wepple

I’m going to go against most of the comments here (negative) and say that there are a ton of wise nuggets in this article.

Specifically pieces about how to be valuable in a pragmatic and honest way.

This is an interesting shift compared to the past where OpenAI would’ve been public a long time ago (due to various regulations) so we would have much more direct insight.

Right now we have a ~$1 trillion company which a ton of the “economy” and valuations are based on, with near zero information on how it’s doing.

Seeing like a state is my next book to read. Weirdly, I cannot recall the chain of interests that led me to it.

> but can't do that yet because its not possible.

Huh? Why not?

It sounds like you’ve given up on an open web. Possibly the rational thing for you to do in your circumstances, but nonetheless a sad place we are in.

A foreign company can’t steal your IP to build out competing products?

Or use source code to find novel vulnerabilities and deeply compromise your company?

I think that’s the point

I don’t participate in bounties at all unless I believe there is a moral obligation or I’m set to make thousands of dollars. In each case, $0.05 is fine.

For a typical commercial entity? $0.05 is not a deterrent; the companies legal team is and has been for a decade.

Reminds me of someone (well known in their field) who charged $0.05 for using their “contact me” page. A trivial amount for someone who genuinely wanted to contact them, but just high enough to prevent any kind of scaled abuse

It was recently edited. I assume they saw this feedback

I love that the 5.9 lives on

ursa-ag.com For (a little bit) more info

Spinning it up is not the problem. You want to spend the time to throughly test it (or have your agent swarm test it) so you don’t waste the opportunity of having HN input?

I’d be wary of a founder with such bad NIH

Fixing is now the bottleneck.

Most patches are non-trivial and then each project/maintainer has a preferred coding style, and they’re being inundated with PRs already, and don’t take kindly to slop.

LLMs can find the CVE fully zero interaction, so it scales trivially.

You should probably add a huge disclaimer that this is an untested, experimental project.

Related, a direct comparison to other sandboxes and what you offer over those would be nice