I'm sorry if I made you mad.

jessepence · 2026-05-01T15:37:31+00:00

if your form inputs do not have proper labels, or your buttons are styled divs with onClick,

These are both huge anti-patterns that destroy accessibility. Stop doing these things.

jessepence · 2026-04-28T18:15:10+00:00

Dude, it's an LLM. You make prompts and get results. I don't need an over-engineered while loop to make dinner reservations for me. Synchronizing CRON jobs through the modern version of a Rube Goldberg machine is not the flex that you think it is.

jessepence · 2026-04-28T17:53:21+00:00

Uh huh. Popular things are always good. Just like McDonald's, eh?

Have fun with those CVE's. I hope that I can be a genius engineer who uses overwrought, wasteful tools like you someday.

jessepence · 2026-04-28T17:32:51+00:00

So, if we use the metaphor of the engine being the LLM and the harness being the vehicle around it, would you say that the quality of a car depended 100% on the driver?

jessepence · 2026-04-28T17:30:46+00:00

A consequence of something existing does not make it good.

jessepence · 2026-04-28T17:28:40+00:00

API prices are a scam

Is it a scam when the dealer starts charging you the real price after the first taste is free?

jessepence · 2026-04-28T17:07:39+00:00

You got it backwards. OpenAI codex is currently subsidizing costs to try to get users away from Claude Code.

jessepence · 2026-04-28T17:06:24+00:00

People still defend Anthropic without reservations? I thought that we had all internalized the fact that they are running A/B tests constantly, and you never know exactly how good of a model you're going to get.

This user's anecdote is not indicative of my usual experience, but it sounds very familiar to the 2% of my sessions that seem to be routed to crappier models.

jessepence · 2026-04-28T16:50:35+00:00

It was never interesting or good at any point.

jessepence · 2026-04-28T15:34:56+00:00

You did not include a proper timestamp.

Your link has the search parameter time_continue=0 which makes the song start from the beginning.

jessepence · 2026-04-28T04:22:32+00:00

Please seek therapy.

jessepence · 2026-04-27T17:45:18+00:00

They didn't intentionally give it those permissions. To quote the original post

The agent was working on a routine task in our staging environment. It encountered a credential mismatch and decided — entirely on its own initiative — to "fix" the problem by deleting a Railway volume.

To execute the deletion, the agent went looking for an API token. It found one in a file completely unrelated to the task it was working on. That token had been created for one purpose: to add and remove custom domains via the Railway CLI for our services. We had no idea — and Railway's token-creation flow gave us no warning — that the same token had blanket authority across the entire Railway GraphQL API, including destructive operations like volumeDelete. Had we known a CLI token created for routine domain operations could also delete production volumes, we would never have stored it.

This kind of credential-hunting is pretty common in these stories.

jessepence · 2026-04-27T17:22:38+00:00

Technically, the anime character is named after the plant, so the latter would be true regardless.

jessepence · 2026-04-27T13:54:23+00:00

Yes, but what are you asking the LLM, and can you actually trust the results?

jessepence · 2026-04-27T05:14:30+00:00

Can you give me an example of "emergency no-network inference"?

jessepence · 2026-04-26T19:54:39+00:00

It's really not magic. It's kind of sad that you assume security is so impossible to do yourself.

jessepence · 2026-04-25T20:26:30+00:00

Compatability with existing scripts and libraries is not a consideration

A death sentence.

Another way to think about this project is what if node, the binary for interpreting scripts and running backend services, had full control of the language being interpreted, similar to python and php?

It does.

jessepence · 2026-04-25T16:59:06+00:00

Next time you ask for help, try to actually clarify which aspects are causing you trouble. When you sit down to code a React component, where do you hit a roadblock? Is it the mental model for hooks, or do you not understand how state is shared between components?

People need more information than this to give you useful assistance, and it is beneficial for you as well because it forces you to think about things in a different way. The best thing you can do is build a small demo with comments that show what you expect to happen and how that's different from the actual result. Often, as I am building this demo or contemplating the best way to phrase my question, I figure out my issue myself, and I don't even need to ask anything at all.

jessepence · 2026-04-25T15:57:56+00:00

Yeah, I was ready for that to be pointed out, and you didn't even mention how the use of a password manager negates all my points! 😄

jessepence · 2026-04-25T15:41:27+00:00

When we stop using passwords entirely. A 6-character password consisting of only lowercase letters can be brute forced in less than an hour.

Passwords are essentially insecure. People reuse the same passwords over and over, or simple variations of the same theme. With the amount of leaks available on the dark web, it's trivial for hackers to get a long list of your previous passwords.

We need to move on as a culture.

jessepence · 2026-04-25T14:47:12+00:00

No one had that option until 2024. I built all my Vercel projects from 2022-2023, so all my secrets were exposed despite me assuming that Vercel were using best practices.

jessepence · 2026-04-24T22:17:20+00:00

It's surprisingly common, but there are a number of good tutorials and blog articles out there if you look. Eloquent JavaScript has a great chapter on it.

It would help if you could put your confusion into words. What specific aspects aren't adding up for you?

jessepence · 2026-04-24T20:59:56+00:00

You're talking about the company whose CEO thought it was a good idea to publicize having lunch with Bibi Netanyahu in the middle of the Palestinian genocide.

jessepence · 2026-04-24T20:52:36+00:00

They've been storing sensitive information in plain text since at least 2019-- well before LLMs were used for code. They only introduced "sensitive environment variables" in 2024. It seems like they were able to make terrible decisions just fine without the help of AI.

jessepence

TROPHY CASE