zeroxfe

11 ms·

1.
by zeroxfe 1mo ago
Selfies are used during live ID verification. (All of this is supposed to be encrypted, and destroyed within certain regulatory bounds.)
2.
by zeroxfe 1mo ago
There is no perfect security. It's always flawed in some way. Good security is extremely hard.
3.
by zeroxfe 2mo ago
> because that's the definition of vibe coding. That's _your_ definition of vibe coding.
4.
by zeroxfe 5mo ago
I'm in that camp -- I have the max-tier subscription to pretty much all the services, and for now Codex seems to win. Primarily because 1) long horizon development tasks are much more reliable with codex, and 2) OpenAI is far more gene
5.
by zeroxfe 6mo ago
I've done this kind of thing many times with codex and sqlite, and it works very well. It's one prompt that looks something like this: - inspect and understand the downloaded data in directory /path/..., then come up wit
6.
by zeroxfe 6mo ago
Expiries are a defence-in-depth that exist primarily for crypt hygiene, for example to protect from compromised keys. If the private key material is well protected, the risk is very low. However, an org (particularaly a .mil) not renewing i
7.
by zeroxfe 6mo ago
> Also MCP is very obviously dead, as any of us doing heavy agentic coding know. As someone that does heavy agentic coding (using basically all the tools), this is so far from the truth. People claiming this have probably never worked in
8.
by zeroxfe 6mo ago
> TBH I would have just rendered a font glyph, or failing that, grabbed an image. If an LLM did that, people would be all up in arms about it cheating. :-) For all its flaws, we seem to hold LLMs up to an unreasonably high bar.
9.
by zeroxfe 7mo ago
> At some point you need to treat people as adults, which includes letting them make very bad decisions if they insist on doing so. The world does not consist of all rational actors, and this opens the door to all kinds of exploitation.
10.
by zeroxfe 7mo ago
Yes, agreed. In many cases, the determinism is a feature, particularly being able to store the seed for reproducibility.
11.
by zeroxfe 7mo ago
> usual "true random number" bullshit What's bullshit about it? This is how TRNGs in security enclaves work. They collect entropy from the environment, and use that to continuously reseed a PRNG, which generates bits. If y
12.
Show HN: RAGmail – analyze and query your life from your email history(github.com)
2 points by zeroxfe 7mo ago|0 comments
13.
by zeroxfe 7mo ago
> it's a waste of time to steer them It's not a waste of time, it's a responsibility. All things need steering, even humans -- there's only so much precision that can be extrapolated from prompts, and as the tasks get
14.
by zeroxfe 7mo ago
I've used both gVisor and microvms for this (at very large scales), and there are various tradeoffs between the two. The huge gVisor drawback is that it __drastically_ slows down applications (despite startup time being faster.) For ag
15.
by zeroxfe 8mo ago
It's waaay better than GLM 4.7 (which was the open model I was using earlier)! Kimi was able to quickly and smoothly finish some very complex tasks that GLM completely choked at.
16.
by zeroxfe 8mo ago
It seems to work with OpenCode, but I can't tell exactly what's going on -- I was super impressed when OpenCode presented me with a UI to switch the view between different sub-agents. I don't know if OpenCode is aware of the
17.
by zeroxfe 8mo ago
That tends to work quite poorly because Claude Code does not use standard completions APIs. I tried it with Kimi, using litellm[proxy], and it failed in too many places.
18.
by zeroxfe 8mo ago
I'm not running it locally (it's gigantic!) I'm using the API at https://platform.moonshot.ai
19.
by zeroxfe 8mo ago
Running it via https://platform.moonshot.ai -- using OpenCode. They have super cheap monthly plans at kimi.com too, but I'm not using it because I already have codex and claude monthly plans.
20.
by zeroxfe 8mo ago
I've been using this model (as a coding agent) for the past few days, and it's the first time I've felt that an open source model really competes with the big labs. So far it's been able to handle most things I've t
21.
by zeroxfe 8mo ago
I wasn't trying to disprove your point -- just calling out that the scope of "economy" is broader than "monetization". > Why is fungibility necessary Probably not necessary right now, but IMO it is an emergent ne
22.
by zeroxfe 8mo ago
"Economy" doesn't necessarily mean "monetization" -- there are lots of parallel and competing economies that exist, and that we actively engage in (reputation, energy, time, goodwill, etc.) Money turns out to be the
23.
by zeroxfe 8mo ago
You're in luck -- /experimetal -> enable steering.
24.
by zeroxfe 8mo ago
There's a world of a difference between "at the highest level" and your typical casino poker game. (GPs general point still stands.)
25.
by zeroxfe 8mo ago
TBH, that's pretty much the stack I'd pick if I were building anything new by hand. If you look at the site, there's a lot going on and Next + React + Tailwind does not seem so crazy. These are all quite reliable well-underst
26.
by zeroxfe 8mo ago
The last time I was there, there were many layers of encap, including MPLS, GRE, PSP, with very tightly managed MTU. Traffic engineering was mostly SDN-managed L3, but holy hell was it complex. Considering that Google (at the time) carried
27.
by zeroxfe 8mo ago
> Plex is just sugar on top of file sharing. right, like browsers are just sugar on top of curl
28.
by zeroxfe 9mo ago
If Go had rust-style ADTs and pattern matching, and some parallel of "?" to short-circuit error handling, I'd be thrilled.
29.
by zeroxfe 1y ago
> Not everyone benefits from this tech-driven world. Nobody is claiming that.
30.
by zeroxfe 1y ago
I think that the wax and wane of confidence is a natural (and healthy) cycle to preserve. You start knowing nothing, and have no confidence, then learn stuff and your confidence builds, then you capitalize on that (learning x confidence) by

More ›