Posts
5785
Following
355
Followers
555
.
@tris It addresses whole vector of race condition, which always exist for example in container creation. That small time window is unforgivable in the case of LLM.
1
0
0
@tris In the case of blocking agents tackling that outside of paths is the context here. All the bad stuff is always related to paths in security. Landlock does not work in that space so it can brickwall where agen process can move. Thus, it just ended up being the right block.
1
0
0
@tris for this project and many other i actually just browsed https://elixir.bootlin.com/linux/v7.0.12/source to look for what would fit and then browsed what landlock does and this how things connect.
1
0
1
@tris so i don't really spend my time looking at tools. i have an idea and then i try see what fits to implement that idea
1
0
1
@tris i don't know. i don't use landlock because of landlock but because it fits to the goals, which are readable from landstrip's man page. it also use seccomp.
1
0
0

Jarkko Sakkinen

full pass :-)
1
0
1
@linuscat async is exactly kind of feature that a web developer would think that would make sense for a systems language.
0
0
1
@linuscat I think that async is the point when Rust went wrong.

I never use async or even bothered the learn it. As an alternative I design my own threading model that fits for that app. It's a language feature that embeds a policy, and thus not suitable for language like Rust.
2
0
1

Jarkko Sakkinen

In the current state of Rust it has reached complexity of C++. It really does not have a winning ticket anymore on being lean. Instead it is enterprisy monster.
1
0
2

Jarkko Sakkinen

This was exactly kind of tricky corner-case that would be very hard to rethink in a spec. The experimental plugin for Pi really helps finding out bugs like this.

https://github.com/jarkkojs/landstrip/commit/00635b63ef46b46fba2e4f04abb96c866217c68e

#landlock #landstrip #lsm
0
0
1
Pre-AI if I had implemented a sandbox like ASR is implemented that would have most likely resulted some discussions with my manager because of unexpected low level of quality.
0
0
0

Jarkko Sakkinen

Edited 4 days ago
Anyone who understands even the bare basics of numerical methods and optimization should know that agent loop with a spec does not produce necessarily the solution that would be the most plausible.

There is no real intelligence and the process converges to a product that is across the board less-than-median quality.

Anthropic has shown off how agents construct a compiler but more interesting example of their demos is Anthropic Sandbox Runtime. It clearly demonstrates what quality of result you get if you trust on a-spec-delivery process.
1
0
0

Jarkko Sakkinen

I did not understand fully before why LSM stacking makes sense but with coding agents it is a dead obvious kernel feature to have. You cannot otherwise get any hold of those bastards.
0
0
1

Jarkko Sakkinen

porn industry is probably the only industry who has made stedily money from Internet ecosystem from the get go. and technologies just pile up. first vr porn. then ai porn. then ai vr porn.
0
0
0

Jarkko Sakkinen

haven't gone a lot to conferences in last few years but not likely that I will until their main topic stops being prompting lol :-) and goose
0
0
1

Jarkko Sakkinen

somehow that Goosedump just fits to the theme :-)

Sandbox is marker for the pi-landstrip plugin.

Read tool call is overriden by pi-readseek, which my third plugin.

goosedump, landstrip, readseek are also independent programs and useful by themselves.

E.g., I plan to write vim-plugin vim-readseek for doing LSP type of stuff as I dislike LSP.
0
0
0

Jarkko Sakkinen

the English word that I like least is "safe" ;-)
0
0
0

Jarkko Sakkinen

ai psychosis is so weird:

"I made a language (possibly) faster than C, and safer.

I am going to pre-empt this by asking you not to automatically believe me, because I don't want my claims to go without scrutiny. As such, I will provide all the source files to back it up, and invite you to look at them:"

every other middle-manager has faster C.

and safer.
0
0
0
@linuscat it's bad if windows dies, or degrades because competition is great... i hope that windows survives and fosters from this actually if i really think about it.
0
0
1

Jarkko Sakkinen

I don't about year of desktop Linux but Copilot killed Windows.
2
0
1
Show older