verstra

u/verstra@programming.dev
20 posts · 373 comments

Recent posts

Recent comments

Wait, is this a proxy to my API? If yes, what's the privacy policy / do you think users and providers would trust you with sensitive data (that might be subject to local privacy laws). If no, how can users buy access to my API though your platform?

Also, what kind of APIs are supported? REST (HTTP+JSON)? JSON-RPC? gRPC? Capnproto?

on Rust trojan horse · c/programmer_humor · 86 pts · 33d

What? You list metaprogramming as a plus? And functional programming as a minus?

You should rewrite this meme in rust.

I think a phone charge contains less energy than a liter of 100C water or a few minutes worth of charging of an electric vehicle. For individuals, more efficient phone chargers are just not a priority. Even if you'd make 100% efficient charger, it would only save you fractions of a percent of your total electricity consumption.

Source: my general feeling

I say mantra because there is a large amount of people just hating AI outright, without a grounded reasoning.

Granted, coding agents are insecure by default - they are built to execute remote code - but that does not mean they are generally useless/harmful/bad. I run them in a container, with access to the codebase only.

Also, they hallucinate, produce over-convoluted abstractions, do not know when to reject instead of blindly trying to find a way trough a brick wall.

But also, they can answer questions about gigantic codebases way faster than I could. They can generate tests, find missing test coverage, review code, and many other things.

Well, yes, but also - you don't have to pay them. There are open-weights models you can run locally that contain most of that common-wealth knowledge.

Well, these are some kind of lightweight container, no? But without isolating network, or /etc, /proc, /usr, /var or dbus.

I do agree that linux needs a notion of an "app" (isolated, with access only to its config and files you give it, and a small, well-designed set of APIs for interacting with the system). For coding agents, I think a better answer are development containers, because that would be needed to prevent npm/cargo/python build scripts from causing harm anyway.

It's probably something like "I've disabled agent's removeFile tool, but LLM figured out that it can use the bash tool, still".

It looks like "AI bad" or "Claude insecure" mantra.