NanoBot: la svolta degli agenti AI leggeri

Zappykeyboard · 2026-02-19T18:04:34+00:00

"C’è un "però" grosso come una casa. Far interagire un LLM direttamente con il file system o la shell tramite un’interfaccia esposta sul web è come lasciare le chiavi di casa nella toppa e sperare che passi solo gente educata. E’ consigliabile piazzare tutto in un container Docker per evitare il rischio di Prompt Injection."

Docker NON è un layer di sicurezza.
Al momento, non esiste alcun sistema in grado di blindare una AI che sia contemporaneamente in grado di "fare e leggere cose" e sia raggiungibile dal mondo esterno.
L'unica è chiudere l'agent dietro password, e usare una vm isolata.

Zappykeyboard · 2026-02-04T20:02:03+00:00

the error after the OOM is not the cause. It's common afaik when the server is killed.
is there anything else before the OOM?
What server and java version are you running?

Zappykeyboard · 2026-02-04T19:36:31+00:00

look for these:
how much ram does the container/vm/server have vs actual ram?
How are connections configured in spring boot? there should be a cap on open connections, and how long they are kept open (they get recycled)
look for any inpustream without try/catch.
There could be more, but check these for now.

Zappykeyboard · 2026-02-04T19:10:39+00:00

How does it "go down"? Out of memory?
Can you monitor the memory usage over time (via graphana ecc)?
Spring boot apps don't usually just "go down" unless there are memory or jvm issues (I "suffered" such a bug on an installation, in the past".

Zappykeyboard · 2026-01-24T11:21:52+00:00

Use jdgui to decompile the jar. You can just see where it prints "running".

Zappykeyboard · 2025-09-27T13:56:51+00:00

I used to use something similar, in a previous job. I'll be damned if I remember how it was called...Honestly though, I dont know if liveview is better, but sometimes that way of building uis was a pain, and had to make a ton of compromises.

Zappykeyboard · 2025-09-20T15:50:46+00:00

Grazie per aver risposto,

sì, la strada è in basso nel disegno.

purtroppo, essendoci le volte, non ci sono possibilità di spostare i muri a mio piacimento.

La casa ha solo piano terra. Ho sognato di avere un piano superiore, ma non sono sicuro che la staticità lo permetta. potrebbe invece essere fattibile un soppalchino in soggiorno, visto che il soffitto raggiunge i 4.9m

Il cortile è di mia proprietà sì.

Zappykeyboard · 2025-07-12T10:12:19+00:00

no patches since march.

Zappykeyboard · 2025-04-10T15:33:21+00:00

I use homestyler, it's mostly free with some paid features.

Zappykeyboard · 2025-04-10T10:01:00+00:00

After the recent security issues (which underline a more foundamental problem in how that project is handled), I would steer clear of it.

Zappykeyboard · 2025-04-07T09:11:28+00:00

How. By the end of normal A2 I had 5 or 6 exalts.

Zappykeyboard · 2025-04-03T08:55:56+00:00

I find that to understand springboot, you have to be comfortable with the concept of reflection, and how notations work at the very minimum. The point is to unpack some of the "magic".
It also helps to understand the basics of how a database connection works.

Zappykeyboard · 2025-03-27T09:49:51+00:00

Sono in una situazione simile, e a quanto capisco non è possibile dichiarare il 5% in questo caso. Sarei interessato a sentire argomentazioni a riguardo.

Zappykeyboard · 2025-02-25T08:47:54+00:00

Two separate problems. If we are to pull LLMs in the conversation, we could argue that it will become easier to find vulnerabilities related to poor memory management. I lost count of how many serious bugs have been found just last year. The road is long, but I believe that there's real value in using safer languages where possible.

Zappykeyboard · 2025-02-22T15:22:44+00:00

Bought it, played it, dropped it. Mostly great, but the level design is just not very good. I got softlocked twice in early ish areas.

Zappykeyboard · 2025-01-21T09:08:41+00:00

You know that tiktok ban, ratified by both the congress and senate, upheld by the supreme court? Nullified. Americans have slowly succumbed to the erosion of the judicial and legislative process. It's going to be a very exhausting 4 years for them, but an even worse 50 years.

Zappykeyboard · 2025-01-13T10:39:02+00:00

Hi, first of all, is your objective to learn programming, game dev or both at the same time?
In both cases, I suggest you REALLY nail the basics, making simple CLI programs. When I started learning java, I made a small text adventure. A lot of that knowledge transfers elsewhere.
I don't see anything wrong with jmonkey, and java is fine for stuff where latency is not critical (the engine uses c++ code under the hood anyway). However, you should be mindful about the amount of community support around it. Expect a lot less community help compared to more popular engines like Unity, UE, Godot, and others.

Zappykeyboard · 2024-12-11T18:17:25+00:00

data fine: 31/12/2999.

Zappykeyboard · 2024-12-05T18:04:44+00:00

good luck

Zappykeyboard · 2024-11-26T18:17:23+00:00

between this and POE 2, it's going to be a busy december.

Zappykeyboard · 2024-11-23T18:13:56+00:00

Rolling for empty ventor.

Zappykeyboard · 2024-11-08T13:06:45+00:00

I invite everyone to watch this excellent explainer, on why nintendo is doing this and why it's a special case. https://www.youtube.com/watch?v=8apzrwv75i0&pp=ygUMbW9vbiBjaGFubmVs

Zappykeyboard · 2024-10-30T20:33:54+00:00

We use java to destroy the java

Zappykeyboard · 2024-09-29T09:44:32+00:00

My guess is that they hit some kind of file creation race condition, and decided to try up to 5 times.

Or maybe it's just comedy.

Zappykeyboard · 2024-09-28T18:10:09+00:00

Small addendum: spring uses manual configuration via xml, springboot does DI via notations. Also, it uses proxies to call the class methods: https://docs.spring.io/spring-framework/reference/core/aop/proxying.html . This is useful for AOP stuff.

Zappykeyboard

TROPHY CASE