You can avoid SQL injection by just coding the same features with a bit of care. You loose nothing. Mistakes can always happen, but it's not even tricky to prevent SQL injection.

Right now the only way to avoid Prompt injection is to not let your agents see user input at all. A very wide range of features that we'd like to implement are unsafe and there isn't a way to prevent this reliably.

I guess we'll need to get used to control the agent's permissions very tightly, and taylor them per-conversation. The agent I speak to for customer support must only have access to my data, and not because of instructions in the system prompt, these will need to be hard limits.

My only issue with it has been a few apps not working correctly, and not the ones I expected. I did my research before hand and knew that my banking apps would work, thinking those would be the main challenge.

Turns out the bike-sharing system in my city, Madrid, won't work. I ended up installing Google Play services (that run sandboxed in Graphene, but still wanted to avoid), and it works sometimes, but mostly doesn't. I use these bikes a few times a week, so this is a major hassle, and I end up carrying my ancient iPhone with me sometimes just for this.

This and Trade Republic have been my only two problems. Happy otherwise, but do your research before switching, and don't assume only the apps you expect to be problematic will be.

Sadly, this will always be a game of cat and mouse. I wonder if it was ever avoidable for the internet to become a hundred of such games at once, between advertisers and ad blockers, trackers and browsers, hackers and developers, search engines and SEO experts...

If your concept took off, someone will make a program that inputs the LLMs text like a human would. It might still take some time (if it isn't possible to hack the timing records client-side), you'd probably have to get busy detecting multiple connections from the same IP, and then they'd work around it...

Doesn't that sound like may be the harness was the problem?

It's a fantastic console, but a mediocre general purpose computer.

I agree with the complaint about the trackpad, but the keyboard has been just fine for me. Just a bit small, of course. I also find the screen perfectly acceptable for what I use this thing for: youtube, taking notes, writing emails, small bouts of coding and ssh'ing into servers.

My main complaint is related to battery management. May be it's becaused I'm used to Macbooks, but it drives me nuts to go pick the Minibook up and find that it has no power, because I haven't used it in a couple of days and I put it to sleep. I haven't measured, but the power use on sleep is noticeable, and I suspect the leakage while hibernating might be significant too.

I don't really like the laptop form factor. Laptops are the perfect solution for only one use case: using them on your lap. On a table, I'd rather have the computer be just a tablet, to add a bluetooth keyboard and mouse. At my desk, with bigger screens, I'd like the computer to disappear into a small puck or box, like a Mac Mini. With the Minibook, being so small, the form factor makes sense again. It's so portable, so easy to take with me to a coffee shop or on a trip, it's worth it.

A tablet with a keyboard might be a more practical solution, although generally more expensive, but I appreciate that my Minibook runs Linux so well, so I don't have to even think about Apple or Google telling me how to use my computer.

I still admire Mondragon and wish there were more companies like it, but now I try to remind myself that most characterizations from the outside are surely lacking in nuance.

1 in every 10 people may have a cat alergy, but the % of folks with an allergy as severe as yours has to be much lower. I know plenty of people with cat allergies who can spend entire evenings in my cat-inhabited with only very minor discomfort. The person with the most serious allergy to them I know is miles away from your symptoms.

I think you are exaggerating the severity of the issue, but I'm sorry you have this terrible allergy to something as common as cats, that sucks.

This will live in my .bashrc for a long time:

    cat() {
      if [[ -t 1 ]]; then
        command cat "$@" | highlight --force -O xterm256
      else
        # plain cat to pipe into other things
        command cat "$@"
      fi
    }

But the point is not whether webapps are rewritten, but whether they have to be rewritten. I know some old enterprise webapps made with PHP about 10 years ago that are still working fine.

You do have to worry about security issues, and the occasional deprecation of an API, but there is no reason why a web-based service should need to be rewritten just to keep working. Is that true for mobile and desktop apps?

It's just generally good to try to understand others instead of distancing yourself from them. I find F1, jazz, finance, and so many other things to be really boring and uninteresting, but I try to get the people who like those and connect with them. F1 people and jazz people are often more interesting than their interests; I haven't gotten there with finance yet. The world is more interesting this way, but you're under no obligation.

> In a just world LaLiga would get sued into the ground for disabling a public utility on a level equivallent to an international cyberattack.

In a just world LaLiga and FIFA would've been sued into the ground like five scandals ago, but I don't think gtowey was suggesting you try to empathise with them, but with people who like football.

Football piracy is on the rise, because watching football has become extremely expensive in the last few years, even if you just want to watch your teams games. I know many people who used to pay for it; now most of them, including law-abiding citizens who wouldn't normally pirate, are learning how to do it.

May be that just means I'm not enough of a tinkerer for these setups.

Is it a hard problem to remember more than one configuration and link them to the displays connected to your computer? Or is it just that Omarchy users really don't mind editing monitor.conf[1] often?

[1]: https://learn.omacom.io/books/2/pages/86

A close friend of mine travels to China often, and they use Mullvad because of my recommendation. Last year it worked great for them, but earlier this year they went back to China, and it really didn't work.

What I found most interesting is that they had different results in different places. Apparently, in the business areas of Shanghai and Beijing, were they had meetings and events, they could get Whatsapp and Slack messages; when they went back to the hotel, in a residential area where there were almost no offices or tourists, it didn't. In Chongqing even less stuff worked.

I was very skeptical of this when they told me, but they could replicate this consistently over a couple of weeks. It wasn't related to hotel Wifi (that's a different can of worms), this was on mobile data.

Everything worked when they switched to using https://letsvpn.world, at the recommendation of some chinese colleagues of them.

This was with a basic Mullvad install on iOS and Mac, they're not technical enough to harden their VPN connection further; may be they could've easily obfuscated it more and it would've worked.

Not that it isn't a really cool project! I'm only saying it has clear drawbacks.

Where I live there's only 2 companies really, and I'm guessing in almost every market it'll be 1 to 3.

This is not how we have civilized discussions. To say this just because you disagree with someone about the security of an OS...

Hope the mods see this.