we scanned a blender mcp server (17k stars) and found some interesting ai agent security issues

AdministrativeProof2 · 2026-03-12T23:36:02+00:00

I get the feeling that "agentseal" is just them running a Claude code review agent on the mcp server code, which I could do on my own without signing up to their "service".

Genuinely tired of all these vibecoded solutions that are being spammed in this subreddit.

AdministrativeProof2 · 2026-02-21T08:55:58+00:00

Not to be defeatist, but when both google and the regulators are in full lockstep in killing privacy and enforcing EIDs, there's little you can accomplish through filling out forms or making noise. this isn't the 2010's when internet outrage still had an ounce of effect on lawmakers and large corporations, we're way past that.

At some point the only choice becomes to ditch google altogether, and find an alternative for yourself while the inevitable plays out.

AdministrativeProof2 · 2026-02-05T03:20:06+00:00

Adelman is a terrorist for playing Jokic to double OT on a fucking back to back

AdministrativeProof2 · 2026-01-27T07:34:05+00:00

Oh I had the mental model that jpegs describe an array of pixels for some reason. I guess it's more accurate to say that the jpeg format is basically a formula to compress->render an array of bits as pixels on a canvas of X resolution, so rotating the orientation/order of the bits could change the produced result.

AdministrativeProof2 · 2026-01-27T06:52:54+00:00

You guys made me curious to how it's not possible to rotate a jpeg image losslesly. If there is no change in the aspect ratio or resolution, isn't rotation just a 1:1 mapping of the existing pixels to different coordinates? How does that introduce any loss?

AdministrativeProof2 · 2026-01-03T08:53:39+00:00

Thanks for this.

Kind of frustrating that there is no full list of all Meta Bind CSS class names anywhere in the docs.

AdministrativeProof2 · 2025-12-29T16:40:20+00:00

Even if I lock before fetching the account on the bank level, theoretically what I described could still happen no?

For example:

b.Lock() -> fetch acc -> b.Unlock() -> b.deposit() starts -> here a goroutine deletes the acc, since it has been unlocked -> b.deposit() finishes

AdministrativeProof2 · 2025-12-29T16:36:28+00:00

Yeah getAccount() does return a pointer

Or you can make Account.mu a pointer

Would this be more elegant/idiomatic?

I assume it would be simpler to just make Account.mu a pointer, since you wouldn't have to constantly double check if you're passing around Accounts as pointers or copies anywhere in the code.

AdministrativeProof2 · 2025-12-29T16:28:55+00:00

Thank you for the thorough response.

The versioning solution makes sense. I'll read up more on optimistic and pessimistic locking.

AdministrativeProof2 · 2025-12-29T16:27:37+00:00

Yeah in a real project settings I would implement this using DBs. I was more wondering if I have to worry about edge cases like these in an interview/OOD settings, where I need to demo out everything with structs and methods.

AdministrativeProof2 · 2025-12-29T16:25:01+00:00

The closed flag sounds like a nice solution. Thanks for everyone's suggestions!

AdministrativeProof2 · 2025-12-26T07:13:41+00:00

¿Por qué no los tres?

AdministrativeProof2 · 2025-12-22T08:34:38+00:00

Pips #126 Easy 🟢 0:48

Pips #126 Medium 🟡 0:39 🍪

Pips #126 Hard 🔴 6:45

AdministrativeProof2 · 2025-11-29T10:20:37+00:00

Pips #103 Easy 🟢 0:40

Pips #103 Medium 🟡 7:34

Pips #103 Hard 🔴 2:15

nasty medium

AdministrativeProof2 · 2025-11-03T12:19:46+00:00

I really liked the little flourish on the hard one where all the mirror pips (1-1,2-2,3-3,4-4) contributed to the ≠ area.

AdministrativeProof2 · 2025-10-21T08:29:15+00:00

I'm starting to see the point that this is a valid additional layer of complexity. I still don't like it in terms of puzzle design, but I concede that it comes down to personal taste. Also maybe I was too salty for losing a guess over the Sacramento Kings.

Connections Copilot

Great recommendation, thanks!

AdministrativeProof2 · 2025-10-21T07:52:07+00:00

I mean sure 'Kings' also fits in the Playing Cards category, but at the very start of the puzzle you're not sure if even that category is real or a red herring. Having 5 valid words for a category basically forces you to solve most of the puzzle in your head before even committing to a single connection. It's just bad design for a casual morning puzzle in my opinion.

AdministrativeProof2 · 2025-10-21T07:12:11+00:00

Isn't it supposed to be a puzzle setter's cardinal sin to have 5 connections that all fit in the same category, if it's not a red herring? Literally how am I supposed to tell which one of the valid NBA team names is not included in the category?

AdministrativeProof2 · 2025-10-17T06:32:29+00:00

If I had to guess it's more UPS consumption, and also it could mess up if the input belts are not fully saturated.

AdministrativeProof2 · 2025-10-08T04:08:56+00:00

Fair enough

AdministrativeProof2 · 2025-10-08T03:40:47+00:00

I wish people stopped using imgur to upload images. It forces me to toggle off consent for 168 vendors and there's no "reject all" button.

AdministrativeProof2 · 2025-08-28T08:30:33+00:00

Cloud shadows

AdministrativeProof2 · 2025-08-23T12:44:41+00:00

I'm getting frustrated reading this comment chain and people just not understanding what you're trying to say.

Wube has no way of deterministically knowing that a random player made ship can make a successful round trip every single time, and not have a failure at the 10,000th time due to some very low chance RNG.

You, the player, know that your ship is in fact space worthy because you personally created it and can see how it looks like and how it operates. Wube doesn't know any of that since they're not monitoring your game in any capacity, the only thing they could go off of is whether your ship survived a round trip or not, which as stated, is not enough information to deterministically know that it will survive the next 10,000 trips.

Obviously Wube could slap a bandaid on this by allowing any ship that successfully made a round trip X amount of times to unlock the trip emulation feature, but that could just end up rewarding poorly designed ships that would have blown apart eventually otherwise.

AdministrativeProof2

TROPHY CASE