xmodem

6 ms·

1.
by xmodem 3d ago
One solution is to not set up and run a computer program that relies on bad information to perform automated cyber-attacks on third parties.
2.
by xmodem 3d ago
This is why IP certificates are limited to a max lifetime of 6 days. > IP address certificates allow server operators to authenticate TLS connections to IP addresses rather than domain names. Let’s Encrypt supports both IPv4 and IPv6. IP
3.
by xmodem 12d ago
> In the message above, the agent is sharing that the sandbox the AIs are running in has a NO_PROXY exception for Azure Blob Storage hostnames (*.blob.core.windows.net). ... > Next, by changing its /etc/hosts file, which de
4.
by xmodem 1mo ago
I have poor eyesight and need to sit closer than normal, and I find 27" to be just a tad too large. In my home-office setup I have a decade-old 24" 4K IPS panel that is the perfect size, and I dread the day it gives up the ghost b
5.
by xmodem 2mo ago
If this is true then why did Anthropic bother to update their privacy policy when they first launched Fable?
6.
by xmodem 3mo ago
If you can reproduce it reliably and doing so generates some form of telemetry, then just set up some automation to keep doing that in a loop. From as many machines as possible. No comment is offered on if I have ever gotten a bug noticed t
7.
by xmodem 3mo ago
Hell, I've hand-written a large PR as a single commit and then asked claude to break it down for me at least once. But I think the fact doing this task by hand is a tedious, time-consuming hassle is not because it inherently has to be
8.
by xmodem 3mo ago
What percentage of CVEs can be used to obtain a shell, but can't otherwise be used to obtain some other form of code execution in a distro-less container?
9.
by xmodem 3mo ago
I am aware, thank you :). I responded to a sibling dupe-comment over here [1]. To summarize, in my experience there is immense value to having basic shell tools available in the environment where you need them with zero extra friction. Stri
10.
by xmodem 3mo ago
Nope, not my position at all. I want to have a minimal OS environment with rudimentary tools available with zero extra friction. FROM alpine:latest adds less than 10MB and covers 95% of use cases. Typically depending on the container I will
11.
by xmodem 3mo ago
Yup! They are a good solution to the massive problem you caused for yourself by implementing a different "solution" to a non-problem. And even that's only true if you assume kubernetes is the only place your container runs wh
12.
by xmodem 3mo ago
> FROM scratch just reduces the surface. The actual attack surface of your application? Or the attack surface of you and your team's attention from a busybody security org. It's important not to confuse the two.
13.
by xmodem 3mo ago
> The cool part about FROM scratch images is that you'll never have to update your base image to address CVEs. Only your software and its (compiled) dependencies. What's the benefit really, though? If you still need to be able
14.
by xmodem 3mo ago
More than one ~500 employee company I've worked at has had security policies either encouraging or requiring the use of "distro-less" images - images with no OS components other than the absolute minimum required to run the a
15.
by xmodem 4mo ago
I see a lot of commentators in this thread who are aggressively critical of volunteer maintainers for making a decision about how to maximize the value of the free labor they donate to the world. And yet none have offered to volunteer their
16.
by xmodem 4mo ago
Rather than have complexity centralised and managed, let's generate the same vulnerable code across millions of apps. Great plan.
17.
by xmodem 5mo ago
TUIs suck and the only reason they are seeing a re-surgency of relevance is because everything else sucks more along one or more critical metrics. Given the truly incomprehensible amount of CPU and GPU power we have available, this is truly
18.
by xmodem 5mo ago
I just want a button that says "approve and merge these 3 commits now but these two need re-work"
19.
by xmodem 5mo ago
Don't anthropomorphize the language model. If you stick your hand in there, it'll chop it off. It doesn't care about your feelings. It can't care about your feelings.
20.
by xmodem 5mo ago
So it's only wrong in a technical and pedantic sense. A better phrasing might have been along the lines of "There are many sequences of tokens that will destroy your production database that are within the set of possible outputs&
21.
by xmodem 5mo ago
It's an objection to adding a new dependency, not an attempt to remove an existing one. If we can't stop adding new dependencies, we are certain to be stuck with the status quo forever.
22.
by xmodem 6mo ago
It's almost as if comments on a website called "hacker news" are written by individuals with differing and varying opinions, and not by some nebulous hive-mind that purports to be internally consistent.
23.
by xmodem 6mo ago
The problem is that the well you are drinking from has in fact been poisoned. Maybe you think you can tolerate it but some projects are taking a policy decision that any exposure is too dangerous and that is IMO perfectly reasonable.
24.
by xmodem 6mo ago
The fact that the AI agent will just go and attempt to do whatever insane shit I can dream up is both the most fun thing about playing with it, and also terrifying enough to make me review its output carefully before it goes anywhere near p
25.
by xmodem 6mo ago
An engineer recklessly ran untrusted code directly in a production environment. And then told on himself on Twitter.
26.
by xmodem 7mo ago
The A-series has supported virtualization since long before the M-series existed. iOS disables it in early boot, though. On the other hand, how much virtualization are you really going to be doing with 8GB of RAM?
27.
by xmodem 7mo ago
> Unless your strategy is to create a photo-lab-like screen in pure black and red, or wear deep-red-tinted glasses, it’s unlikely that a pure colorshift strategy will cut out that big of a chunk of the spectrum. The writer is dismissing
28.
by xmodem 8mo ago
> And I'm guessing that the reason macOS doesn't give more details is because macOS is likely not involved in the step that fails And I guess because of the wide variety of third-party hardware macOS has to support, it's n
29.
by xmodem 8mo ago
I've never tried it myself, but it's oft-repeated folk wisdom in Apple circles that enabling filesystem case-sensitivity breaks all manner of third-party software that has only ever been tested on the case-insensitive default.
30.
by xmodem 8mo ago
No. A lot of devs delayed their launches: https://www.gamespot.com/articles/silksong-release-date-has-... Those that didn't or couldn't think it hurt them pretty badly: https://www.dexerto.com&#x2F

More ›