HackerTrans
TopNewTrendsCommentsPastAskShowJobs

dcherman

no profile record

comments

dcherman
·3 mesi fa·discuss
You need to define how much muscle mass you expect to lose. The entire idea behind the bulk/cut cycle is that you want to net gain muscle after a full diet cycle.

It's also not borderline impossible to maintain the majority of your muscle mass, but it depends on how you eat and train. We don't know enough about the person above's diet, training, current body composition, etc. to say anything for certain.
dcherman
·4 mesi fa·discuss
I think the gist of what we're debating is principle of least privilege - give the LLM the fewest privileges needed to accomplish the task and no more, that way you avoid issues like leaking credentials.

The approach you're proposing is that with a well designed MCP server, you can limit the permissions for your agent to only interacting with that MCP server, essentially limiting what it can do.

My argument is that you can accomplish the identical thing with an agent by limiting access to only invoking a specific CLI tool, and nothing more.

Both of our approaches accomplish the same thing. I'm just arguing that an MCP server is not required to accomplish it.
dcherman
·4 mesi fa·discuss
You can make the identical argument for the CLI tool. Allow kubectl, deny everything else.
dcherman
·4 mesi fa·discuss
The same permissions model that works for other tools. In Claude Code terms, allow Bash(kubectl:*). Deny Read(**/.kube/**). That allows kubectl access without allowing the tool to read ~/.kube directly.

Your argument is the same for an MCP server - auth is stored somewhere on disk, what's to stop it from reading that file? The answer is the same as above.
dcherman
·4 mesi fa·discuss
How so? Let's use a common CLI tool as an example - kubectl. Config is generally stored in ~/.kube in a variety of config files. Running `kubectl config view` already redacts the auth information from the config. LLMs could invoke `kubectl` commands without having knowledge of how it's authenticated.
dcherman
·11 mesi fa·discuss
Can't recall if I played on your servers, but I know I played an unreasonable amount of CS 1.6, including on a bunch of WC3 servers when I wasn't playing on ESEA.

If you happen to remember someone going by `nJs` - hi!
dcherman
·11 mesi fa·discuss
Adjusted for inflation?
dcherman
·5 anni fa·discuss
Random aside, were you at KubeCon a couple years ago chatting with Sugu at the whole conference party in San Diegi? If so, hi! I was crazy out of my depth, but listening to folks that know this stuff better than I ever will was one of the highlights of that conference