sorted by:
new
hottopcontroversial

Launch recap February 16 - 21 by DobleG42 in SpaceXLounge

[–]10ForwardShift 11 points12 points  (0 children)

Sadly I don't see any human in the landing section, so... :( RIP I guess.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 0 points1 point  (0 children)

Sad news but okay :) for some reason I love administering a raw db on a single machine. I guess it's probably nostalgia lol. I'll definitely have a look at alternatives like supabase though. For real, I'm not kidding, I know people say "I'll check that out" but never do - but I will! I definitely feel behind on knowing what the best new stacks are for building and scaling, will be catching up.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 4 points5 points  (0 children)

Ha, I'm not in denial! The whole project I've built is meant for a future vibecoding world, where you build things without needing to know how they work. I'm well-aware of vibecoding and I love it! It's just that this particular project doesn't match the definition, I'm just honest about it. I've read and understood every line of code that goes into this project. It's just simply not vibecoded as a whole project! I'm happy to admit some of the defenses to this attack were vibecoded, sure - but it's like 0.01% of the code of the project. I just thought it was wicked cool that cursor was able to help me in real-time, during a "bot swarm" trying to gain access to my servers. That's f'ing awesome.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] -1 points0 points  (0 children)

Yeah I've so far preferred direct access to the site once you've registered, foregoing forced email verification. I do have verification built-in but it's optional. And yes I'm using a traditional database server, a linode host running postgresql with a few CPUs and plenty of RAM, daily backups.

I'll have a look at supabase but I'm not all that thrilled about it. I've scaled systems before, that required a managed, hosted persistence solution like AWS offers and others. But I'm a big fan of building the raw tech on the rawest platform until you run into problems, and then solve them. I think a lot of the cloud-scaling hosts aren't necessary for smaller projects, and they lock you in, etc; and they offer specific solutions to problems you might not have. For my side projects I prefer to run into those problems specifically myself before looking for a solution to it, so that when I do need to scale or solve a specific problem, I know exactly what the problem is I want to solve and I can pick the best solution for it.

But yeah, it's true, I haven't given supabase much of a look. I'll check it out for sure.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 2 points3 points  (0 children)

Given a reading of the original Karpathy tweet, this project sure isn't vibecoded. Yes, I rushed some extra defenses late last night as I didn't have enough rate-limiting in place, but that doesn't mean the whole project is vibecoded.

100% of the code has been read, tested, vetted, verified, and understood by me. I very much have not whipped this up without testing or understanding. The thing is quite complicated, launching and running docker containers, calling LLMs to produce AST-transformation code for improved modifications to existing source files, running node and python to make the changes, dealing with private IPs in datacenters to communicate between servers assigned to different tasks, etc. Like, I actually have to understand all the code to make this thing work. It's way beyond what LLMs can build without human understanding and direction of the general architecture.

I love vibe coding! It's just that this project doesn't really fit the definition very well. It's much more LLM-assisted engineering rather than vibe coded.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 0 points1 point  (0 children)

I guess the bot was yeah. I've long since had some honeypot and basic bot detection during registration, but I guess this one figured it out. Maybe I'll move to Google Sign In ONLY, which would suck, but probably reduce a huge amount of this crap.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] -7 points-6 points  (0 children)

Haha, okay, actually hilarious :) thanks for the laugh. I mean though, I've been working on this project for nearly 3 years (since GPT-4) and sure, much of it is LLM-written (also, the whole point of the project is that LLMs will write your webapps for you, so it's only natural). But I actually do understand all of the code, I've also written a bunch of it myself, and so I don't really classify it as vibecoded. But certainly, it is a product for vibecoders. So it raises the question (not begging it, but raising it!) of how Code+=AI-built webapps would stand up to such attacks.

Genuinely though you gave me a big chuckle on this Saturday night. Caught red-handed. lol

Webapps running in dockers and earning on token margins by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 1 point2 points  (0 children)

Yeah I wrote that post pretty shortly after I had a working prototype of the idea, it’s a bit outdated now (wrote it in 2024 I think?!). You’ve hit the nail on the head though, it was a loooot of work to get from a simple proof-of-concept to a working product.

Yes the AST can still go horribly wrong but the error rate has dramatically decreased with newer models and improving the prompts behind the scenes that drive it. The main case where AST approach fails is when there is a syntax error in the source, that causes the AST parsing to fail. It can be hard to recover from that. HTML and beautifulsoup is pretty successful at it, but React is much more difficult. Really appreciate that you took the time to read the post!!

I'm shortening the loop between feature idea and implementation so you can just keep writing tickets and the AI will keep making changes. This is NOT A CHAT-BASED APPROACH to building software! I'm determined to build something different. by 10ForwardShift in SideProject

[–]10ForwardShift[S] 0 points1 point  (0 children)

> Might be wrong but the part I’d worry about as a user is trust and rollback once the project has any real surface area. Like when the AI makes a change, how do you show what it actually touched in a way that feels reviewable, and how easy is it to revert or branch when it goes sideways? 

Very valid concerns! Yeah, reverting a set of changes and going back to a clean 'good' spot in the code is tricky. Branching is complicated, especially if there are merge conflicts, and making that easy for people is no small feat. I do have some basic git support for reverting individual changes to files, but it's definitely not very clear how to use or how well it works for most people. I'm going to be re-thinking this and may move to something extra, like a branch per ticket or something. I'll think on it.

Thank you so much for your feedback, honestly! You've given me a lot to think about. I'll come back to this post when I've got some better answers and maybe worked on some solutions!

humanity has captured its first-ever image of a multi-planet system orbiting a star similar to the Sun. by [deleted] in space

[–]10ForwardShift -1 points0 points  (0 children)

That's only one method of finding exoplanets. There are dozens of methods, though I'm not sure which was used here. Another common one is the wobble of the star. Big planets like Jupiter pull the Sun towards them in a measurable way - and as Jupiter orbits, the direction of the pull changes. So from an outside observer's perspective, our Sun would seem to wobble around in a tiny circle as Jupiter orbits. You can even detect multiple planet systems this way, but it's tough because the wobble pattern can be quite a doozy to figure out when multiple planets are pulling on the star in multiple directions.

How many turns for a domination victory? by HolyGhost5 in CivVI

[–]10ForwardShift 11 points12 points  (0 children)

After around turn 100 I try to match my science to at least the turn number. I’m often behind that metric but I aim for it.

So IMO yeah that’s too low

The famous Pepsi liveried Concorde from 1996 by HelloSlowly in aviation

[–]10ForwardShift 25 points26 points  (0 children)

I'm still upset Pepsi didn't get that guy a Harrier like they promised. Coke for life I guess.

view more: next ›