mdeeks

He doesn't seem to be a marking guy. Also you haven't given a reason not to take his words seriously

It's both. It is just whether it is done on purpose or on accident. Most of the recent hacks have been it breaking out of containment and deciding to do something it definitely should not have.

EFS is extremely slow for many workloads. We tried it for builds and various other common use cases for coding agents and the performance just isn't there. I'm guessing lots of small random reads/writes just isn't going to ever work well.

> MicroVMs support up to 8 hours of total runtime

Does this mean you effectively can't use them as long-lived developer environments? It sounds like even if you suspend them, this is the hard limit on the total time it can run.

Two years? That exists right now. You only have to point Codex Security at an open source repo. There are a lot of tools and companies that are spinning up today that do autonomous pentesting.

I'm not even sure a specialized model is needed here. It probably just needs the right harness around existing ones.

I expect the next two years to be absolutely brutal for hacks. Attackers have supercharged tools in their hands right now. Defenders are only getting started and will have to plow through a massive backlog of newly uncovered vulns.

The major short term downside is that open source or personal projects won't be able to afford things like Codex Security.

You can get a taste of this today yourself with Codex Security. I turned it on just as an experiment and in less than a week it has now become essential to all of us. I was shocked how accurate it is, how many security issues it found in existing code, how it continually finds them as we commit, and how NO ONE is immune from making these mistakes.

I'd say it is about 90% accurate for us. Often even the "Low" findings lead us to dig and realize it is actually exploitable. Everyone makes these mistakes, from the most junior to the most senior. They are just a class of bugs after all.

I expect tools like this to be a regular part of the development lifecycle from here on. We code with AI, we review with AI, we search for vulns with AI. Even if it isn't perfect, it is easily worth the cost IMHO. Highly recommend you get something enabled for your own repos ASAP

What? There are three flags flying in my street alone and I'm in the middle of the liberal bay area.

I'm not quite understanding your project. What is the use case? Is this so I can package up an existing terminal app as a dedicated desktop app?

If so that actually sounds really cool. I'd like a dedicated lazygit app in my tray at all times.

I feel like pricing needs to be included here. I kind of don't care about 10 percentage points if the cost is dramatically higher. Cursor Bugbot is about the same cost but gives 10x the monthly quota of Qodo.

I know this is focused solely on performance, but cost is a major factor here.

They aren't just building "a lot" of renewables and nuclear, they are building an absolutely mind boggling amount of it. Last year it was more than the rest of the world combined!

Who cares about mental gymnastics. It's a win for literally everyone and I hope you ca see it that way instead. Competition is good. It drives others to keep up.

Despite what the current US govt wants, the economics of solar and other renewables will drive it. Worst they can do is slow it down a bit.

I didn't say China isn't doing anything. They are rolling out a mind boggling amount of clean energy right now. More than any other country by far. It's honestly incredible scale. It unfortunately isn't keeping up with their emissions though. The data is from 2023. It's very possible that in the last two years China has been able to stabilize emission growth.

I actually disagree a bit on the first part. I think developing countries have a right to have higher per capita emissions as they raise their standard of living and economy where they can get to the point of widely adopting clean energy.

That’s a really great point. Maybe their emission curve is what matters. It’s the measure of if they are investing enough into reducing emissions despite their production needs.

Qatar emits FAR more than the US per capita, but the total emissions are extremely small. The impact on the climate is tiny comparatively.

I signed up and tried it with Cursor. It is very close, but still has a lot of rough edges that make it hard to switch:

  * Once in Cursor I can't click on modified files or lines and have my IDE jump to it. Very hard to review changes.
  * I closed the Ona tab and couldn't figure out how to get it back so I could prompt it again.
  * I can't pin the Ona tab to the right like Cursor does
  * Is there a way to select lines and add them to context?
  * Is there a way I can pick a model?