OlivOnTech

I guess competition would sell tokens and move faster than it takes to build a company

I am shocked that they are releasing a skill to check the php version.

Who cannot type "php --version" but can use skills?

Here's my strategy:

The codebase I work on was designed to be split by features. Architecture is well thought and each feature has the same high level abstractions, all code is in one folder. This bring several interesting guarantees: code is scoped to this folder, each feature is "not too big" and fits in the llm context easily, and a design document explains architecture choices, that is well respected by the llm.

When the llm works on a feature, it is instructed to do several things to help me catch errors before shipping. Write a templated description of the change: interactions with external systems, sequence diagram, happy path, corner cases, deploy checklist, settings change, etc. I review high level choices, and not the code.

Finally, the llm add review threads to the code everywhere it made suppositions and related to untested assumptions. Each of this comment says: what could not be teste, what the llm thinks, what happens if I don't change anything and release the code.

Finally, on parts where I want to be sure, I do llm-instructed testing. It can build complex test benchs in no time, fetch data from production "provide me the command to fetch data, and a script to anonymise it", do a before/after comparison, ... It costs few tokens but it buys the peace of mind.

This way I have a workflow where the code is fully written by the llm and I don't go crazy reading its code.

We're using gitlab.com with self hosted runners (that can access lan).

Outages only come from our infra.

Migrating means migrating your ci workflows, but a decent llm can do that easily.

Helix has not seen any release in a while and PRs stack.

Don't forget that your business hours are not necessarily my business hours ;) for worldwide services, there is no global business hours, it's regional at best

We've had the hottest summer ever recorded (since the beginning of 20th century, more than 120 years ago) across Europe. There is no "downward trend), it's going up, and will be for a while.

"Drill baby drill"

You can find latest ipcc report (short version) here: https://www.ipcc.ch/report/ar6/syr/downloads/report/IPCC_AR6...

Please share your sources saying it's not getting worse.

Do you have any source? The global scientific community and more specifically the GIEC have been saying the opposite for years...

This is sadly too common in silicon valley mindset. Full of superlatives, and often not understanding the world outside.

This is published on a marketing website.

If it were not a marketing scheme, they would responsibly disclose the vulnerabilities to the code owners, and go on with their lives.

I read a lot of comments talking about pro-AI or anti-AI. The world (and each of us) is much more complex than a binary split.

You forgot the push forward towards more destruction of the planet we depend on to live, and the centralization of wealth in addition to the one of power.

Cheaper than learning a recovery key?

Yubikey redundancy is a great idea though

Hello, your link says "~20 min read" wich seems to be the case!

I don't agree, I see supply chains attacks as a bigger risk than outdated systems exposed only in the lan.

Most good engineers are way cheaper than that. The world is bigger than the united states.

No it would not work. TLS protects against replay attacks by design, the same response (or query) in clear text will not look the same in encrypted traffic

Data comes from the official status page. It may be more a marketing/communication page than an observability page (especially before selling)

The attacker went through the hassle to compromise a very widely used package, but use a non standard port (8000) on their C2... If you plan to do something like that, use 443 at least, many corporate network do not filter this one ;)

Not the OP, but it's pretty useful in my team, we all work on the same environment, with the same system dependencies, with no setup required on development machine (except the need for docker).

In the devcontainer you can run code snippets, use the system shell and access an execution environment close to production if well made.

It also allows to avoid (system) dependency conflicts between different projects you may work on.

You have human managers discussing with their team (instead of human-decided metrics that cannot see the full picture)

I'm on my phone, maybe your site would benefit having sample data available to showcase what it can do?

Search "where is waldo" online. It's a famous book series where you have to find a person on complex setups

Requirements OS: Ubuntu 18.04 lts

It's quite limited for an auditing tool...

Firefox has had vertical tabs (and tabs groups) for few months now

OP's main arguments to build their own PKMS are: - cost (feature or maintenance) - migration because it won't exist in the future

But their solution is to depend on directus, which can lead to the exact same issues. To my eyes, they just added an extra step...

Hello Simon,

You mention that

> Google, Microsoft, Meta and Amazon all have net-zero emission targets which they take very seriously, making them "some of the most significant corporate purchasers of renewable energy in the world". This helps explain why they're taking very real interest in nuclear power.

Nuclear is indeed (more or less) zero-emission, but it's not renewable.

Thank you for the synthesis and link to the original article, it's a good read!

You can find an attempt here: https://github.com/kagisearch/smallweb/blob/main/smallweb.tx...