Readit News logoReadit News
0x457 commented on Evaluating LLMs for my personal use case   darkcoding.net/software/p... · Posted by u/goranmoomin
EagnaIonat · 4 hours ago
> To access their best models via the API, OpenAI now requires you to complete a Know-You-Customer process similar to opening a bank account.

While this is true, you can download the OpenAI open source model and run it in Ollama.

The thinking is a little slow, but the results have been exceptional vs other local models.

https://ollama.com/library/gpt-oss

0x457 · 4 hours ago
openai/gpt-oss-120b is in this blog post.
0x457 commented on Does MHz Still Matter?   ubicloud.com/blog/does-mh... · Posted by u/furkansahin
AnimalMuppet · 2 days ago
Wait, what? ECC RAM for a consumer CPU? Does anyone sell motherboards like that?
0x457 · 2 days ago
AMDs I/O die supports ECC RAM, but up to motherboard vendor to run the required traces. Some do, some don't.
0x457 commented on Io_uring, kTLS and Rust for zero syscall HTTPS server   blog.habets.se/2025/04/io... · Posted by u/guntars
duped · 2 days ago
> You simply can not do it with state machines polled in user code

That's not really true. The only guarantees in Rust futures are that they are polled() once and must have their Waker's wake() called before they are polled again. A completion based future submits the request on first poll and calls wake() on completion. That's kind of the interesting design of futures in Rust - they support polling and completion.

The real conundrum is that the futures are not really portable across executors. For io_using for example, the executor's event loop is tightly coupled with submission and completion. And due to instability of a few features (async trait, return impl trait in trait, etc) there is not really a standard way to write executor independent async code (you can, some big crates do, but it's not necessarily trivial).

Combine that with the fact that container runtimes disable io_uring by default and most people are deploying async web servers in Docker containers, it's easy to see why development has stalled.

It's also unfair to mischaracterize design goals and ideas from 2016 with how the ecosystem evolved over the last decade, particularly after futures were stabilized before other language items and major executors became popular. If you look at the RFCs and blog posts back then (eg: https://aturon.github.io/tech/2016/09/07/futures-design/) you can see why readiness was chosen over completion, and how completion can be represented with readiness. He even calls out how naïve completion (callbacks) leads to more allocation on future composition and points to where green threads were abandoned.

0x457 · 2 days ago
> And due to instability of a few features (async trait, return impl trait in trait, etc) there is not really a standard way to write executor independent async code (you can, some big crates do, but it's not necessarily trivial).

Uhm all of that is just sugar on top of stable feature. None of these features or lack off prevent portability.

Full portability isn't possible specifically due to how Waker works (i.e. is implementation specific). That allows async to work with different style of asyncs. Reason why io_uring is hard in rust is because of io_uring way of dealing with memory.

0x457 commented on Using Podman, Compose and BuildKit   emersion.fr/blog/2025/usi... · Posted by u/LaSombra
zelphirkalt · 3 days ago
I once tried Nomad for a very brief moment. Not sure if it fits your bill.
0x457 · 3 days ago
Nomad is weird. Its OSS version is like a very limited trial of paid version. At least last time I tried it. To a point that it was more productive for me to install k3s instead.
0x457 commented on 95% of Companies See 'Zero Return' on $30B Generative AI Spend   thedailyadda.com/95-of-co... · Posted by u/speckx
ethagknight · 3 days ago
Im imagining my actual experience of being transferred for the 3rd or 4th time, repeating my name and address for the 3rd or 4th time, restating my problem for the 3rd or 4th time... feels like theres an implementation problem, not a technological problem.

Quick and accurate routing and triage of inbound calls may be more fruitful and far easier than summarizing hundreds of hours of "ok now plug the router back into the wall." Im imagining AI identifying a specific technical problem that sounds a lot like a problem that a specific technician successfully solved previously.

0x457 · 3 days ago
Also waiting music being interrupted every minute to tell:

1) my call is very important to them (it's not)

2) listen carefully because options changed (when? 5 years ago?)

3) they have a website where I can do things (you can't, otherwise why would I call?)

4) please stay at the end of call to give them feedback (sure, I will waste more of my time)

0x457 commented on Sequoia backs Zed   zed.dev/blog/sequoia-back... · Posted by u/vquemener
reitanuki · 4 days ago
This is basically my main gripe with Zed atm — it's very keen to autodownload and execute binaries.

I have a light fork that tries to nullify this, but I don't think I've managed to catch all the instances.

Other than that, it's a very nice editor in my opinion.

0x457 · 4 days ago
> it's very keen to autodownload and execute binaries.

I hate this pattern in software so much.

0x457 commented on Zedless: Zed fork focused on privacy and being local-first   github.com/zedless-editor... · Posted by u/homebrewer
skrtskrt · 4 days ago
Famous indicator of software quality: how fast an editor opened to write it.
0x457 · 4 days ago
Sometimes my ADHD kicks in while Intellij launches and I forget what I was working on.

Deleted Comment

0x457 commented on MCP doesn't need tools, it needs code   lucumr.pocoo.org/2025/8/1... · Posted by u/the_mitsuhiko
PhilippGille · 6 days ago
Given the security issues that come with MCP [1], I think it's a bad idea to call MCP a "guardrail/sandbox".

Also, there are MCP servers that allow running any command in your terminal, including apt install / brew install etc.

[1] https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/

0x457 · 5 days ago
Different issues. Let's take a look at a technology that nearly every coding agent needs to use - git or any other version control tool. Sure, agent can use git by running shell scripts, but how do I limit what part of git it can do? For example, IDGAF what commits it makes on a feature branch because it will be squashed and merged later.

With MCP server, I can just expose commit functionality and add it to allow list. The fact that security for remote MCP servers (i.g. not stdin) is a separate issue. The fact that there isn't an easy way to provide credentials to an MCP server is also a separate issue.

0x457 commented on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos   research.kudelskisecurity... · Posted by u/spiridow
elpakal · 5 days ago
> Sandboxing: All Cloud Run instances are sandboxed with two layers of sandboxing and can be configured to have minimal IAM permissions via dedicated service identity. In addition, CodeRabbit is leveraging Cloud Run's second generation execution environment, a microVM providing full Linux cgroup functionality. Within each Cloud Run instance, CodeRabbit uses Jailkit to create isolated processes and cgroups to further restrict the privileges of the jailed process.

In case you don't want to read through the PR

0x457 · 5 days ago
I don't get it, if you're running on linux then just use Landlock LSM inside a VM.

u/0x457

KarmaCake day1684July 21, 2022View Original