Recent submissions

Comment · 6 months ago
It'll pay for itself!
Comment · 6 months ago
Comment · 8 months ago
No. I'm stating a fact. You're free to state other facts if you like.
Comment · 8 months ago
That was a typo from a phone keyboard.
Comment · 8 months ago
Maybe I shouldn't. Something fishy may not be going on in it, and that would become a waste of time.
Comment · 8 months ago
I create a lot of applications with AI. I don't inspect any of the cod.
Comment · 8 months ago
Sure. I'm with you. I'm just puzzled by the article.
Comment · 8 months ago
"Cost" is a matter of personal judgement. Personally, using AI hasn't cost me anything.
Comment · 8 months ago
I don't have a contract with AI.
Comment · 8 months ago
I'll take that as a "no".
Comment · 8 months ago
Can you be more precise?
Comment · 8 months ago
So...software engineers become product managers? All of us? That's going to be an awful lot of product managers.
Comment · 8 months ago
So...what does it cost you?
Comment · 1 year ago
> But that's not to say that they wouldn't be capable of adding safeguards on their end, not even on their MCP layer. Adding policies and narrowing access to whatever comes through MCP to the server and so on would be more assuring measures than what their comment here suggest around more prompting.

This is certainly prudent advice, and why I found the GA example support application to be a bit simplistic. I think a more realistic database application in Supabase or on any other platform would take advantage of multiple roles, privileges, Row Level Security, and other affordances within the database to provide invariants and security guarantees.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton