drdrey

fires? floods? documents getting lost/misplaced/stolen/destroyed?

the problems are general and abstract, domain specific knowledge and memorization don't help. Figuring out the rules, the goal, the controls, and how to solve in a reasonable budget all indicate some level of general ability.

Counterpoint: don't read the comments

And it can pay for itself twice: once in real work shipped, and once again in something else you could probably use more of, which is gravity.

what?

as someone who doesn't know how to get better design out of LLMs, can you elaborate?

I have finally embraced squashing PRs and realized I wasted my youth trying to write Good Commits.

it's tribal, it feels good to rally against a common enemy

good luck formally verifying everything

that ship has sailed

for me it's that it works remotely and my kids can access it over Discord

this seems like what MCPs should have been from the beginning. If you think MCPs are better, can you explain why?

the problem with any approach like this based on usage metrics is that it will be abused to death

...but is it good?

have you tried adjusting the reasoning effort?

5.2-codex just came out. You could use codex with regular 5.2 for a week or so.

ok but these are details, the point is that the operators of the database are external, selfish and fluctuating

death before Jenkins

the big difference is the trust assumption, anyone can join or leave the network of nodes at any time

you don’t have to follow the herd

meanwhile, OP's entire substack post denouncing hustle culture is about plugging his viral tweet and his ebook

it's hard to take the article seriously when the author relies on a fuckgit alias on a regular basis

not every line is read from a file

counterpoint: a lot of people around me just type "zillow" in google to access it, so maybe it's not absurd to refer to it by name in a chat interface

Keep your oxidative stress low and you will not get heart disease.

if you take this advice literally, you should stop exercising

A while ago, I collaborated on angulartics2, a shared repository where multiple people still had admin rights. That repo still contained a GitHub Actions secret — a npm token with broad publish rights. This collaborator had access to projects with other people which I believe explains some of the other 40 initial packages that were affected.

A new Shai-Hulud branch was force pushed to angulartics2 with a malicious github action workflow by a collaborator. The workflow ran immediately on push (did not need review since the collaborator is an admin) and stole the npm token. With the stolen token, the attacker published malicious versions of 20 packages. Many of which are not widely used, however the @ctrl/tinycolor package is downloaded about 2 million times a week.

I still don't get it. An admin on angulartics2 gets hacked, his Github access is used to push a malicious workflow that extracts an npm token. But why would an npm token in angulartics2 have publication rights to tinycolor?

Easy sharing, easy to make pages public, good syntax highlighting, decent search.

Elon Musk is not a cofounder of Tesla

https://en.wikipedia.org/wiki/Compute_kernel

that's academic writing for you

I see, thanks

OP thought the redirect was synchronous, not that it would stop the script from executing