|
We’ve all heard the horror stories where an unsandboxed coding agent deletes the user’s entire home directory. As a mitigation, many vibe coding tools are now using Docker to contain the agent’s actions. Unfortunately, Docker is not a good tool to keep the vibe coding agents at bay . To quote Docker’s own documentation (emphasis mine): The docker group grants root-level privileges to the user . For details on how this impacts secu....
|
|
We’ve all heard the horror stories where an unsandboxed coding agent deletes the user’s entire home directory. As a mitigation, many vibe coding tools are now using Docker to contain the agent’s actions. Unfortunately, Docker is not a good tool to keep the vibe coding agents at bay . To quote Docker’s own documentation (emphasis mine): The docker group grants root-level privileges to the user . For details on how this impacts secu....
|
|
We’ve all heard the horror stories where an unsandboxed coding agent deletes the user’s entire home directory. As a mitigation, many vibe coding tools are now using Docker to contain the agent’s actions. Unfortunately, Docker is not a good tool to keep the vibe coding agents at bay . To quote Docker’s own documentation (emphasis mine): The docker group grants root-level privileges to the user . For details on how this impacts secu....
|
|
My website was banned from Lobsters as 'startup slop' for using AI agents to help write blog posts. When does tool-assisted writing become slop, and why are we having the wrong conversation about AI in content creation?
|
|
Fresh insights on AI-assisted development: practical experiences with Claude Code and the evolving landscape of full-breadth developers in the age of AI
|
|
Welcome to a new project: a members-only newsletter experiment on Contraption Company called Workshop. So far this year, 98k people have read essays on this site\1\(fn1), and more than 4k subscribe to...
|
|
Ever since the soykaf at OpenAI and other "AI" mills started spitting out Lain clones and chatbots, this place has been flooded with machine‑generated noise. It's like watching a bot recite the poetry of corpses. There was a time when /sec/ meant actual hackers sharing real knowledge, not bots summarising blog posts and posting AI‑art abominations. I come here to read minds, not to read prompts. If you can't form a thought without a m..
|
|
Do the design patterns learned in other programming languages translate to coding in Python? Christopher Trudeau is back on the show this week, bringing another batch of PyCoder's Weekly articles and projects.
|
|
be government >have access to all domestic phone numbers and their owners >add number to contacts >tg shows username for that numbers >can't be disabled >"hide number" is no fix since it's reverse >scale this >have every username for almost every domestic tg user and their legal name atlest signal you can disable users finding you with number. even snapchat has this feature. but not tg. check europol osint reports if..
|
|
Old timers who built the early web are coding with AI like it's 1995
-
nicolaiarocci.com
-
10 months ago
-
eng
The old timers who built the early web are coding with AI like it’s 1995. Think about it: They gave blockchain the sniff test and walked away. Ignored crypto (and yeah, we’re not rich now). NFTs got a collective eye roll. But AI? Different story. The same folks who hand-coded HTML while listening to dial-up modems sing are now vibe-coding with the kids. Building things. Breaking things. Giddy about it.
|
|
When “Private" Isn't: The Security Risk of GPT Chats Leaking to Search Engines
-
snyk.io
-
10 months ago
-
eng
Discover how a now-removed feature allowed private ChatGPT conversations to be indexed by search engines. Learn the privacy risks and how to protect your data from unintentional exposure.
|
My background contemplation this month has been about siblings. I am astonished by how different they can be. The way that some people seem more skeptical and others more credulous. The range of variability in how much they care what other people think of them. What they believe other people owe them and they owe others. I have no idea if nature or nurture is a useful framework or continuum. What siblings believe and how they behave could....
|
|
Here is my monthly newsletter about what I'm up to, which I send in place of social media. What I did in last month - Back to eating solid foods after my jaw surgery. - Playing with gpt-oss on my com...
|
|
In this post I won’t go into extensive technical steps, it would become too long and complex. Instead, I’ll focus on describing the current state of my setup, including hardware and software updates. For those interested in the more in-depth technical details I’ve included links throughout the post to previously published articles related to a specific detail/hardware. The updates in this post are: Cabinet new layout Network scheme ....
|
|
In this post I won’t go into extensive technical steps, it would become too long and complex. Instead, I’ll focus on describing the current state of my setup, including hardware and software updates. For those interested in the more in-depth technical details I’ve included links throughout the post to previously published articles related to a specific detail/hardware. The updates in this post are: Cabinet new layout Network scheme ....
|
Intro Full/Detailed voting results I am basing this off – You should read this while looking at that Huge increase in the number of votes: from 144 last year to 2785 this yearThe election was to elect Two Council Members from 11 candidates. The FSU supported Jonathan Ayling and Douglas Brown and gave instructions to their … Continue reading Analysing the 2025 InternetNZ Board Election
|
The KDE project is developing its own immutable Linux distribution called KDE Linux, and testing builds are available for download. The distro gives you a new way to experience the Plasma... The post KDE Linux: Help Test the Official Linux Distribution is from OMG! Linux and reproduction without permission is, like, a nope.
|
|
NVIDIA is worth 8% of the US stock market. 88% of their revenue comes from enterprise-scale GPUs primarily used for generative AI, half of it purchased by only 4 companies: Amazon, Google, Microsoft and Meta. These 4 companies will have… Continue reading →
|
|
NVIDIA is worth 8% of the US stock market. 88% of their revenue comes from enterprise-scale GPUs primarily used for generative AI, half of it purchased by only 4 companies: Amazon, Google, Microsoft and Meta. These 4 companies will have… Continue reading →
|
Won’t someone think of the poor children?” they say, clutching their pearls as they enact another stupid law that will harm the privacy of every adult on Earth and create Prior Restraint that inhibits the freedom of speech in liberal democracies. If you’re totally ignorant of how things work, the proposal of “verifying you’re an […]
|
|
AppLink Fundamentals III: Building with AppLink – Development Flow and Language Choices
-
www.heroku.com
-
10 months ago
-
eng
This blog series has taken you on a journey through the world of AppLink, from its foundational concepts and core components in Heroku AppLink: Extend Salesforce with Any Programming Language, to a deep dive into its key integration patterns in AppLink Fundamentals I: AppLink Integration Patterns – Connecting Salesforce to Heroku Applications, and then we […] The post AppLink Fundamentals III: Building with AppLink – Development Flow and..
|
|
Intro I’ve played the clarinet since 5th grade, and since then have spent a lot of time playing music. I’ve also spent a lot of time writing software. My motivation here is to make an analogy between prompt engineering and music, with the goal of shedding some insight into the limitations of today’s AI. I believe that claims about the automation of software engineering or white collar work are overblown. What Does a Conductor Do A conducto....
|
|
Hey everyone, I care a lot about privacy and security , and I have been thinking of switching to GrapheneOS for my phone (currently using an iphone xr). The main thing holding me back is that I would need to buy a Google Pixel (thinking of going for the 7a
-
lainchan.org
-
10 months ago
-
eng
Hey everyone, I care a lot about privacy and security , and I have been thinking of switching to GrapheneOS for my phone (currently using an iphone xr). The main thing holding me back is that I would need to buy a Google Pixel (thinking of going for the 7a) just to use it. I don't want to drop money on hardware if the OS ends up not being worth it or not that much better than other privacy-focused setups. So for those of you who've used Gr..
|
|
After Claude Pro changed to weekly limits, I explored self-hosting Qwen3-Coder-480B with 400k context windows. Here's what I learned about costs, alternatives, and why Claude Code still dominates the landscape.
|
|
It has been a really long time since I last wrote something here as life happens, things get busier, etc etc. I am now trying to get back into writing things down and here we go! So, imagine a tool or a service that allows you to run some arbitrary code via a shell. Either through a ssh or more commonly, via a web terminal. How does these tools isolate your code from other people’s code and vice versa ? How come you cannot see other peopl..
|
|
It has been a really long time since I last wrote something here as life happens, things get busier, etc etc. I am now trying to get back into writing things down and here we go! So, imagine a tool or a service that allows you to run some arbitrary code via a shell. Either through a ssh or more commonly, via a web terminal. How does these tools isolate your code from other people’s code and vice versa ? How come you cannot see other peopl..
|
|
I recently got the urge to better understand how NixOS is built and how secure the build pipeline is. So, I started looking at all the build systems involved, the infrastructure they run on, how everything is managed and which build jobs are running in these systems. This is my attempt at documenting the above.
|
|
Stack traces for Postgres errors with backtrace_functions
-
notes.eatonphil.com
-
10 months ago
-
eng
|
|
Drag and drop your vector geodata (up to 1 GB) into MapTiler to get it immediately ready for publishing online.
|
|
It’s that time of year again! The first week of August means my annual trip to the desert for “Security Summer Camp”—the whirlwind of BSides Las Vegas, Black Hat, and DEF CON. It’s always an exhausting but amazing week, and I can’t wait to dive in, catch up with everyone, and talk about what I’ve been working on. This year, I’m excited to be giving two talks that dig into the weeds of the CVE ecosystem. My Talks in Vegas I’ll be on stage at....
|
|
AppLink Fundamentals II: Advanced AppLink Integrations – Automation & AI
-
www.heroku.com
-
10 months ago
-
eng
In our previous posts, we introduced Heroku AppLink and explored its foundational integration patterns for connecting Heroku applications with Salesforce. Now, we’ll delve into how AppLink truly expands Salesforce capabilities, focusing on advanced integrations with Data Cloud, Flow, Apex, and Agentforce. This blog will highlight how AppLink empowers you to infuse your Salesforce orgs with […] The post AppLink Fundamentals II: Advanced A..
|
|
Introduction In February 2024, renowned AI researcher and educator Andrej Karpathy, published the following video. https://www.youtube.com/watch?v=zduSFxRajkE An excellent introduction to the fascinating topic of tokenization, something he considers a necessary evil right now. Maybe the need for it will go away but for now it must be well understood by AI engineers in order to get good results when building and using large la....
|
|
Beat Coding Interview Anxiety with ChatGPT and Google AI Studio
-
zackproser.com
-
10 months ago
-
eng
|