Hacker Timesnew | past | comments | ask | show | jobs | submit | gchamonlive's commentslogin

Ask an LLM to assess the package and do a web search for you. Nobody is installing tens of packages a day, you can take a few minutes to consider what you are installing. This isn't blaming the user, it's basic digital hygiene.

> Any time you have disasters or large crimes, you can connect them to children and children's things.

This time you have an actual connection, the state of the world notwithstanding. If you factor in the world however, with this many wars, I'd say it's pretty much linked, regardless of the way you assembled words to make it look like it doesn't, and doubling down doesn't make it less distant from reality.


It's linked, but it's always linked the same amount whether the world is doing well or doing poorly. It doesn't tell you anything about the state of the world to note that these situations exist. What tells you about the state of the world is how common they are.

Imagine someone seeing that the murder rate is not zero and using that to claim the world is worse than it used to be. That's not how it works, despite murder obviously being a bad thing.


Not by itself if it's naive, but if it's able to assess target health and avoid degraded instances then it becomes a component in HA, the other being integrating an orchestrator for gracious recovery.

from their docs:

> PgDog does not detect primary failure and will not call pg_promote(). It is expected that the databases are managed externally by another tool, like Patroni or AWS RDS, which handle replica promotion.


Why the snark comment? The PgDog project has been around for a while, it's not vibe coded.

Not gp but I didn’t perceive any snark in the comment you are replying to

okay, it does appear that the LLM didn't write any of this. i guess the simple answer is that it is not HA.

I had this problem with https://gitlab.com/gabriel.chamon/yagi which is Yet Another Stalker Gamma Installer. In my region, Brazil, I get cloudflare captchas when downloading assets from moddb. Using a VPN solves this but then latency and speed goes out the window. What worked for this particular case was to use an unmodified Firefox build and interact with it indirectly with it's limited interface: launch the browser with the download URL, solve captcha once, have the automation look for the download start at the browser's sqlite db then wait for the download to finish looking at the filesystem. Anything, even marionette would trigger cloudflares anti automation, even if I was solving the captcha manually.

> The medical establishment and journalism have found it extremely uncomfortable over the past decade to notice that obesity has negative health consequences because it might embarrass some fat people

Maybe, or maybe it's the bottomless pockets of the sugar industry lobby.

> Have diets really gotten noticeably unhealthier over recent decades?

Diet is only one of the factors on obesity and it's health consequences, you also have stress, sleep deprivation, lack of exercises, loneliness and isolation.


Diet and exercise (to lesser extent) are the mechanism of obesity. The other factors may affect diet and exercise. A massive other factor for the latter is driving.

I wonder what robust protection would mean in practice for such a capable tool like an agent...

Looking at the trifecta axis, if we assume we can't control untrusted content, that leaves us to create safeguards for private data access and external communication.

Would it be enough if we had a buffer between when these two happened: access to the environment and access to the web?


Robust protection means blocking any mechanism by which the agent, once compromised, might communicate stolen information back to an attacker.

Gitlab.com used to be slightly less available than GitHub but recently I think the tables have turned and Gitlab saas is relatively stable.

I also enjoy Gitlab as a platform. It's got everything, good board, good repo, good issues, good CI, extremely good registries. It's got the equivalent of gists and pages... It a better product all things considered.

GitHub just wins because of popularity. It's WordPress all over again, the thing people use because it's a thing people use.


If only they stopped changing UI's just for the heck of it

Recently they changed the issues list, and it just got worse

They changed the merge request list to be way too smart, making assumptions about user's workflows

To me it feels like they have way too many engineers looking for things to solve that arent really problems

The CI system is great though

Running it self hosted is also generally without any problems - although they just broke my upgrade to 19 because they decided to remove mattermost


I think this is to the point. You keep optimizing towards discouraging malicious actors using your product you will affect legitimate usage in time.

Is there any way to achieve both? Because this raises important questions about fair use.


Wouldn't it be faster to swap to vram if you are sitting there with 8gigs of it unused than swapping to ssd and burning its write cycles, assuming you absolutely need swap

The thing is that I have to agree with you. It'll take Microsoft killing a large enough company for execs to start taking notice.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: