zith

Well, giving it access to a simple linux terminal is theoretically enough to cause more damage than most people are comfortable with, and doing so is trivial enough that it will be done (and has been, tens of thousands of times).

Pangram says 100% - "We believe that this entire text is AI."

A workflow I was introduced to and have worked with a lot in my teams is,

1. Everyone uses feature branches

2. Everyone cleans up their branch using interactive rebase on top of main before review

3. All merges have been freshly rebase on main

I think it works very well and keeps the history clean while preserving "each commit does one thing".

I run as uid 0, but it's not called root, because my system is mine and I'll call it what I want.

I used to complain about all the levels of indirection of modern software, running in a javascript jit, in a browser container, in a vm, on an os, etc.

I eventually just accepted it, but this new agent layer really takes things to a new level.

Sure, but it's probably unwise to have your production credentials on your development machine at all. It's far more likely to be compromised than your locked down production environment.

I must have missed some trends changing in the last decade or so. People have production secrets in the open on their development machines?

Or what type of secrets are stored in the local .env files that the LLM should not see?

I try to run environments where developers don't get to see production secrets at all. Of course this doesn't work for small teams or solo developers, but even then the secrets are very separated from development work.

It's interesting, because a few years ago I would have put this strictly under the "not invented here" fallacy, where we'd now be stuck maintaining another project for the foreseeable future. I used to press pretty hard to avoid it.

Now I wonder if the maintenance cost for this type of internal system has gone down to a level where that is no longer an issue.

Interesting! I know Sweden was not first, but Stockholm has had 3g coverage in the subway since 2005 and 4g since 2016.

If I understand correctly the only thing not public that was leaked was the role each person had in the government.

I guess "don't roll your own crypto" is as valid as ever.

Of course, majority is not very cleanly applicable yous politics. Less than half (which according to Mirriam Webster is the definition) of the votes cast in the last election went to Trump/Vance, and with such a poor voter turnout it was even further from a majority. Meanwhile the electoral college is working against the idea.

When using aider for development, do you typically review the generated diffs in aider itself or do you use an external tool?

Trying to figure out what a good workflow looks like.

I wonder why Andreessen needs to use disinformation to shape opinion if the actual problem is so bad? I find it very unlikely that he does not know how PEP actually works.

It is so demonstrably false. Anyone who has worked in an finance adjacent industry likely knows the definition of a PEP.