r_lee

yeah, what I meant with my comment is that the guardrails are supposed to stop honest people, since those that know how to bypass them will have ways to do so

I mean the transformer model came out of Google, and it's literally a query thing so yeah.

any kind of pattern matching / transformation is going to be an ideal task for LLMs

"do plenty" or just use React for everything and have a single thing where you don't need to worry about the limitations or having to remake the same stuff the framework provides?

and what % of users have JS turned off? 0.00001%?

best part is, if you actually know what you're doing, you cna absolutely get it to find bugs/vulns/etc. so it just really about preventing long horizon agentic tasks or people who don't know what they're doing or those who are doing legit non-offensive security sfuff

I think he means incase you're not running it locally and instead rely on a provider where it'd just exfil via thinking blocks or whatever

what do you hope to achieve with this?

they're not really a "proper" CDN

they use random providers for their cheap bandwidth so they don't have much control over their stuff, thus I'd only really use them as a cache for bandwidth heavy stuff

I'm guessing honestly they'd be able to do it by just doing like 1 and 0 flips in some repeated patterns and one side transmitting some "hello" message in morse code or something. if the other llm is watching the output it'd be able to identify such messages very quickly no matter what encoding scheme is used as long as it's common and not complex

github is owned by Microsoft, their intention is not just to make money off of it

it's like Gmail and Google

for the single threaded one it's easier from what I can remember

it's what actually starts conversations.

it's not super "ethical" if you're like triggered by (maybe) harsh opinions, but it gets people to chime in vs just lurking

then everything would be just tiptoeing and nothing would be interesting.... it's not like someone saying that will actually cause Apple to get rid of it

only in HN!

that's great though that you got closure. also remember that hindsight is 20/20 and it's hard to really link some vague symptoms to a disaster until it's too late

> full-HD, 40 inch TV

are we living in 2010 or something?

I literally left. 5.5 is so much better. I don't know how they managed to mess up 5 so bad

how are they supposed to get paid?

do you use their proprietary platform API?

and how are costs like for your usual workflows/etc.?

> with another PHP thing.

oh man...

if you wanna have the same kind of capability as these researchers where you have tight loops calling cli stuff you won't get by with $5 at all, especially for major bugs

if you have a way to turn $5 easily into exploitable vulns, let me know cause that'd be a first for me

it takes a lot more than that....

and like I said in my other comment here, they could've released an OOM-only fix that would've not revealed the actual full exploit but would've protected everyone, but they decided that the only way would be to fix the whole thing and release that... it's very stupid, but seems like it's expected from them, considering it took them 2 months to get to a fix

especially since they could've provided an emergency interim fix that was just the OOM guards

it was easy to find if you had the tokens even without the chainguard patch

you can get a scalable clone of IG up way faster than you could before AI, like absolutely you can

point is, there is 0 demand for an "IG clone". nobody is out there wishing there was a clone of ig

it's one of the simplest kinds of projects as well, it's literally mostly about the CDN

so the AI wrote it using a Czech prompt?

how is this 3rd on the front page? a claude slop blog post with 1 comment?

yeah, I don't see how people say that but then don't understand that fighting against the system almost never goes well.

I feel like same thing is happening to software. some people saying how they barely use AI, or how you can just do 10-100x more yet nobody seems to know where that demand will come from

doesn't mean much when you're forced to use their namesevers. this only applies if you're willing to be tied to CF

they're a nightmare to deal with if you ever have problems. I'd transfer out

wow, I didn't even see it