iamspoilt
Joined 12 years ago
Karma
779
Submissions
181
Member since
Mar 19
My email: mrafayaleem[at]gmail.com
View on Hacker NewsRecent submissions
Comment · 1 month ago
Sharing this with the community because I have found self-maintained fully sandboxed environments for CLI very liberating, alleviating my security concerns of bricking my host machines while providing great persistence. Having it as a lightweight self-contained native and reproducible headless VM for development workflows is quite refreshing, and something which I don't find documented enough.
Arguably, this workflow is more ergonomic than Docker for iterative dev work because the VM’s disk persists like a normal machine, so you just install things and move on without thinking about image layers, committing containers, or rebuilding to make changes stick.
Comment · 2 months ago
I recently wrote a blog post on using Tart for Macs for something similar that docker is doing here but with better persistence and control. My take is that the Tart approach is superior to this as it gives you a full dev machine with a single command line that allows agents to access files on host, install packages, maintain the vm and do whatever they want to do without compromising the host OS.
https://www.mrafayaleem.com/blog/sandboxing-claude-cli-with-...
Comment · 3 months ago
Quoting Tailscale: This is our very Canadian apology: sorry you stepped on our toes. The attack didn’t exploit Tailscale, and Tailscale didn’t cause the compromise. But, we didn't stop it. Next time, we will.
Comment · 7 months ago
Have you looked at qmd by any chance? Thoughts on that for sqlite vs qmd in this case? https://github.com/tobi/qmd
Comment · 7 months ago
100% this! This is why I explicitly mentioned in my CLAUDE files to generously use Python for any calculations using the virtualenv. It was also my first time using Claude for tax related calculations so I did cross-check it against an online ACB calculator https://www.adjustedcostbase.ca
Comment · 7 months ago
I couldn't find an equivalent of this for Canadians but thanks for the tip.
The copy-pasting of data from my markdowns to the tax software was the hardest path for me as well.
Comment · 7 months ago
> I use structured JSON documents precisely for this reason, because with a well-defined schema the LLM can write TypeScript functions that must compile.
The intention of this is to reduce hallucination on information extraction, right?
Also, how do you convert your docs / information into JSON documents?
Comment · 7 months ago
An opinionated workflow showcasing how I used Claude and Obsidian together to help with my personal tax filing in Canada
Comment · 7 months ago
Is there an app for this I can download on my Apple TV?
Comment · 8 months ago
As a counter argument to the kubectl example made in the article, I found the k8s MCP (https://github.com/containers/kubernetes-mcp-server) to be particularly usefuly in trying to restrict LLM access to certain tools such as exec and delete tools, something which is not doable out of box if you use the kubectl CLI (unless you use the --as or --as-group flags and don't tell the LLM what user/usergroup those are).
I have used the kk8s MCP directly inside Github Copilot Chat in VSCode and restricted the write tools in the Configure Tools prompt. With a pseudo protocol established via this MCP and the IDE integration, I find it much safer to prompt the LLM into debugging a live K8s cluster vs. without having any such primitives.
So I don't see why MCPs are or should be dead.