objectified

8 ms·

1.
by objectified 8mo ago
I was thinking the exact same thing. It gets a lot more attention on Youtube, really not understanding what's up.
2.
by objectified 2y ago
> The moment you run LLM generated code, any hallucinated methods will be instantly obvious: you’ll get an error. You can fix that yourself or you can feed the error back into the LLM and watch it correct itself. But that's for meth
3.
by objectified 2y ago
The problem there though, is that with PoCs like this, as an attacker you want to have a ping back to your system so that you know the attack has been successful (in this case they probably expected/hoped someone at Cursor to install t
4.
by objectified 2y ago
At first I was excited to see that a new tool would solve the Python "packaging" problem. But upon further reading, I realized that this was about _package management_, not so much about packaging a Python application that I'
5.
by objectified 6y ago
I don't think these are official public webcams. At least, that's how I interpret their FAQ: https://www.insecam.org/en/faq/
6.
by objectified 6y ago
1. Like you already hinted at, it is really difficult to get right, and I hardly experience any larger website (with multiple teams working on it) that implement it effectively. So while it's great in theory, I'm not sure if it&
7.
by objectified 7y ago
I'm not sure I understand your question correctly, but I'm talking specifically about outbound network traffic. Your API's application servers (where such evil libraries could be deployed) should not be able to have any netwo
8.
by objectified 7y ago
This will keep happening, and not only will SSH And GPG keys be the target, but any interesting data will be stolen. And the problem is much larger than these typosquatting attacks. Abandoned Github projects taken over my malicious users, r
9.
by objectified 7y ago
In case you are still interested in reading about the security aspect of logging, there is the OWASP Logging Cheat Sheet dedicated to this: https://github.com/OWASP/CheatSheetSeries/blob/master/cheats...
10.
by objectified 8y ago
Lots of problems are merely I/O related, which can be solved just fine with Python threads. As for number crunching (let's assume that means CPU intensive tasks), you can always still resort to multiprocessing (which can also be c
11.
by objectified 8y ago
CVSS is a common and open approach. CVSS scores that are particularly high, are often directly exploitable. If they aren't, then probably their calculation was done wrong. You can try it for yourself here: https://www.first.
12.
by objectified 8y ago
I think it's important to be careful with drawing conclusions about what might or might not be used by whatever is running in your container and exposed to end users, if only for the simple fact that it might not be too obvious how a p
13.
by objectified 8y ago
On premise deployed stacks are usually shielded off by network firewalls though, which cannot be said about most cloud based services (yes, I get it from a convenience point of view). In order to attack an on premise application that is saf
14.
by objectified 9y ago
But now you're hitting on one of the main points that was always criticized in PHP: the fact that it came with a lot of batteries included. The upside of this is that it makes PHP applications very easy to deploy, because often, you ei
15.
by objectified 10y ago
The article mentioned ctags, which actually gets you quite far in this regard. Combined with CtrlP (a vim plugin) and the Silver Searcher, I navigate large codebases quite quickly. I do agree that full blown IDEs probably have better suppor
16.
by objectified 10y ago
That's a rather quick conclusion. In the blog post she writes that at least once she helped debugging code, so perhaps she just prefers to have some association around a problem, instead of just a bare bones problem to solve. There a
17.
by objectified 10y ago
Although you're right, one could argue that this is the world you most likely end up in when you "do Java", as most Java job openings seem to list at least one or two of the frameworks you mention, as compared to the job open
18.
by objectified 10y ago
I must say that the more I read articles of this character, the more I feel that it would make sense to distinct between different types of "engineers". A lot of the proposed advices are applicable only in certain fields, and not
19.
by objectified 10y ago
Probably a controversial topic, as this touches on holy grails. My personal take on this, given my own experience so far: 1) You don't strictly need to know Big O notation in order to not introduce performance bottlenecks, or mitigate
20.
by objectified 10y ago
I could think of a few reasons why you would like to run something in a Docker container. - OS packaging is tedious to say the least, and "git clone and pull dependencies on production systems" processes are generally considered m
21.
by objectified 11y ago
Being able to ship a self contained binary of your application is a very powerful concept, on which many seem to agree. The way I see it, pip and virtualenv are not practical for deployment or distribution. You shouldn't have to downlo
22.
by objectified 11y ago
IMHO, this is a very important project as it makes up for one of the biggest shortcomings in the Python ecosystem - distribution of software. Distribution is clearly one of the reasons that Go is so popular. It would be great if we could
23.
by objectified 11y ago
There are many others, of which Wing IDE[1] and Komodo[2] are probably the most well known. There's also a page[3] on the Python wiki listing a bunch more. [1]: https://wingware.com/ [2]: http://komodoide.co
24.
by objectified 11y ago
I think that for the majority of use cases when it comes to packaging and shipping Python programs, we really want to ship OS packages. We don't want users (that includes sysadmins/operations teams in this case) to deal with havin
25.
by objectified 11y ago
Well, one of the main advantages of using a configuration management tool is that the configurations you're writing are actually repeatable, and these tools tend to provide you with a lot of modules that take this in regard for you. If
26.
by objectified 11y ago
The other story looks Heroku specific (I interpreted the other story title as something about bitter employees for one specific company leaving that company, not about a severe threat to privacy), this was the one that got attention. I thin
27.
by objectified 11y ago
Apparently it has been marked as a duplicate of a story with a very much less informative title, IMHO. https://news.ycombinator.com/item?id=10263812
28.
by objectified 11y ago
Really good stuff in here, thanks for this. Are there any plans to follow this up with something along the lines of "Advanced Python"?
29.
by objectified 11y ago
I recently created vdist ( https://vdist.readthedocs.org/en/latest/ - https://github.com/objectified/vdist ) for doing similar things - the exception being is that it uses Docker to actually bu
30.
by objectified 11y ago
There are also simple human flaws that prevent people from showing off their work, such as lack of confidence and fear of failure (failure in succeeding). They tend to falsely be perceived as extreme modesty, too.

More ›