ymyms

6 ms·

1.
by ymyms 4mo ago
I was shocked by this as well. I think it's a natural property of large organizations and it takes great effort and great leaders to fight it. The way I think about it is that building something truly successful comes with a tremendous
2.
by ymyms 5mo ago
There are definitely salient points in the article and I appreciate its value in imploring us to really stop and consider the ramifications of what this technology might deliver. I think the analogy to cars and the unintended consequences f
3.
by ymyms 5mo ago
I'm making capability security for distributed systems. The primitives and engine are both open source. Primitives: https://github.com/Hessra-Labs/hessra-tokens Engine: https://github.com/Hessra-La
4.
by ymyms 8mo ago
They apparently are working on and are going to release 2(!) different versions of siri. Idk, that just screams "leadership doesn't know what to do and can't make a tough decision" to me. but who knows? maybe two version
5.
by ymyms 8mo ago
A human SWE can use an LLM to refactor and reduce some of the debt just as easily too. I think fundamentally, the possible rate of new code and new technical debt introduced by LLMs is much higher than a human SWE. Left unchecked, a human s
6.
by ymyms 8mo ago
All code is technical debt though. We can't spend infinite hours finding the absolute minima of technical debt introduced for a change, so it is just finding the right balance. That balance is highly dependent on a huge amount of facto
7.
by ymyms 8mo ago
I also feel like it makes me more productive but measuring software engineering productivity is famously difficult. If there was an easy way to measure it, managers at bigco would have employed it with abandon years ago.
8.
by ymyms 8mo ago
Huh? Where did I say that's what I like? I'm just trying to discuss for discussion's sake. Personally, I want a world that rewards the people who put their thought, care, and craftsmanship into something more than those that
9.
by ymyms 8mo ago
I didn't mean to imply LoC as a measurement of productivity. What I really mean is more "amount of useful code produced to a level the human-using-the-llm determines to be useful". To try and give an example, say that you wan
10.
by ymyms 8mo ago
My gut says that is not a property of LLM evangelists, but a property of current internet culture in general. People with strong, divisive, and engaging opinions seem to do well (by some definition of well) online.
11.
by ymyms 8mo ago
I mean, isn't driving the business forward really what matters (outside of academia, open source, and other such endeavors). We live in a hyper competitive market. All else being equal, if company A can produce "millions of lines
12.
by ymyms 8mo ago
"I find LLMs useful as a sort of digital clerk - searching the web for me, finding documentation, looking up algorithms. I even find them useful1 in a limited coding capacity; with a small context and clear guidelines." I am curio
13.
by ymyms 8mo ago
Heh yeah, my comment does kinda scream credit card. What I really mean is something programmable for narrow use-cases like multiple forms of payments, transit, or other stuff like building access.
14.
by ymyms 8mo ago
I'm working on https://www.hessra.net/ We've built a new auth platform with some new identity primitives and capability-style tokens using biscuits. Right now, I'm trying to figure out ways to apply it and am
15.
by ymyms 8mo ago
I wonder if this makes room in the market for some simpler device for payments. Something like a wearable that you can tap-to-pay and has the signed software attenuation but nothing else so you can't be tracked using GPS.
16.
by ymyms 8mo ago
You are very on base. In fact, there is a deep conflict that needs to be solved: the non-determinism is the feature of an agent. Something that can "think" for itself and act. If you force agents to be deterministic, don't yo
17.
by ymyms 9mo ago
Driving a car that old puts yourself and others on the road at greater risk due to lack of safety features compared to a modern car. One could argue being able to afford a new car and not buying one to extoll other virtues is neglecting you
18.
by ymyms 9mo ago
I'm working on https://www.hessra.net/ It's a full identity and authorization platform targeted for service-to-service use cases. But my focus the last couple months has been to make provisioning identity super ea
19.
by ymyms 10mo ago
Another benefit is that you can provision ephemeral resources with an identity that has an expiration to match the resource’s lifecycle. Then, you don’t need to figure out rotation at all, just redeploy with a newly minted identity included
20.
The Missing Foundation of Non-Human Identity(hessra.net)
4 points by ymyms 10mo ago|1 comments
21.
by ymyms 10mo ago
I’ve been working on an identity/authorization system for machines and kept getting stuck on a basic question: what is machine identity, independent of any one stack (Kubernetes, cloud, OAuth, etc.)? This post proposes a simple model b
22.
by ymyms 10mo ago
Building https://www.hessra.net/ , an authorization system based on the Biscuit token format (decentralized, signed, and attenuable). The goal is to push beyond JWTs and Zanzibar-style policy engines by giving every machine-
23.
by ymyms 11mo ago
I have the nano-texture display on my M4. At this point, I don't think I can go back to standard glass. For text work, I find there are no downsides. If you work more with color and detailed art, I think that's the only case where
24.
by ymyms 11mo ago
I think my ideal would be a MacBook Air with both the nano-texture and higher 120hz refresh rate the Pro has. With that, I'll trade an extra second of compile time for my rust projects for the smaller form factor.
25.
by ymyms 11mo ago
Another idiomatic pattern is using shadowing to transform something using itself as input: let x = Foo::new().stuff()?; let x = Bar::new(x).other_stuff()?; So with the math example and what the poster above said about type changing, most ru
26.
by ymyms 1y ago
Biscuits are in the same family as macaroons in that they are bearer tokens that can be attenuated offline, but they go further. A biscuit carries a chain of signed “blocks” that can contain facts, rules, and checks in a small Datalog-like
27.
by ymyms 1y ago
biscuit-based identity and authorization I’m working on https://www.hessra.net/ , an identity + authorization service built around [Biscuits]( https://www.biscuitsec.org/ ) instead of JWTs. The goal is to deco
28.
by ymyms 1y ago
I agree with pretty much everything the author has said. I’ve been looking at the problem more on the enterprise side of things: how do you control what agents can and can’t do on a complex private network, let alone the internet. I’ve actu
29.
by ymyms 1y ago
I'm working on hessra.net, a token-based authorization system for machines and built using biscuits. The idea is that any service/machine/IoT device can authenticate to the service and get authorization tokens for each reques
30.
by ymyms 1y ago
One of my favorite ways to use AI is to get me started on things. I tend to drag my feet when starting something new, but LLMs can whip up something quick. Then I look at what it did and usually hate it. Maybe it structured the code in way

More ›