mpeg

That's every product launch ever... if it's not been built yet, you're always looking at a render/photoshop/fake

I'd love to preorder, but there's nothing in the site that tells me whether you will ship internationally. I guess not for this first batch?

Tbf as someone with an infosec background, I would have probably written just about the same.

Pickle payload is a red flag precisely because pickle is not a safe serialisation format format when taken as untrusted input, here the input was trusted but it's still giving someone en easy escalation path (exactly what happened)

And most people would assume the whole cookie payload would be encrypted if they saw just a binary blob, and not realise you can fully read it if it's just signed

But, yes, the post was probably edited by an LLM, as is pretty much everything else you read online these days.

If you're going to make this argument, at least say GLM 5.3 instead of Claude, Claude will refuse to touch anything remotely close to this unless you're in the super special club.

And after messaging them and being turned down, still showing up to see if you find them

The project that ax builds on top of does have that disclaimer, and sits on a non-google organisation https://github.com/agent-substrate/substrate

sometimes you don't pay the whole amount back, say I went for food and drinks I might expense the food but pay the drinks out of pocket

plus, it was a neat way of having a company supplied line of credit and defer payment for a couple months with no interest

Last time I worked corporate the card even allowed cash withdrawals, and would automatically mark them as personal expenses so I could pay them back.

Very handy when I don’t want to use my money for whatever reason but also don’t want the company to know everywhere I’ve been

I recognised Kenton from his profile pic, he’s definitely doing well but also is a terrific principal engineer, and still somehow finds the time to answer questions on discord, I’ve had chats with him about DOs even though my spend on the cf platform is ridiculously low

Announcing that the SSR memory leak is gone as part of a product launch is wild.

I think the reason it feels that way (I agree) is that forums had real community; I met irl friends in forums, people I stayed close with for many years

The modern day equivalent is probably discord, there are servers with really close communities where everyone knows each other

I remember in the early 2010s we used to get so much food off deliverance to the office

We found out you could add a negative tip and it would discount it off the price, but no one exploited it too scared that if they banned our address we’d be eating Tesco meal deals instead.

Now please do one to replace the MBA executive that gets hired to restructure the engineering team, asking for a friend.

Spanish is certainly an easy language to learn, but it’s a very hard language to master.

I’m a native Spanish speaker and I find English poetry much easier to understand, English is more rigid and while technically it might have a larger vocabulary you can do less with it, while the flexibility of Spanish in terms of word order and suffixes makes it possible to craft some really labyrinthine verses

to be fair, the title is very misleading, it took me a minute to understand what they meant

The title is a bit confusing, they're not using ciphertext for inference – they're passing ciphertext around in cases where an agent calls into another agent without exposing the plaintext to the end-user

Inference is still done in plaintext after this multi-agent message gets decrypted in the server side

As a counterpoint to all the negative comments here, it’s entirely possible the CTO knows it’s gonna take x time to get your company laptop, which precisely because it’s a regulated industry might mean days/weeks of you waiting around with nothing to do

In that situation it makes sense for you to bring a personal laptop which you can use to access non confidential stuff, you might not write any code in it and might just be given docs to read through

There are reliable ways of differentiating human from cheap, bulk scraping bots.

But if the bot is advanced / expensive enough, it gets a lot harder. Where this product's market sits is in giving a paid way to access content compared to having to spin up bots that run js, from real IP addresses, etc. all of which are more expensive

Yeah, to be fair is not the norm and was mostly due to the AI crypto craze which drove their token price up so they ended up adding very big rewards

Even in LLM jailbreak CTFs I've seen, it ends up feeling like underpaid work when it's sponsored by Microsoft and the prize pool is, say $10k (including stuff like azure credits) considering the salaries AI safety engineers command at big tech!

I saw this thing when it was launched, but IIRC the reward was tiny (like $100?) so it wasn't worth exposing a good prompt for

For comparison, I won a similar prompt injection challenge ran by a crypto company a while back where the total prize pool was over $100k... I didn't win every challenge though, but my team took home around half of that

The problem with good prompt injections is they have a very short half life once they are out in the wild (especially if they work against frontier models)

Data engineers hate this one simple trick

I've used that with companies I consult for, everyone thinks they should do what Google does, so sometimes I'll drop them the "your whole company data fits in my phone/laptop" line to make them understand the (lack of) scale

This is nice, but I don't see much of a difference between just asking claude to write a wrangler config to push to cf pages, which can be extremely simple

  name: my-cool-pages-project   
  pages_build_output_dir: ./html-files/

then npx wrangler deploy

Yeah I guessed that one right because xylophone player sounded like a trap.

I don't understand how they rank words though, some extremely common words like xenophobia were ranked as high as much more obscure ones.

Yeah I got 75k~ and did something similar ... most of the expert and grandmaster ones had at least 1 or 2 obvious incorrect answers, then it was a 50/50 so I usually went for the thing that sounded either closer to the root of the word or completely left-field

Anything up to expert was obvious

It'd also be a lot less awkward to go through 100 words if it had keyboard shortcuts (1-4 for the words, enter to submit) and if they fixed the layout shift jank

I disagree, a lot of the time people buy "serious BI tools" precisely because they think they need all that power and complexity.

In reality, what most people need is much simpler, a mini app with some curated datasets and simple filters, maybe some AI querying if we want to get fancy. There's some companies out there that work with big data, but for the rest of us small data is ok.

I went with eero and really wish I'd gone with unifi

Apart from the shitty software and basic features either missing or locked behind a monthly cost, the network itself is not bad at all, I get 600-700mbps on wifi throughout the house and have my servers wired on 2.5gbe

But the one thing I really thought I was buying into by choosing an amazon brand was ease when it came to buying upgrades, and yet I ended up having to buy extra hardware (like the wired gateway) from ebay and sellers in the US as amazon does not sell their own hardware everywhere

That seems reasonable, I don't buy NAS for datacenters (just run a modest 80tb one for my home lab) but equivalent rackmount 16-bay ones from other vendors would be more expensive (maybe $5k-6k?) and with less polish.

I think there are unknowns in the calculation:

- What are the margins of Anthropic over their API pricing? Without this, all we're saying is the API is more expensive for heavy usage

- How have their price margins changed over time? I imagine built into their commercial model is the expectation for inference to get cheaper over time

- They have tighter usage windows than they used to, now having both 5-hour and weekly limits, they also seem to experiment with their usage quite often, this probably affects user's average utilisation, do they have any other levers they can pull here? eg how does changing to an 8-hour window affect it, or limiting certain models to API-only usage based on capacity like Fable

I know there is a certain level of subsidised usage built into their subscriptions, the VC-funded company playbook, but I don't think anyone from the outside knows for sure how much it is and I imagine it's lower than most people think, and reducing over time.