Joshua Davies

675 posts

Joshua Davies

Joshua Davies

@cmdlinefanatic

Katılım Nisan 2022
635 Takip Edilen28 Takipçiler
Joshua Davies
Joshua Davies@cmdlinefanatic·
@ChatgptLunatics Honestly this is AI being pragmatic. I’ve done the same thing in meetings with C-suite types.
English
0
0
8
521
Joshua Davies
Joshua Davies@cmdlinefanatic·
Maybe my communication skills are just fine and it’s your comprehension skills that need work?
English
0
0
0
8
Joshua Davies
Joshua Davies@cmdlinefanatic·
@OrwellNGoode I remember the 90s and this is pretty much true. But why? What’s changed?
English
2
0
18
1.3K
Joshua Davies
Joshua Davies@cmdlinefanatic·
@Rothmus Haha jokes on you I never look at the logs
English
4
1
543
21.9K
Joshua Davies
Joshua Davies@cmdlinefanatic·
@javarevisited You can memorize tree traversals and run production systems and still get rejected
English
0
0
26
1.5K
Javarevisited
Javarevisited@javarevisited·
Software engineer is the only career where you can run production systems for a decade… but still get rejected for not memorizing a tree traversal.
English
25
103
2.6K
55.1K
Joshua Davies
Joshua Davies@cmdlinefanatic·
“Smart” in English means “capable of unique insight”. “Smart” in appliance manufacturing means “breaks randomly with no way to diagnose or fix”
English
0
0
0
30
Javarevisited
Javarevisited@javarevisited·
Interviewer: If AI is eating the world… why are we still debugging null pointer exceptions?
English
6
1
11
2.4K
Andrej Karpathy
Andrej Karpathy@karpathy·
Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Daniel Hnyk@hnykda

LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below

English
1.4K
5.4K
28.1K
66.5M
Akhilesh Mishra
Akhilesh Mishra@livingdevops·
Dennis Ritchie created C in the early 1970s without Google, Stack Overflow, GitHub, or any AI ( Claude, Cursor, Codex) assistant. - No VC funding. - No viral launch. - No TED talk. - Just two engineers at Bell Labs. A terminal. And a problem to solve. He built a language that fit in kilobytes. 50 years later, it runs everything. Linux kernel. Windows. macOS. Every iPhone. Every Android. NASA’s deep space probes. The International Space Station. > Python borrowed from it. > Java borrowed from it. > JavaScript borrowed from it. If you have ever written a single line of code in any language, you did it in Dennis Ritchie’s shadow. He died in 2011. The same week as Steve Jobs. Jobs got the front pages. Ritchie got silence. This Legend deserves to be celebrated.
Akhilesh Mishra tweet media
English
643
5.2K
26.6K
934.1K
Lingo.dev
Lingo.dev@lingodotdev·
Do you trust Claude this much? 😂
Lingo.dev tweet media
English
11
1
65
2.3K
Joshua Davies
Joshua Davies@cmdlinefanatic·
@nocontextmemes This is funny but I dont think the poster realizes you get married on a different day than you propose. Nice effort though.
English
2
0
108
5.4K
Joshua Davies
Joshua Davies@cmdlinefanatic·
@javarevisited If they gave me the time, I’d fix all the memory leaks. They’d just rather restart the server every day than invest in code cleanup.
English
0
0
0
515
Javarevisited
Javarevisited@javarevisited·
As a developer, Have you ever thought WHY restarting the server “fixes” most bugs?
English
10
1
34
10.7K
Joshua Davies
Joshua Davies@cmdlinefanatic·
@mysticwillz Time to get a new identity and create a life in a new country
English
0
0
1
544
THE CODE SCIENTIST
THE CODE SCIENTIST@mysticwillz·
Your SQL query missing WHERE clause. UPDATE ran on entire table. 8.9M records set to same value. Customer data homogenized. Orders all showing one address. $4.2M in shipping chaos. How do you restore individual records?
English
11
3
56
26.4K
NO CONTEXT HUMANS
NO CONTEXT HUMANS@HumansNoContext·
I think this counts as pizza homicide
NO CONTEXT HUMANS tweet media
English
111
79
2.1K
65K
Javarevisited
Javarevisited@javarevisited·
AI can generate an entire backend in seconds. But debugging still takes hours.
English
2
2
14
2.4K
Lingo.dev
Lingo.dev@lingodotdev·
@cmdlinefanatic @ryanels If you have the skills to match it then it is fine. Like Muhammad Ali had a superiority complex, but he had the skills to match it.
GIF
English
1
0
0
24
Lingo.dev
Lingo.dev@lingodotdev·
What is in the middle? 🤔
Lingo.dev tweet media
English
26
27
230
5.9K
Joshua Davies
Joshua Davies@cmdlinefanatic·
@nocontextmemes When my son was little, he described a game he wanted me to program for him, so I built a simple pixel-art game on my iPhone. When he saw it, he re-described it with an additional requirement: “good grafx”
English
0
0
2
1.3K