wren6991

It's confusingly worded but I think it's a suggestion for something Apple could do in the future. I don't see any mention of this in the linked Apple article.

Also a great way to make money from screen replacements when the battery expands!

Yes, V4.1 Flash 1017 is my daily driver cloud model. Copes fine with what I'd consider difficult brownfield development, like fixing bugs in vLLM prompt cache and coming up with small/sane overlay patches for them. Maybe it's disappointing for people who want to one-shot a game or website from a single prompt; I haven't tried that.

It's nice that their peak-rate hours end quite early in the day UK time.

They're still on 3.1 while Anthropic are on 5.5 and OpenAI are on 6. Insane how far behind they're getting.

> Harness have network access by default since they are driven by their provider API

The harness needs network access, but the shell spawned by the harness that runs the agent's commands does not necessarily need it.

Having a bwrap etc managed by the harness (DSH does this, among others) lets you have tighter restrictions on the agent's shell than the harness. Then run the whole thing inside a VM with a private network, so you can add nft rules to let it dial out to your inference machine but not to the internet at large. It takes an afternoon to set up but gives some reasonable defence in depth.

How did you go about it?

Fun fact: OpenAI Dot and Claude Duet are both canonically pronounced "doot"

Not that uncommon for a language interpreter? Pretty sure MicroPython does some setjmp/longjmp for non-local returns.

Did an LLM do the write-up? Half of the "technical deep dive" was just re-stating earlier statements about scope and impact, and I left without a solid grasp of the mechanics of the exploits.

Tried it. Little whale is getting smarter. Or, as DeepSeek might say: "Hmm. Wait! Hmm hmm."

As a philosopher^H person on twitter once said: "If you find two ants in your kitchen, the best estimate of the total number of ants in your kitchen is not two." OpenCode has some pedigree here.

I guess for me there is a distinction between an agent I am using interactively and walking through step-by-step, vs an agent that is running unattended, doing web search, communicating with subagents etc. I am ok with giving greater privilege to the former. But yes Qwen-chan accidentally committing suicide, or OOMing its own inference machine is a canon event.

One of the things I hit is that there is no way to trigger an "open folder" dialog. It gets mapped to "open file" instead. The correct hooks exist in both WebKit and in GTK, but not wired up in WebKitGTK. I think the fix would be quite minor but I looked into what is involved in raising a patch and decided to leave it. There are a lot of minor paper cuts like this.

I did hit a couple of CSS or rendering quirks, but the rendering perf also seemed noticeably poor, and that's harder to live with.

Right. The US has famously never installed government-mandated backdoors in security-critical technology like Dual_EC_DRBG.

Using Tauri on Linux gave me appreciation for why Electron just ships an entire browser. WebKitGTK is kinda rough around the edges.