17.
by logicx24 7mo ago
How will we handle cooling in space?
18.
by logicx24 8mo ago
> the ongoing economic and cultural exchange would have propelled the island towards a different political system The blocker to this has always been the government refusing to reform. I don't see how increased exchange changes thi
19.
by logicx24 8mo ago
I can't even get through my Claude Max quota, and that's only 200/mo. And I code every day and use it for various other pretty-intensive tasks.
20.
by logicx24 8mo ago
Where's the code for this? I'd love to run our tool, https://tachyon.so/ , against it.
21.
MLflow's Missing Validators: An Authorization Bypass Across API Surfaces(tachyon.so)
1 points by logicx24 8mo ago|0 comments
22.
by logicx24 8mo ago
Robert Caro, in the LBJ series, wrote about how LBJ would use the discomfort of being the bathroom as a negotiating technique and a show of dominance. He would drag senators into the bathroom and force them to listen to him talk as he used
23.
The Zebra Murders: Racial Revolution and San Francisco's Season of Horror Part 2(aakash.substack.com)
1 points by logicx24 3y ago|0 comments
24.
by logicx24 4y ago
Nothing. And that is the problem with anarchism. For some, the lack of a centralized power structure is the goal. For others, it's an opportunity.
25.
by logicx24 5y ago
Which is also what growth companies do? They reinvest their own earnings along with outside investment, which is the same as nonprofits (via donations).
26.
by logicx24 5y ago
Amazing, we now have sky NIMBYs complaining about satellites hindering views.
27.
by logicx24 5y ago
Similarly, Airbnb has been profitable for a while. Snowflake is also moving towards that.
28.
by logicx24 5y ago
I love history for that. Just knowing about the past gives me a feeling of connection to places I've never been to or times I'll never get to witness. As an aside, the Scythians were not in what we'd today consider Persia (Ir
29.
by logicx24 6y ago
I heard about the startup Legalese [1] a while ago, which does exactly this. [1]: https://legalese.com/
30.
by logicx24 6y ago
This is broadly true, though he did have an impressive victory at the Hydaspes and establish a series of vassal states in the Indian northwest (modern Pakistan). The historical consensus is that it's unlikely he would have succeeded in

More ›