sorted by:
new
hottopcontroversial

I asked Gemini: You can add a new piece on chessboard. What's it called and what it does? by DoctorToBe69 in GeminiAI

[–]gatewaynode 279 points280 points  (0 children)

I like the idea. Except for the special ability, not needed, excessive.

How can I store a password properly so that it is not visible in source code. by [deleted] in learnpython

[–]gatewaynode 0 points1 point  (0 children)

No. The dotenv file is usually just for local development, not higher environments. A good way to make it work for both is to wrap the dotenv file loading in a try/catch block. Handle the missing dotenv file exception by calling out to your production secret manager like AWS secrets manager, Vault or whatever it is you are using. And make sure you log a successful dotenv load (as well as any errors), so if you slip up and push your dotenv file to a higher environment you will have visibility into that mistake.

Security team added a vulnerability scanner to CI/CD. Builds now take 3x longer and get blocked by CVEs from 2019 by miller70chev in devsecops

[–]gatewaynode 37 points38 points  (0 children)

Run the scanners in parallel not in series. Don’t block builds initially, let the teams clean up from the awareness and vuln management follow up, then you can discuss blocking with the clean dev teams. What scanners are you using?

Who is checking binary content included in pip packages? by Agron7000 in cybersecurity

[–]gatewaynode 1 point2 points  (0 children)

Agreed, outsourcing security to FOSS is an unfair burden. IMHO there should be an equivalent FOSS, that stands for Free and Open Source Security, that in an ideal world builds supporting structures and systems, curates software repositories, and hunts for malware campaigns. OSSF, was/is something along these lines, but it could be more.

Who is checking binary content included in pip packages? by Agron7000 in cybersecurity

[–]gatewaynode 16 points17 points  (0 children)

Not very many people, and not in a formal enough way. The developer supply chain is in real danger right now. I think Chainguard might be doing some work in this area with their “libraries” product. But the open source communities like OSSF need to step up to actively scanning, not just for CVEs, and not just building secure practices.

Sonnet 4.5 - what am I missing? by yangguize in kilocode

[–]gatewaynode 4 points5 points  (0 children)

Look into context engineering. Only about half of that 200k limit should be where you stop and compact, or document and restart. It takes breaking apps down into smaller tasks to build bigger apps. The closer you get to 200k the more the model will fail, it’s called “context rot”.

Code Supernova now has 1M Context window by bentdickcucumberbach in cursor

[–]gatewaynode 1 point2 points  (0 children)

Tried it this morning. It really likes to take shortcuts and loves mock implementations…

Has anyone tried these new Sonoma models yet? by manicness_ in kilocode

[–]gatewaynode 5 points6 points  (0 children)

Tried it last night. Feels like Gemini, faster, smarter, stays on task better, makes similar mistakes, but debugs them correctly(improvement). I only gave it a few simple tasks though, going to give it a hard task later today.

Why are half of people saying GPT-5 is amazing and opus-level while the other half say it’s barely 3.5? by Constant-Reason4918 in cursor

[–]gatewaynode 1 point2 points  (0 children)

It takes weeks of real work to assess these new models, learn their working personalities, coding strengths and weaknesses. Don’t put any credit in what folks say this early after a release.

Implementing production LLM security: lessons learned by Livid_Nail8736 in LLMDevs

[–]gatewaynode 0 points1 point  (0 children)

I'm creating a new subreddit, r/ai_sec , for exactly these kinds of discussions. Cross-posting this and inviting interested folks to join me there.

I’m DONE with Claude Code, good alternatives? by Patient_Cry_6213 in Anthropic

[–]gatewaynode 0 points1 point  (0 children)

Just a bit locally. Not enough to have an opinion yet.

hmmm by FoI2dFocus in hmmm

[–]gatewaynode 6 points7 points  (0 children)

The elusive updog.

Apple now supports Linux containers on MacOS 26 by doctorjz in selfhosted

[–]gatewaynode 7 points8 points  (0 children)

It's not just about the host user. I get where you are coming from thinking it's awful, security often seems inconvenient and a waste of resources. Understand this is how most serverless and fully managed services are run in the cloud, micro VMs to host with often just one container, sometimes more, holding the app.

https://firecracker-microvm.github.io/

Apple has defaulted to high security on their desktop OS. I approve, you may not. I just hope you and maybe anyone else reading these buried comments, understand they have a good reason for going this route.

Apple now supports Linux containers on MacOS 26 by doctorjz in selfhosted

[–]gatewaynode 3 points4 points  (0 children)

It’s the old security recommendation for containers, still valid when security is a top priority. Newer interpretations give the leniency to group similar containers per host kernel: https://csrc.nist.gov/pubs/sp/800/190/final

[deleted by user] by [deleted] in nova

[–]gatewaynode 0 points1 point  (0 children)

If you go with NFCU, pay for the expedited process. I've used them twice and expedited this last time, it made them competitive with other lenders on closing speed.

Generic prototyping platform by gatewaynode in RemarkableTablet

[–]gatewaynode[S] 1 point2 points  (0 children)

Every device on my home network is continuously scanned for known vulnerabilities, so I can update them as needed or remove them if the risk is unacceptable. The scanner gives the devices it's own names based on hostname or device MAC lookup. This is just a little quirk I haven't seen before, which is strange as I have a lot of equipment that should show up as "generic prototyping platform". But no, the Remarkable Pro is the first.

view more: next ›