mday-edamame
Joined 7 months ago
Karma
6
Submissions
7
Member since
Mar 27
Recent submissions
Comment · 7 months ago
Are you worried that you never get to see the results of architectural decisions you make? Two years is not much time to make an impact and see it through if you’re senior+
Comment · 7 months ago
On some level the feeling matters more than the reality, past a certain survival threshold.
Comment · 7 months ago
True, but the tools make the default behavior so tempting.
I have a friend who uses Google Maps to find places, then memorizes the route there and closes the app to navigate because he wants to build a better mental map of our city. Meanwhile, I just check the app every five seconds like a dummy, and my hippocampus stays small.
Comment · 7 months ago
There's another element to the solution here: runtime behavioral analysis. No matter how completely the maintainer's credentials are compromised, no matter how well the malware is concealed, it still has to act like malware (in the case of LiteLLM, credential harvesting, in this case a remote-access Trojan). It's possible to detect the behavior, rather than relying on supply-chain integrity.
We built a free tool that runs local behavior analysis on your machine, it's caught every supply-chain attack in the last couple weeks: https://www.producthunt.com/products/axios-litellm-detector