thecopy
thecopy on Hacker News
Maybe. Maybe not. It depends on the sophistication of the malware. Generally my impression is that these install-script type attacks cast a wide net. I would hazard a guess that they would not know how to even ask my 1Password for the keys. They are in an account they dont know, in a vault they dont know, and have a name they dont know
It does help in that the secrets are not in plain-text, readable for any script you run. With 1Password, a process asks for the password and it gets transferred not through the filesystem but through IPC. 1Password shows a dialog: "Do you want iTerm to get your SSH key ABC123?"
In my thinking, this is more secure than plaintext in filesystem
I recommend everyone to move your plantext secrets from ~/.kube/config, ~/.ssh etc into a password-manager. You can tell Claude to adjust the config files to get the secrets from 1Password when they are needed with TouchID requirements etc.
Having the same issue. I have stopped Googling it, since i just start to wonder if its better to just rebrand.
I have a small ChatGPT subscription and a skill i run pre-commit post-Claude that goes through every file and rewrites all english sentences, removes comments and replaces dense terms in variable and function names. It usually reduces comments by ~80%
Well, the thing with renewables is that the energy is not destroyed. When you use a solar panel is does not disappear
Posted by
thecopy on Sunday August 16, 2026 @03:38AM
from the gist.github.com dept.
Peak Hours: 01:00–04:00 and 06:00–10:00 UTC
For European and US customers this is effectively no/marginal increase. I think i wll keep using both Flash and Pro as before.
Except the first time you do it
Sure, but doesn't this assume that you cannot the publisher anyway? So why would you not trust their homepage but trust their source-code
How so? As i understand your point, this would mean we cannot trust GitHub enough to return the same content in git clone vs curl?
>Nothing is arbitrary nor mutable in the default state.
What do you mean with this?
>Anything that suggests curl into bash just plain sketches me out.
How is it different than trusting any other method of installation? If URL has https and is from an author you trust i dont see the difference.
Im working on an extensible and flexible agentic connectivity platform (MCP, OpenAPI/Swagger, FaaS) with niceties like built-in CodeMode, compression, SIEM integration, access token forwarding, SCIM 2.0, on-demand agentic sandboxes (e.g. LangChains "Deep Agents").
For private use not that useful tbh (although i found the OpenAPI -> MCP mapper useful), but found sales success with organizations with more complex agentic setups.
Gatana: https://www.gatana.ai/
I agree with parent. OpenRouter might be cheaper list-price, but i have been using 10$ on DS platform since April/May, still have 2$ left. Using OpenRouter i depleted the same dollar-amount in a 1-2 weeks with same usage pattern. No idea why.
Love the idea, any plans on making TUI based? Like k9s? :)
Posted by
thecopy on Wednesday July 29, 2026 @11:41AM
from the cleanenergyreview.io dept.
1. Use Passkey from 1Password
2. Profit
When DeepSeek was released, it had an immidiate and significant impact on the US stock-market. Now when its becoming common knowledge that China is almost at parity with US SOTA models with good momentum, why is there no sentiment change on the market?
When DeepSeek was released, it had an immidiate and significant impact on the US stock-market. Now when its becoming common knowledge that China is almost at parity with US SOTA models with good momentum, why is there no sentiment change on the market?
Am i the only one feeling my soul being emptied every time i read another "brutal shorthand" or "honest take"?
DS through OpenRouter is significantly slower than direct from DS platform in my experience
Every mature MCP gateway solution should implement Code Mode (e.g.
https://docs.gatana.ai/code-mode/) - it circumvents all the arguments.
In the end MCP is just a protocol for discovering tools. And agents _need_ to do stuff with tools.
I genuinely find DDG more effective than Google Search. I have used it as a daily driver for 2+ years now. When i cannot find anything with DDG, i try with the !g macro, but results are more often than not even worse.
Super interesting idea! Congrats on the launch. Context is definitely something that is lacking in my experience. Im always frustrated when an agent cannot answer business-related questions, and i compare them to coding agents which seem to be able to answer everything. The difference is that coding agent has the context right there at the fingertips, while for business its gated behind a bunch of services and custom data models. Context is king :)
How do you handle encryption and confidentiality? Im building in this space too (MCP gateway https://www.gatana.ai/) which already have semantic search for tool outputs, and ensuring encryption and confidentiality is not trivial.
That is not necessarily true.
>$39 Github Pro+ to keep using Opus,
For what its worth, i have been paying for Pro+ and i still got locked out of Opus. I only have access to Opus 4.7 at 7.5x
I have Copilot Pro+ and discovered i cannot use Opus anymore today! Are we reaching the end of VC funded productivity?
Gatana:
https://www.gatana.ai/Extremely flexible and configurable MCP Gateway, target users is enterprises/companies/organizations who want secure and managed MCP within their company. Support both Cloud and On-premise.