rhodey
Joined 13 years ago
Karma
117
Submissions
51
Member since
Mar 29
Recent submissions
Comment · 22 hours ago
Would you rather: lose $1.5BUSD or: do dependencies better?
Comment · 22 hours ago
This only defers the issue to trusting that index.html is always trusted.
Comment · 1 day ago
This is the same style of attack that took 1.5B from Bybit ~1yr ago.
Fundamentally: There is no way to lock webapps to reproducible builds.
Except: IPFS could do it but IPFS has been very very poorly maintained.
I published IPFS-boot ~1yr ago and its a simple idea:
1. deploy a webapp bootloader using something immutable like IPFS
2. bootloader is basically react hot reloading except user agrees what to load
3. bootloader polls a mutable list of app updates and user agree or disagree each update
Now the bootloader has a static content addressable URI but it can also do updates. TBH I think IPFS may be a lost cause but something needs to take its place and this idea is transferable to whatever that is. https://github.com/rhodey/IPFS-boot
Comment · 3 days ago
> I see no reason transhumanism is any less of a religion than humanism.
TBH I agree. Religious exemptions at large only exist for the big name religions but the arguments pushed often make claims about it being a moral/ethical precedent and its just not true. I think its a matter of PR and politics if you're able to get an exemption kind of same game as a lot of things.
Comment · 7 days ago
"Robert Plutchik" "Wheel of emotions"
Joy, Trust, Fear, Surprise, Sadness, Disgust, Anger, Anticipation.
A start.
Comment · 19 days ago
IMO the README is not Claudish, this project is in an area that is more "computer science" than "coding" and there is simply a high bar on whats needed for prior knowledge. I think you could say ELI5 "Explain Like I'm 5" and it probably is possible to do so, but I don't think its correct to say "claudish".
Comment · 1 month ago
I am a paying chatgpt and codex user and I am logged in on multiple devices and suddenly https://chatgpt.com/ has started returning a raw 404 status page with no HTML for me in the browsers on all devices. When I open an incognito tab the website loads fine with no user logged in. Codex in VS code also has issues now:
> unexpected status 404 Not Found: Unknown error, url: https://chatgpt.com/backend-api/codex/responses, cf-ray: ...
Glad to see this thread I thought my account may need some special fix
Comment · 2 months ago
The arguments for "reproducible builds" are strong and so think reproducible builds but for something that can be loaded in the browser. Browser is a big deal because its a sandbox also. For example Signal could be a webapp if we had content addressable hashing and it would be sandboxed.
Comment · 2 months ago
Oh and sorry I missed your comment on "Subresource Integrity".
The deal here is Subresource Integrity will only help you if the index.html is considered trusted/authoritative. So you still need a way to get index.html to users and users need a way to say "is this the true index.html"
Comment · 2 months ago
I think something like IPFS is definitely needed. There is nothing stopping you from distributing a webapp on bittorrent but you'll also need to add a README for instructions on how to run the webapp on localhost so a browser can render it. So thats not something that any non-technical user wants to do.
Comment · 2 months ago
This is really unfortunate. When cloudflare dropped IPFS you could say this next step was sort of already on the way. I may be biased but I think when IPFS decided to put so much time into "IPNS" in order to support non-static webapps years ago what they came up with did not fit the need. And without webapps on IPFS things were going nowhere.
A year or so ago I wrote IPFS-boot which allows serving webapps on IPFS while providing also an update path and without breaking content hashing:
https://github.com/rhodey/IPFS-boot
But now if you want to serve a secure webapp and not use IPFS IMO the only option you have is to tell users to install Tailscale and to host the webapp themselves and then to install Tailscale on all devices.
Comment · 2 months ago
IMO this is the right move.
OpenAI messed up and they are saying they will pause so they can do better.
They are not saying that other orgs who may already be doing better should pause.
Comment · 7 months ago
Hi! thanks for the feedback!
I think you are right. I thought "Call" would clearly get the idea of voice across at least, but it can be confused with function call, or simply to invoke.
I dont have the ability to change the title but if someone else wants to:
"Video and Voice Call an AI from Signal"
Else maybe I will submit it again in a few days.
Thanks
Comment · 8 months ago
the pull-stream module and its ecosystem is relevant here
the idea is basically just use functions. no classes and very little statefulness
https://rhodey.org