tcbrah

7 ms·

1.
by tcbrah 7d ago
that's the neat part, there is no prescribed system or code. your agent decides the implementation which you control, the repo is mostly natural language (save for the presentational tui)
2.
by tcbrah 7d ago
great instinct. that's exactly what happens today! it learns from closed PRs and feedback on what changes are high value vs not
3.
by tcbrah 7d ago
occassionally when you forget to git commit/stash before sleeping
4.
by tcbrah 7d ago
great minds. we gotta collab, dm
5.
Show HN: Nightshift – Your code gets better while you sleep(github.com)
11 points by tcbrah 7d ago|16 comments
6.
by tcbrah 3mo ago
tbf, node based editors have been "the year of" every year since blender. they all look like a murder board to me! comfyui especially has a terrible ui/ux IMO
7.
Effective Use-Cases for LLMs(aggressivelyparaphrasing.me)
2 points by tcbrah 3mo ago|0 comments
8.
by tcbrah 5mo ago
giving meta a run for its money, esp when it was supposed to be the poster child for OSS models. deepseek is really overshadowing them rn
9.
Axios NPM supply chain incident(blog.talosintelligence.com)
1 points by tcbrah 5mo ago|0 comments
10.
Agent Governance Toolkit: Open-source runtime security for AI agents(opensource.microsoft.com)
2 points by tcbrah 6mo ago|0 comments
11.
Claude.ai Prompt Injection Vulnerability(oasis.security)
2 points by tcbrah 6mo ago|0 comments
12.
Agents for Security: The Tipping Point for Offensive AI(menlovc.com)
1 points by tcbrah 6mo ago|0 comments
13.
AI-Driven Offensive Security: The Current Landscape and What It Means(praetorian.com)
1 points by tcbrah 6mo ago|0 comments
14.
by tcbrah 6mo ago
we've been complaining about curl | bash for like 15 years and yet here we are installing every new ai tool the exact same way lol. convenience always wins over security until it doesnt
15.
ContextCrush: The Context7 MCP Server Vulnerability Hiding in Plain Sight(noma.security)
2 points by tcbrah 6mo ago|0 comments
16.
by tcbrah 6mo ago
love that "we removed the telemetry" is now a headline feature worth forking an entire project over. says a lot about where dev tooling is headed tbh
17.
by tcbrah 6mo ago
tbh the fact that they put copilot in the snipping tool tells you everything about how those decisions were being made lol
18.
Security advisory for Cargo (CVE-2026-33056)(blog.rust-lang.org)
4 points by tcbrah 6mo ago|1 comments
19.
by tcbrah 6mo ago
tbh the real issue isnt even prompt injection its that people give these agents full wallet access and then act suprised when they get drained lol
20.
by tcbrah 6mo ago
lol the 2025 "ai is just my pairing buddy" to 2026 "ai writes all my code" pipeline is speedrunning at this point
21.
by tcbrah 6mo ago
fair point, but there's a difference between maintaining a CLI you own vs depending on a third party to maintain a wrapper around an API you could call directly. not to mention the mcp protocol is fairly nascent whereas CLIs are much m
22.
by tcbrah 6mo ago
the "77% cost reduction" number is doing a lot of heavy lifting here when the real play is getting your whole agent stack on cloudflare so switching costs go thru the roof lol
23.
by tcbrah 6mo ago
the fact that github still renders Private Use Area codepoints as whitespace instead of flagging them is wild tbh. like we've known about this vector since 2024 and npm/github just shrugged
24.
by tcbrah 6mo ago
tbh you can already tell whos using chatgpt to write their emails at work, everyone sounds like the same middle manager now. the homogenization isnt coming its already here
25.
Rust Project Perspectives on AI(nikomatsakis.github.io)
4 points by tcbrah 6mo ago|0 comments
26.
by tcbrah 6mo ago
the maintenance burden is the real MCP killer nobody talks about. your agent needs github? now you depend on some npm package wrapping an API that already had good docs. i just shell out to gh cli and curl - when the API changes, the agent
27.
by tcbrah 6mo ago
ill take that as a compliment, my writing finally passed the turing test
28.
by tcbrah 6mo ago
the wildest part is algolia just not responding. you email them saying "hey 39 of your customers have admin keys in their frontend" and they ghost you? thats way worse than the keys themselves imo. like the whole point of docsearc
29.
by tcbrah 6mo ago
genuine question - what are you working on that needs that level of privacy? outside of NSFW stuff most API providers arent doing anything with your prompts
30.
by tcbrah 6mo ago
tbh i stopped caring about "can i run X locally" a while ago. for anything where quality matters (scripting, code, complex reasoning) the local models are just not there yet compared to API. where local shines is specific narrow t

More ›