dangoodmanUT

this is often a worse time-to-patch

As I mentioned in the Northflank breach post:

Unfortunately for infra startups, I think we're going to see a convergence back to hyperscalers as a result of incidents like this and railway.

There's no amount of "nicer to use" that can replace security, at least certainly when selling to enterprises

Also, a trick i've started doing is encrypting my env vars, then hard-code the decryption key in the code

If they're referring to the recent tumble, I wouldn't suggest anthropic incited that

coreweave did

i'm sure ant didn't help, but thanks for the fire sale i guess

it's not obscurity if they don't have the key, it's encrypted (yes i know quantum computers)

It's more secure to let a cloud push immediate patches than to self host in most cases (cloudflare has always been good about this, e.g. php and log4j)

the problem is owning hardware is hard

A trick i've started doing is encrypting my env vars, then hard-code the decryption key in the code

that way if the provider gets popped, they need my binary to decrypt it

it shouldn't be necessary and it sounds stupid, but in cases like this, it proves invaluable (it appears they don't have customer code/binary access, but maybe that wasn't important enough to mention)

Unfortunately for infra startups, I think we're going to see a convergence back to hyperscalers as a result of incidents like this and railway.

There's no amount of "nicer to use" that can replace security, at least certainly when selling to enterprises

"tk is gonna be pissed" you hear echoing in an SF bluebottle

One of the many reasons i preferred mac is because they never tried to force touchscreens on to people

ive never seen someone use a laptop touch screen effectively

just get an ipad

I attribute this to "it's so new and we don't know what the right answer is yet", but you may very well be right

It's nice to see JetBrains finally wake up and realize they can't sell a Cursor competitor from 2024 anymore. Something about JetBrains writing a new IDE seems bold... not sure if it feels correct.

Some of these are objectively bad: buttons should not resize for spinners, etc. otherwise the whole website layout can shift

but the animations are nice

so i see we're still going with the apocalypse today too

imo if you're going to run k8s, have it hosted

same as a db, better to pay #x as much and have it hosted then to be wishing it was not your problem when it was down

and we may very well live in different versions of the world. i'm on the frontlines of startups so we move with the customer, rather than making customers move with us

its not reading, its observation. see other comment abt spiky-friendly workloads

schedulers that can handle spikier workloads generally

believe me i love k8s, and i think agents wield it amazingly well, no more yaml-slop or kubectl (`k`) slop, just yell at claude to fix it

Taking default telemetry is insane.

That aside, the level of control is cool, almost too pedantic. It likely is only particularly useful for very nuanced enterprise requirements (probably what it's targeting). Most companies can be much more coarse with their permissions, and I think the agentic industry is moving away from k8s as a deployment platform.

I really like fly.io posts, they're usually written in such a way that feels so human. I used to read all of them, because the writing was interesting, and secondarily sometimes the topic was.

Except seeing sentences like this:

> The difference is that a Sprite now stops and says so instead of carrying on with a disk it can’t vouch for

Makes it feel distinctly LLM written. Maybe I'm being RL'd to identify LLM authorship, maybe the author was RL'd to write like that by reading so many Claude-written works, but I'd like to see the humanity of fly.io blog posts come back.

yes, how is nobody talking about this

what is happening today

and how are people not talking about this more

That is definitely very not good.

I got into software dev because of cyber sec, and almost everything I learned revolved around poorly implemented php, so I always stayed away from it when building

but this time it's php directly? that's scary

Has mistral just stopped doing open source? I feel like I haven't seen an open model from them in a while, and not many people are talking about this.

If it was an american company, or a chinese company, i feel like it'd be every comment.

> Required for a complete inference service (not included in this release)

Those items are pretty important…

At this point, the way I see it is:

- There's AWS

- There's Azure

- There's everything else

And I don't even use Azure, I just hear it's good (and they don't charge cross-AZ traffic)

> Compile times are really only an issue of you need to iterate extremely fast.

Isn't that the point of agents?

> Plus, Anthropic is unique in that our ability to spend tokens for internal use far exceeds what any other business would realistically want to spend

I appreciate that they're extremely self-aware here.

Something like this was coming. Apple has the best distribution to put devices in someone's home, which allows them to capture the "SmartHome 2.0" wave from AI. Especially when people's calendars, communications, and contacts are already integrated

TBH the biggest tell was when they started doing fingerprinting for "Hey Siri", so they can make mutli-user devices that can tell apple accounts apart.

This is the fundamental issue with networked storage: all apps on top assume small io is fast an local, so network latency doesn't amortize.

With application-level replication, you can amortize it to a few steps (e.g. on commit, do 2PC).

Obviously there's nuance, esp if you have to read from another node, but it's why moving replication as far up the stack as possible generally performs better with DBs -- the DB knows when to touch the network better than the disk.

> Second, this week, we’ll roll out a new monthly API credit to all Max and Team subscribers for use on the Claude Platform. Max 5x users will get $100 in credits per month, Max 20x users will get $200, and Team subscribers will receive up to $500, pooled across their users. These credits are designed to allow our users to experiment with building tools, apps, and agents that call our API.

This is kind of nuts

the copy on example.com looks llm-generated now...