breadchris

this is sick

Deploying closer to God

wow! this is awesome. I keep a daily journal with logseq and it feels similar to this. I like the idea of distilling someone’s day of browsing down to only relevant bits.

haha thanks, trying to work towards a show HN

I really like the idea of mining your own browsing history for insight. I think that the value of our browsing history is completely lost to us because the lack of tooling to make saving and searching more accessible.

It's still WIP but I've been building a browser extension for this on GitHub here: https://github.com/lunabrain-ai/lunabrain

My goal is to be able to use the Internet as normal, but have the extension automatically index and rank content I find important. For example, if I spend 5 minutes on a page that I went to after Hackernews, odds are I found that important so it should be considered in my history differently than other things.

The network effect of this data is pretty interesting too. It would be really cool to see what my friends, or other high trust, high signal, groups i am in find interesting. Being on a page where my mentor has stared, annotated, shared this before will probably give me pause and make me consider this page more deeply.

I'm curious if anybody else has any notes to share.

LunaBrain: https://github.com/lunabrain-ai/lunabrain - Cross-platform bookmarks that get saved, sorted, and shared automatically.

I find that most of what I do, on any given day, is finding interesting stuff and sending it to people to see what they have to say about it. Hackernews is pretty effective at doing this, so it feels like i’m more or less building hackernews but with power-user features for collecting and sharing stuff.

I imagine in the future being able to group content and then synthesize it with AI to get a draft of something you have been wanting to write.

This is awesome! I have been working on a similar tool. My focus has been keeping as much as possible in a single binary (benefits of using go) so that local development and deployment to production is super easy. It can orchestrate different grpc methods together which is pretty neat. I have been digging using the Protobuf type system to express the data transfer between nodes.

this looks awesome! I have had my head in a similar space for a while and have been building some general purpose tooling for AI interactions and streaming it https://www.youtube.com/live/znCMrtOcjb0?feature=share. It would be awesome to chat with you if you have time/are interested. Shoot me an email at chris@breadchris.com

breadchris.com

I can’t believe that people use closed source auth solutions. As a security engineer, I am so thankful that Ory exists. If you can’t run your auth stack locally, your engineers will find work arounds for the inevitable pain/frustration due to some undocumented behavior that they can’t self service a root cause understanding.

Wow! I didn't even know that Cerebras was a thing and I have been trying to keep up to date with this stuff!

Reading through these things were interesting.

This is an interesting perspective of how ML can influence standardization. I have been thinking a lot recently about the dichotomy of structured and unstructured data and how each eb and flow. I have felt like a data plumber for quite some time and optimizing that process is a hobby of mine lol

I’m really looking forward to when I can show my kids what Legos are. I don’t remember many of numerous plastic toys i had growing up, but i remember the things that were built well. Wooden blocks, a box with a variety of metal latches, and of course legos. People know a good thing when they see it and feel it, regardless of age. I am really fortunate I didn’t have to deal with Megablocks lol

It is interesting to see everyone’s attempt at trying to make this happen. And of course there’s no silver bullet and everyone is going to have their own opinions on how to do this but when I have seen tools like GRPC work for a company’s like Google and Uber it seems to me that this is the right abstraction, at least when it comes to services communicating with each other. I like code that can stay around for a while, and in its time, Java was (and arguably still is) a great abstraction that lets someone plug things together. I want to give people that satisfying “snap” when things go together nicely and for what they build to stay around.

Examples taken from the ChatGPT documentation site that have been put together in a repo and dockerized.

I have been playing with this a bit recently and it is incredible. Very well written docs and anything they don’t cover, the code is really easy to read. I am excited to use this more and see where the project goes.

wow, I have not seen much of the errors that you have come across! That is good to know about.

In regards to freely available information about security, are there other resources you can recommend? Something that I find myself constantly being asked is “how should I protect my code” from engineers. I really fail to find much better freely accessible content in one place than the content available on OWASP.

Not that this would help the quality of the content, but maybe ML can help here? I know a lot of very skilled security people who post on various places around the Internet and an ML search engine to help you find relevant security material might be helpful?

At the company I work for, we are building an ML chat bot that would allow you to ask questions about security vulnerabilities and get linked to the relevant material to help you make your own determination about relevancy.

Cook Wherever: https://cookwherever.com/

Cooking is hard. I want to cook more but I am usually too hungry to focus. I am building a site to help you with all stages of cooking, not just showing you ingredients and directions.

I have also realized the knowledge I have amassed for the “why” of cooking helps me cook without needing recipes mostly. I use ML/NLP to extract entities from ingredients and directions so contextual information can be provided to someone who is curious (ex. “you preheat your oven because …”)

I really like content creators, but following videos while cooking is a no-go for my attention span. I’m working on it, but directions will work as time stamps into a video for a recipe.

[1] https://github.com/cookwherever/cookwherever

i can’t believe how effective this has been for me. I’ve noticed that instead of being continually “interested” in youtube and going down the rabbit hole constantly, i actually get bored of youtube pretty quickly once i have watched all the content my subscriptions have put out. i still spend way too much time on my phone, but i guess i need to have the phone equivalent

was ed not light enough? it is the standard editor.

Until three years ago, the last time I touched javascript was when jquery was all the rage. I had been a security engineer for my whole career, but recently ive been building a security product (with js, obviously) and it has been blowing my mind the state of everything.

Most security products are just lighter fluid on the tire fire that is "vulnerability management" and has gotten to the point (as the post pointed out) where reports are doing more harm than good.

I had seen something like this coming since when I was starting out in security the meritocracy surrounding collecting CVEs was very real for vuln researchers. It isn't their fault, it is just really difficult to prove your worth as someone who is seen as a cost center to a company. Additionally, if you don't actually find a vulnerability, are you a bad security researcher? Is the app actually secure? There is a lot that is left on the table if you can't get that CVE number and proving your worth to the security community becomes challenging.

My company and I are all security experts spending all of our time figuring out how to flip the script on current reporting and response practices. If you (vjeux) or anyone else have any thoughts, ideas, or rants you would like to share, we have a discord https://discord.gg/awx66qBW but if you aren't about it, you could shoot me an email: chris@lunasec.io.

Would love to hear about your war stories from the trenches!

i used to try to create obsidian workflows, but i found them very challenging to keep up. i used to think i wanted configuration for my note taking so I could capture all the ways I wanted to interact with the information i stored. Even though i initially rejected it, i have ended up embracing logseq and it’s seemingly odd way of working. I have grown to love the daily journal being front and center as I find it removes mental overhead when it comes to figuring out what to take notes about. I just put everything in there! I don’t think, i just take notes. When i store information, i write some contextual information to help me retrieve it the next time i look for it. When i search and can’t find it right away, i add more context to the note to help me find it faster next time. I think it works for me because i don’t like the pressure of writing a structured note, but when I do take the time to write, it’s because i am excited about it and I end up streaming my consciousness in an almost blog like post (as I am doing now, i love writing about note taking). I work at an OSS company so fortunately all my notes I publish online: https://breadchris.com and i find it so freaking liberating to be able to share my haphazard ideas with others lol.

having spent a decent amount of time looking at this stuff, my biggest recommendation is to try things out for a bit, and find habits that stick. I found a way to make note taking addicting, and other people i’ve got on the band wagon have found it addicting as well so I think logseq is a worthwhile thing to try out. I haven’t put it together yet, but I would like to put together the workflow (more like a mindset, less workflow) that I follow.

Good luck to those looking for a way that works for them for taking notes! I would love to hear about what people have tried, I have a lot of ideas to share.

i came to this thread to see if someone commented this. when the apple fbi whole thing was in the news, it was interesting hearing normal people saying that phrase. As someone in security, I knew that “backdooring” encryption was effectively giving everyone in the world a chance to read your message. Abuse of power can’t be kept in check without cryptographically sound encryption, authorization controls protecting your data is meaningless if it’s data you really care about.

descript is the best tool i’ve ever used for this.

it is cool to see someone mention SAMM. I have been obsessed with this framework since it’s inception and am hoping more and more companies adopt it over time (and let it grow with their company). Often times these frameworks are only feasible to use once you have a pretty large security team at your company that can spend their entire job to parse schemas like the one posted. I wrote a post recently talking about how to make SAMM more obtainable to smaller companies starting out thinking about security https://www.lunasec.io/docs/blog/security-guide-for-startups...

Hey everyone!

This is a guide we have put together to help startups and companies building a security team. This is an opinionated guide based on our observations working at large tech companies who have successfully built out their security teams.

I thought this was going to tell me about a hardware accelerated text editor.

TL;DR ive been consolidating my cooking knowledge in an open source recipe site https://github.com/cookwherever/cookwherever

Hey! I am excited to see people developing in this space since this is where my head is also at. Up until two years ago I was eating canned chili and soylent before I was shown the light with The Food Lab and Salt, Fat, Acid and Heat. Ever since I have been trying to share my knowledge on cooking with others with varying levels of success.

What has become clear to me is that there is no one size fits all approach to teaching cooking since it is usually a very cultural experience for most people (as many in the comments have pointed out). That said, SFAH makes the argument that most cuisines are much closer than people think when you consider the functional properties of the ingredients that you are cooking. Pizza is just pasta with yeast *Italian grandmothers slowly turn their heads towards this atrocity*

All of this to say, I believe recipes are critical to jump start the creative process of cooking. When any type of possible failure on the path to completion is experienced (ex. missing ingredient, burnt cookies, etc.) there MUST be some way of recovering or at the very least understanding how that happened.

I have been slowing taking notes on all the cooking knowledge I have come across and have been putting it along side the recipes that inspire me. Forcing learning on someone in the kitchen, who is already probably pretty hungry if cooking is seen as a chore, is not productive. Sharing the joy you get from the art that is cooking is IMPERATIVE for any type of educational resource.

If you are interested in my progress, or want to contribute go check it out! https://github.com/cookwherever/cookwherever

completely unrelated to your post, but just wanted to say thanks for your work on the rebooting of nyt’s ingredient parser. I use it in my project here: https://github.com/cookwherever/cookwherever (site is currently down due to the server being physically moved from our house lol). If you are interested in talking more about how i’m using it I would love to share :)