robszumski

6 ms·

1.
by robszumski 1mo ago
I was part of the team that proposed this manner of operation (Kubernetes Operator)[1]/controller and it's immensely cool to see a competent team make what seems like an incredible one that really scales the business. I had always
2.
by robszumski 2mo ago
I'm sure they take detailed close out photos and likely video of the entire handling process.
3.
by robszumski 2mo ago
Really cool. It would be interesting to see a demo of an app that is clearly more bespoke, like your Tesla account, online banking, movie theatre ticketing, etc.
4.
by robszumski 7mo ago
example analysis on a Dependabot PR: https://github.com/daniellockard/tiltify-api-client/pull/36#...
5.
by robszumski 7mo ago
I commented elsewhere but our team built a custom static analysis engine for JS/TS specifically for the dep update use-case. It was hard, had to do synthetic execution, understands all the crazy remapping and reexporting you can do, et
6.
by robszumski 7mo ago
Totally hear you on the noise…but we should want to auto-merge vs ignore, no? Given the right tooling of course.
7.
by robszumski 7mo ago
We’ve built a modern dependabot (or works with it) agent: fossabot analyzes your app code to know how you use your dependencies then delivers a custom safe/needs review verdict per upgrade or packages groups of safe upgrades together t
8.
by robszumski 7mo ago
Thanks for sharing, really helpful to see your thinking. I haven't fully embraced FaaS myself but never regretted it either. Curious to hear more about Renovate vs Dependabot. Is it complicated to debug _why_ it's making a choice
9.
by robszumski 7mo ago
no, but still being super impressive. CEO of a company rebuilding a CAD rendering engine because they put an LLM on top of it. So you describe the mechanical specs of the part you want and it models it. Takes all the tedium out of modeling
10.
by robszumski 9mo ago
Same author talked about adversarial license plates that trick these cameras with a sequence of black blocks, discussed here in original form [1]. He is interested in breaking both the plate detection (ideal) and character recognition (good
11.
by robszumski 9mo ago
exactly. standard move when you aren't going to get a second shot.
12.
by robszumski 10mo ago
We built and launched this product about 2 months ago, HN thread here: https://news.ycombinator.com/item?id=45439721 Totally agree that AI is great for this, it will work harder and go deeper and never gets tired of reading
13.
by robszumski 11mo ago
If a giant chunk of the constellation can act as a truly huge antenna, what can you get from that? Super high resolution? Seek/dwell time on a target that is effectively infinite?
14.
by robszumski 1y ago
It requires you to go deep in both the code analysis and the research, which is expensive at their scale And, as someone who's start up (EdgeBit was acquired by FOSSA recently) wrote a new JS/TS static analysis engine, it's j
15.
Fossabot: AI code review for Dependabot/Renovate on breaking changes and impacts(fossa.com)
108 points by robszumski 1y ago|18 comments
16.
by robszumski 1y ago
Rob from EdgeBit (YC W23) – super excited to bring our dependency autofix tech + static analysis tools to FOSSA! You can read more on our blog: https://edgebit.io/blog/edgebit-joins-fossa/
17.
Resemver: Using AI to rewrite semver based on actual breaking changes(fossa.com)
7 points by robszumski 1y ago|0 comments
18.
Rolling out binary authorization for all laptops at Figma(figma.com)
1 points by robszumski 1y ago|0 comments
19.
by robszumski 1y ago
For reference, Rocket Lab's Electron has a wet mass of 13,000 kg. This rocket is much smaller at 1,312 kg wet mass.
20.
by robszumski 1y ago
Curious if auto-merge philosophy changes between libraries and applications. The library definitely has a larger user base to break and a wider matrix of use-cases. IMO, auto-merge is more palatable for an application – do you agree? Especi
21.
by robszumski 1y ago
How do you scale this besides keeping the dep list short? Are you reading every item or just scanning for words like "deprecated" or "breaking change"?
22.
by robszumski 1y ago
How does a customer use this? Point it at a publicly available webapp? Run it locally against dev? Do I self-host it and continually run against staging as it's updated?
23.
Use Code Reachability to Fix Security Issues, Not Vuln Prioritization(edgebit.io)
1 points by robszumski 1y ago|0 comments
24.
by robszumski 1y ago
Author of the post, love to see this here. Curious what folks are seeing in terms of consistency of the agents they are building or working with – it's definitely challenging.
25.
by robszumski 1y ago
Fair criticism. I was going for the colloquial usage of "you get one shot" but yeah I did read that Google paper the other day referring to these as zero-shot.
26.
Principles for Building One-Shot AI Agents(edgebit.io)
93 points by robszumski 1y ago|31 comments
27.
by robszumski 1y ago
We were working on this at CoreOS before Kubernetes came about – called fleet https://github.com/coreos/fleet . Distributed systemd units run across a cluster, typically running containers or golang binaries with a supe
28.
by robszumski 1y ago
Really excited for text-wrap: balance. This will prevent a ton of breakpointing or manual line breaks for web headers.
29.
by robszumski 1y ago
This KILLS me. It's so frustrating. APFS is supposed to be great at deduping files and such, but in practice it seems like it really sucks. It's bad at both saving a file to the desktop and dumping a million npm files into a direc
30.
Use Code Reachability to Fix Security Issues, Not Vuln Prioritization(edgebit.io)
3 points by robszumski 2y ago|0 comments

More ›