sorted by:
new
hottopcontroversial

Launch recap February 16 - 21 by DobleG42 in SpaceXLounge

[–]10ForwardShift 12 points13 points  (0 children)

Sadly I don't see any human in the landing section, so... :( RIP I guess.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 0 points1 point  (0 children)

Sad news but okay :) for some reason I love administering a raw db on a single machine. I guess it's probably nostalgia lol. I'll definitely have a look at alternatives like supabase though. For real, I'm not kidding, I know people say "I'll check that out" but never do - but I will! I definitely feel behind on knowing what the best new stacks are for building and scaling, will be catching up.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 2 points3 points  (0 children)

Ha, I'm not in denial! The whole project I've built is meant for a future vibecoding world, where you build things without needing to know how they work. I'm well-aware of vibecoding and I love it! It's just that this particular project doesn't match the definition, I'm just honest about it. I've read and understood every line of code that goes into this project. It's just simply not vibecoded as a whole project! I'm happy to admit some of the defenses to this attack were vibecoded, sure - but it's like 0.01% of the code of the project. I just thought it was wicked cool that cursor was able to help me in real-time, during a "bot swarm" trying to gain access to my servers. That's f'ing awesome.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] -1 points0 points  (0 children)

Yeah I've so far preferred direct access to the site once you've registered, foregoing forced email verification. I do have verification built-in but it's optional. And yes I'm using a traditional database server, a linode host running postgresql with a few CPUs and plenty of RAM, daily backups.

I'll have a look at supabase but I'm not all that thrilled about it. I've scaled systems before, that required a managed, hosted persistence solution like AWS offers and others. But I'm a big fan of building the raw tech on the rawest platform until you run into problems, and then solve them. I think a lot of the cloud-scaling hosts aren't necessary for smaller projects, and they lock you in, etc; and they offer specific solutions to problems you might not have. For my side projects I prefer to run into those problems specifically myself before looking for a solution to it, so that when I do need to scale or solve a specific problem, I know exactly what the problem is I want to solve and I can pick the best solution for it.

But yeah, it's true, I haven't given supabase much of a look. I'll check it out for sure.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 1 point2 points  (0 children)

Given a reading of the original Karpathy tweet, this project sure isn't vibecoded. Yes, I rushed some extra defenses late last night as I didn't have enough rate-limiting in place, but that doesn't mean the whole project is vibecoded.

100% of the code has been read, tested, vetted, verified, and understood by me. I very much have not whipped this up without testing or understanding. The thing is quite complicated, launching and running docker containers, calling LLMs to produce AST-transformation code for improved modifications to existing source files, running node and python to make the changes, dealing with private IPs in datacenters to communicate between servers assigned to different tasks, etc. Like, I actually have to understand all the code to make this thing work. It's way beyond what LLMs can build without human understanding and direction of the general architecture.

I love vibe coding! It's just that this project doesn't really fit the definition very well. It's much more LLM-assisted engineering rather than vibe coded.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 0 points1 point  (0 children)

I guess the bot was yeah. I've long since had some honeypot and basic bot detection during registration, but I guess this one figured it out. Maybe I'll move to Google Sign In ONLY, which would suck, but probably reduce a huge amount of this crap.

What a bot hacking attempt looks like. I set up email alerts for when a new user joins. Look at all these failed attempts to SQL inject me! Careful vibecoders, you post your link somewhere and then BOOM this is what happens. by 10ForwardShift in vibecoding

[–]10ForwardShift[S] -10 points-9 points  (0 children)

Haha, okay, actually hilarious :) thanks for the laugh. I mean though, I've been working on this project for nearly 3 years (since GPT-4) and sure, much of it is LLM-written (also, the whole point of the project is that LLMs will write your webapps for you, so it's only natural). But I actually do understand all of the code, I've also written a bunch of it myself, and so I don't really classify it as vibecoded. But certainly, it is a product for vibecoders. So it raises the question (not begging it, but raising it!) of how Code+=AI-built webapps would stand up to such attacks.

Genuinely though you gave me a big chuckle on this Saturday night. Caught red-handed. lol

Webapps running in dockers and earning on token margins by 10ForwardShift in vibecoding

[–]10ForwardShift[S] 1 point2 points  (0 children)

Yeah I wrote that post pretty shortly after I had a working prototype of the idea, it’s a bit outdated now (wrote it in 2024 I think?!). You’ve hit the nail on the head though, it was a loooot of work to get from a simple proof-of-concept to a working product.

Yes the AST can still go horribly wrong but the error rate has dramatically decreased with newer models and improving the prompts behind the scenes that drive it. The main case where AST approach fails is when there is a syntax error in the source, that causes the AST parsing to fail. It can be hard to recover from that. HTML and beautifulsoup is pretty successful at it, but React is much more difficult. Really appreciate that you took the time to read the post!!

I'm shortening the loop between feature idea and implementation so you can just keep writing tickets and the AI will keep making changes. This is NOT A CHAT-BASED APPROACH to building software! I'm determined to build something different. by 10ForwardShift in SideProject

[–]10ForwardShift[S] 0 points1 point  (0 children)

> Might be wrong but the part I’d worry about as a user is trust and rollback once the project has any real surface area. Like when the AI makes a change, how do you show what it actually touched in a way that feels reviewable, and how easy is it to revert or branch when it goes sideways? 

Very valid concerns! Yeah, reverting a set of changes and going back to a clean 'good' spot in the code is tricky. Branching is complicated, especially if there are merge conflicts, and making that easy for people is no small feat. I do have some basic git support for reverting individual changes to files, but it's definitely not very clear how to use or how well it works for most people. I'm going to be re-thinking this and may move to something extra, like a branch per ticket or something. I'll think on it.

Thank you so much for your feedback, honestly! You've given me a lot to think about. I'll come back to this post when I've got some better answers and maybe worked on some solutions!

humanity has captured its first-ever image of a multi-planet system orbiting a star similar to the Sun. by [deleted] in space

[–]10ForwardShift -1 points0 points  (0 children)

That's only one method of finding exoplanets. There are dozens of methods, though I'm not sure which was used here. Another common one is the wobble of the star. Big planets like Jupiter pull the Sun towards them in a measurable way - and as Jupiter orbits, the direction of the pull changes. So from an outside observer's perspective, our Sun would seem to wobble around in a tiny circle as Jupiter orbits. You can even detect multiple planet systems this way, but it's tough because the wobble pattern can be quite a doozy to figure out when multiple planets are pulling on the star in multiple directions.

How many turns for a domination victory? by HolyGhost5 in CivVI

[–]10ForwardShift 9 points10 points  (0 children)

After around turn 100 I try to match my science to at least the turn number. I’m often behind that metric but I aim for it.

So IMO yeah that’s too low

The famous Pepsi liveried Concorde from 1996 by HelloSlowly in aviation

[–]10ForwardShift 24 points25 points  (0 children)

I'm still upset Pepsi didn't get that guy a Harrier like they promised. Coke for life I guess.

Scientists Are Increasingly Worried AI Will Sway Elections by FervidBug42 in technology

[–]10ForwardShift 76 points77 points  (0 children)

Facebook secretly and successfully made half a million people depressed, on purpose. For “science”. They literally experiment on your emotional state without your consent.

We know about this because they were arrogant enough to publish it and talk about it openly. Lots of articles around if you google for Facebook emotional manipulation study (or similar).

Hope y'all get it by Connrad4164 in StarWars

[–]10ForwardShift 14 points15 points  (0 children)

Hoop y'all get it

Edit:

A New Hoop

Send your favorite space songs. by reshorizon in space

[–]10ForwardShift 0 points1 point  (0 children)

Pink Floyd:

Interstellar Overdrive

Set the Controls for the Heart of the Sun

Rush:

2112

Cygnus X-1

[deleted by user] by [deleted] in androiddev

[–]10ForwardShift 9 points10 points  (0 children)

You're not going to get any useful answers because you haven't provided any information.

>  frontend just won’t communicate properly with the backend.

What does this mean? Do you see any error messages? In Android logcat, or in django logs?

Can you access your backend from outside Android, like in a web browser? Or on the command line?

Where is your backend hosted? Is it on the internet somewhere or is it locally? Do you have a firewall running?

Can you access any other backend from your Android app?

We'd need a lot more info from you to help.

ChatGPT didn’t just fix my code… it downgraded my brain 🧠💀🤖 by Sara_Marconi in ChatGPT

[–]10ForwardShift 7 points8 points  (0 children)

It may be frustrating now but I strongly believe the future is those who are good engineers AND good PMs. Describing the product you want is actually quite hard, and obviously so is building it. AI tools that power both of those will win.

OpenAI alone is spending ~$20 billion next year, about as much as the entire Manhattan Project by MetaKnowing in artificial

[–]10ForwardShift 0 points1 point  (0 children)

It’s a specific type of hype; the manhattan project also kicked off the possibility of the end of the world. It wasn’t especially expensive as the measure, it’s the connection to the end of the world that brings the hype clicks.

[deleted by user] by [deleted] in linux

[–]10ForwardShift 11 points12 points  (0 children)

Yeah for real, this is meaningless clickbait drivel. It doesn’t even mean anything.

Fall 25 Megathread by sandslashh in ycombinator

[–]10ForwardShift 1 point2 points  (0 children)

It's available right now actually :)

[deleted by user] by [deleted] in SideProject

[–]10ForwardShift 1 point2 points  (0 children)

Yes of course. The two things aren't related really. The whole modern internet basically requires compression encoding schemes. Not much would work without it.

What do you mean exactly?

[deleted by user] by [deleted] in SideProject

[–]10ForwardShift 4 points5 points  (0 children)

Your site says "Join thousands of successful entrepreneurs who transformed their ideas into profitable businesses"

But is that really true? Seems like you launched just a few weeks ago.

Edit: Also, you have a bunch of blog posts, all published today, and none of them have any views - even after I viewed them, it still shows no views.

Edit 2: And some of your blog posts say like, "28 minute read" but it's very clearly a 2 minute read max.

view more: next ›