HackerLangs
热门最新趋势评论往期问答秀出招聘

nijave

2,246 声望加入于 8年前
[我的公钥:https://keybase.io/nickv;我的证明:https://keybase.io/nickv/sigs/qMdHcggaKRYKr002ExXFme5MjZeOQbHt-PyAl_07HDk]

评论

nijave
·10小时前·讨论
我在纸上用汇编编写所有代码,然后手动翻译成操作码
nijave
·10小时前·讨论
>已将思维外包

就目前法学硕士的可靠性而言,如果你外包了那么多的思维,那么你生产的主要是泔水,从一开始就不是一个好的工程师。

如果你的质量标准超出了 "看起来可行 "的范围,那么代理人仍然需要大量的帮助和指导。
nijave
·10小时前·讨论
Eh, agents commits are always too verbose. I don't need a 3 paragraph mini novel. Design can go in a design docs folder, project info goes in the issue tracker.

The commit should be a short summary <1 paragraph for quick context
nijave
·17小时前·讨论
这可能是系统提示的变化,但我不确定“更改用户提示以鼓励工具使用”如何证明这两种情况
nijave
·昨天·讨论
是的,这很公平。我认为它们是为非技术用户优化的,没有像样的逃生通道。
nijave
·昨天·讨论
两者都有。有些模型在给定网络搜索和网络获取的情况下,可能只运行搜索,并假定摘要文本是正确的,然后盲目地返回。其他模型则会通过运行网络获取并检查整个页面内容来进行验证。更好的做法是,模型会运行多次搜索和获取,以交叉检查信息。

我这里有一个例子:https://gist.github.com/nijave/2873b8b10d8c732e46264237b0755...

Tldr;所有克劳德模型都有相同的工具,有些模型使用它们提高了效率并验证了数据,而另一些则做得很糟糕,出现了幻觉反应。此外,Exa MCP 工具即使在较老/较小的机型(Llama)上也能更好地工作。
nijave
·昨天·讨论
没错,但你可以让 cert-manager 签发公共证书,然后为集群外的事物创建服务账户,以便从 Secret 中获取证书,这样 k8s+cert-manager 就成了处理更新的本地代理。

你还可以反其道而行之,让 k8s cronjobs 将生成的证书提供给其他基础设施。

有了这个设置,你就不用担心 RHEL certbot snap 会更新到一个被 SELinux 阻止的坏版本了......
nijave
·昨天·讨论
我们有几个子域用于白标第三方 SaaS,在这些子域中,我们基本上等同于 AWS ACM,并添加供应商的持久记录。

通过这种设置,我不必授予第三方 DNS 访问权限。

实际上,我做了一个 webhook,允许按主机名 API 密钥来封装 dnsimple,因为他们只有按区域的密钥,而我不希望每个虚拟机都能访问整个区域。这些挑战将通过允许 DNS 记录自动化从虚拟机中提取记录值而不是让虚拟机推送值来解决这个问题。

我想有人告诉过我 dnsimple 现在可能有更细粒度的密钥,但我没查过。在工作中,我们对外部域名也有同样的担心(有些事情需要顶级域名的子域,但我们不想让外部域名访问整个区域,因此我们通常将顶级域名的子域命名为允许外部域名更新的每个环境区域)。这样,我们就可以使用相同的基于拉动的设置,应用任意规则来决定是否创建请求的记录。

我认为主要的启示是允许拉动而不是推送模式
nijave
·昨天·讨论
在 k8s 上,有 cert-manager,但你还需要 k8s...

大多数浏览器支持首次使用叶证书时的信任
nijave
·昨天·讨论
我的 IaC 位于公共 GitHub 上。他们可以进行网络扫描来查找软件,然后通过指纹来查找版本。

消除攻击面比试图隐藏它要好。
nijave
·前天·讨论
可以说是1/2。您可以将公共证书放在代理上,然后将代理私有 CA 提供给后端服务。然后,您不需要所有私有内容的公共证书,也不需要在所有设备上信任私有 CA。
nijave
·前天·讨论
[dead]
nijave
·前天·讨论
I didn't realize the prevalence until I worked at a company trying to get enterprise market share desperate to "add logos" (the customers were always referred to as "logos" if that tells you anything)
nijave
·前天·讨论
Arguably I'd call that the 90%. In my case, answering the restaurant question correctly with "Rishi" in my tests was the sole intent and 90% of the problem. All the models "helpfully" added extra junk about the closure, dates, quotes, etc and many of them got these details wrong--the 10% or extra crap not central to the question.

If the central question was "what is the bus schedule on `day`" and the model screws that up, it gets a fail in my book.

Also curious if Google Maps gets the timetables correct (assuming it has them).

Semi-related, I also discovered that the default web search/fetch tools are pretty primitive and Exa MCP annihilates them. I ended up doing some comparisons with Claude Code comparing built-in server-side to Exa and to a Python MCP that used SearXNG for search and Exa was a clear winner and Python+SearXNG ended up coming out roughly the same after a few cycles of letting Claude optimize the Python code and adjust SearXNG settings. Ultimately it landed on this (making some changes to optimize returning relevant context directly in the search results so the model didn't need an additional web fetch call) https://gist.github.com/nijave/604c43e3e0fdcd60f5280d3a6b109...
nijave
·前天·讨论
My gut feel is Anthropic is very technical and pedantic which makes their models really technical and pedantic. They're top at code and technical benchmarks but anecdotally I've found OpenAI to be significantly farther ahead for general usage.

Opus 4.8 will burn 10k tokens trying to answer something 100% whereas GPT-5.5 will burn 2k getting it 90% which is good enough for many things.

Some personal testing on a "help me find that restaurant" prompt https://gist.github.com/nijave/2873b8b10d8c732e46264237b0755...
nijave
·3天前·讨论
Yeah, just another example of "connections pools are hard in general"
nijave
·3天前·讨论
Can also use different database names since pgbouncer lets you remap that
nijave
·3天前·讨论
You can rename the tabs in tmux but not sure if there's a way to do dynamic status (I suspect there is but it's probably non trivial to get it to play nice with the harness)
nijave
·3天前·讨论
Everyone does that. Some random startup "We're used by Google!". More often than not some random engineer signed up for a trial or some tiny department somewhere is using it for some internal thing
nijave
·3天前·讨论
tmux has a mouse switch--does this do more than that?