It still happens, problems that are solved still happen when people don't take care to apply the solution. Diseases that were solved problems happen again when people stop taking the vaccines.
You can avoid SQL injection by just coding the same features with a bit of care. You loose nothing. Mistakes can always happen, but it's not even tricky to prevent SQL injection.
Right now the only way to avoid Prompt injection is to not let your agents see user input at all. A very wide range of features that we'd like to implement are unsafe and there isn't a way to prevent this reliably.
I guess we'll need to get used to control the agent's permissions very tightly, and taylor them per-conversation. The agent I speak to for customer support must only have access to my data, and not because of instructions in the system prompt, these will need to be hard limits.
Jumped to GrapheneOS a few months ago. Works great. The keyboard was bad but you should install FUTO, as some other comments recommend.
My only issue with it has been a few apps not working correctly, and not the ones I expected. I did my research before hand and knew that my banking apps would work, thinking those would be the main challenge.
Turns out the bike-sharing system in my city, Madrid, won't work. I ended up installing Google Play services (that run sandboxed in Graphene, but still wanted to avoid), and it works sometimes, but mostly doesn't. I use these bikes a few times a week, so this is a major hassle, and I end up carrying my ancient iPhone with me sometimes just for this.
This and Trade Republic have been my only two problems. Happy otherwise, but do your research before switching, and don't assume only the apps you expect to be problematic will be.
Sadly, this will always be a game of cat and mouse. I wonder if it was ever avoidable for the internet to become a hundred of such games at once, between advertisers and ad blockers, trackers and browsers, hackers and developers, search engines and SEO experts...
If your concept took off, someone will make a program that inputs the LLMs text like a human would. It might still take some time (if it isn't possible to hack the timing records client-side), you'd probably have to get busy detecting multiple connections from the same IP, and then they'd work around it...
Qwen 3.7 Max:
> During my local testing before the full eval harness it was the only non-GPT model that was able to complete the task, was not able to reproduce in the longer runs.
Doesn't that sound like may be the harness was the problem?
It could just alias sudo on your ~/.bashrc. No need to replace the actual file on /usr/bin/sudo or wherever you have it. I would only need to be able to run arbitrary code as you.
I so wanted to love the Steam Deck, but it's a device with a 7 inch screen that occupies a massive volume on your bag. Unless you know you're going to play a fair ammount, it's not worth carrying around.
It's a fantastic console, but a mediocre general purpose computer.
I have one, and I love it! I don't use it as much as I thought I would, but it brings joy everytime. If you have a need for an extremely portable, not very powerful device on your life, this might be it.
I agree with the complaint about the trackpad, but the keyboard has been just fine for me. Just a bit small, of course. I also find the screen perfectly acceptable for what I use this thing for: youtube, taking notes, writing emails, small bouts of coding and ssh'ing into servers.
My main complaint is related to battery management. May be it's becaused I'm used to Macbooks, but it drives me nuts to go pick the Minibook up and find that it has no power, because I haven't used it in a couple of days and I put it to sleep. I haven't measured, but the power use on sleep is noticeable, and I suspect the leakage while hibernating might be significant too.
I don't really like the laptop form factor. Laptops are the perfect solution for only one use case: using them on your lap. On a table, I'd rather have the computer be just a tablet, to add a bluetooth keyboard and mouse. At my desk, with bigger screens, I'd like the computer to disappear into a small puck or box, like a Mac Mini. With the Minibook, being so small, the form factor makes sense again. It's so portable, so easy to take with me to a coffee shop or on a trip, it's worth it.
A tablet with a keyboard might be a more practical solution, although generally more expensive, but I appreciate that my Minibook runs Linux so well, so I don't have to even think about Apple or Google telling me how to use my computer.
I had a couple of eye-opening conversations about this the last time I was in San Sebastian. Not everyone there loves Mondragon as much as we think, some see it as a closed club that makes it arbitrarily hard to get a job with them depending on your connections. I met some workers unhappy of their hiring practices and I think their starting working conditions. No idea if they were fair or just resentful.
I still admire Mondragon and wish there were more companies like it, but now I try to remind myself that most characterizations from the outside are surely lacking in nuance.
1 in every 10 people may have a cat alergy, but the % of folks with an allergy as severe as yours has to be much lower. I know plenty of people with cat allergies who can spend entire evenings in my cat-inhabited with only very minor discomfort. The person with the most serious allergy to them I know is miles away from your symptoms.
I think you are exaggerating the severity of the issue, but I'm sorry you have this terrible allergy to something as common as cats, that sucks.
Although I agree with other commenters that your command can't compare to all of bat's features, many of which I appreciate... thank you for sharing this tip, I didn't know about `highlight` and I can't install `bat` at work.
This will live in my .bashrc for a long time:
cat() {
if [[ -t 1 ]]; then
command cat "$@" | highlight --force -O xterm256
else
# plain cat to pipe into other things
command cat "$@"
fi
}
Webapps are rewritten because a developer wanted to use the new shiny, or someone was convinced that everything will be better with the newer frameworks everyone is using. Also, it often goes hand in hand with giving it a more modern look-and-feel.
But the point is not whether webapps are rewritten, but whether they have to be rewritten. I know some old enterprise webapps made with PHP about 10 years ago that are still working fine.
You do have to worry about security issues, and the occasional deprecation of an API, but there is no reason why a web-based service should need to be rewritten just to keep working. Is that true for mobile and desktop apps?
It's not that you _need_ sympathy, or that football deserves or needs your sympathy like it's a good cause.
It's just generally good to try to understand others instead of distancing yourself from them. I find F1, jazz, finance, and so many other things to be really boring and uninteresting, but I try to get the people who like those and connect with them. F1 people and jazz people are often more interesting than their interests; I haven't gotten there with finance yet. The world is more interesting this way, but you're under no obligation.
> In a just world LaLiga would get sued into the ground for disabling a public utility on a level equivallent to an international cyberattack.
In a just world LaLiga and FIFA would've been sued into the ground like five scandals ago, but I don't think gtowey was suggesting you try to empathise with them, but with people who like football.
In many football stadiums throughout Spain, chants like "Vaya puta mierda de Liga" and "Corrupción en la Federación" are heard almost every game. It's not the whole of the football world that wants to censor the internet, it's the league and the interests of a few corporations (including, sadly, clubs).
Football piracy is on the rise, because watching football has become extremely expensive in the last few years, even if you just want to watch your teams games. I know many people who used to pay for it; now most of them, including law-abiding citizens who wouldn't normally pirate, are learning how to do it.
The main thing keeping me from trying out Omarchy is the pain of setting up multiple displays. I haven't tried Hyprland, but whenever I've tried a non-mainstream desktop/wm in Linux that was the worst, especially if your setup changes often (as in, you have a laptop and move around and plug it in different places).
May be that just means I'm not enough of a tinkerer for these setups.
Is it a hard problem to remember more than one configuration and link them to the displays connected to your computer? Or is it just that Omarchy users really don't mind editing monitor.conf[1] often?
This changes, not only over time, but also from region to region.
A close friend of mine travels to China often, and they use Mullvad because of my recommendation. Last year it worked great for them, but earlier this year they went back to China, and it really didn't work.
What I found most interesting is that they had different results in different places. Apparently, in the business areas of Shanghai and Beijing, were they had meetings and events, they could get Whatsapp and Slack messages; when they went back to the hotel, in a residential area where there were almost no offices or tourists, it didn't. In Chongqing even less stuff worked.
I was very skeptical of this when they told me, but they could replicate this consistently over a couple of weeks. It wasn't related to hotel Wifi (that's a different can of worms), this was on mobile data.
Everything worked when they switched to using https://letsvpn.world, at the recommendation of some chinese colleagues of them.
This was with a basic Mullvad install on iOS and Mac, they're not technical enough to harden their VPN connection further; may be they could've easily obfuscated it more and it would've worked.
I'm a web developer but I've also worked in C (no plus) and other stuff. I fully acknowledge it exists; I actually would love to use it.
But then I'd be reaching way less people than with the web. My web apps can be tried without installing anything, work on mobile and tablets and on any desktop (except may be cool weirdos using iMac g4s).
The web allows me to reach more people; if I'm working on apps that help make the world a better place (or so I think), that feels more important than the RAM they use (even though using more RAM might be driving more e-waste, thus also making the world a bit worse on that count.)
I generally agree with dropdowns being overused, but this seems too much to me:
> Picking a date from dropdowns is the worst. If I ever do this, then I’ve really failed as a UX designer.
Really? On a laptop, native dropdowns use keyboard input as search, so using tab (granted, not everyone knows this) I can generally enter my age almost as if I was writing it.
On mobile, scrolling through the iOS dropdown control is fine, more comfortable than typing. Scrolling 30 options back to enter my age is the worst part, and getting worse every year, but it isn't that bad.
He only mentions Clojure in passing. At some point I decided that, were I to learn a functional language, it would be Clojure. How would you say Clojure fits in this comparison? Is it only relevant or interesting for concurrency?
You can avoid SQL injection by just coding the same features with a bit of care. You loose nothing. Mistakes can always happen, but it's not even tricky to prevent SQL injection.
Right now the only way to avoid Prompt injection is to not let your agents see user input at all. A very wide range of features that we'd like to implement are unsafe and there isn't a way to prevent this reliably.
I guess we'll need to get used to control the agent's permissions very tightly, and taylor them per-conversation. The agent I speak to for customer support must only have access to my data, and not because of instructions in the system prompt, these will need to be hard limits.