138 karma · joined March 29, 2017
Please don't. At 2 minute glance you are allowing empty state (csrf) and bearer tokens in query string[0], not checking if token is expired or not[1], storing secrets in plain text / not salting[2], missing PKCE Validation, debug mode always on, redirect URL only checking if includes (127.0.0.1.evil.com works)[3] so much...
Please, please, please don't recommend this for any production usage.
[0] https://github.com/f/mcp-cloudflare-boilerplate/blob/master/... [1] https://github.com/f/mcp-cloudflare-boilerplate/blob/master/... [2] https://github.com/f/mcp-cloudflare-boilerplate/blob/master/... [3] https://github.com/f/mcp-cloudflare-boilerplate/blob/master/...
It's literally like the 3rd sentence...
The real problem I want someone to solve is helping me with the real niche/challenging portion of a PR, ex: new tiptap extension that can do notebook code eval, migrate legacy auth service off auth0, record and replay API GET requests and replay a % of them as unit tests, etc.
So many of these tools get stuck trying to help me "start" rather than help me "finish" or unblock the current problem I'm at.
[0] - https://github.com/emptycrown/llama-hub/blob/main/llama_hub/...
You almost certainly want a graph like structure (overlapping communities rather than clusters).
But unsupervised clustering was almost entirely ineffective for every use case I had :/
I'd be interested in how well you could finetune 3.5 to use different compression.
[0] - https://platform.openai.com/playground/p/hfLUBCTE8RrRYPIRxEe...
How do you compare to the larger players here already Nango[0] and Merge[1] ?
I'm curious how you're thinking about data access / staleness? It's great that you're handling the oauth dance, but does that mean every end user of the product has to auth every product they interface with or are you handling this all at the super admin / enterprise level?
Right now I think there's too much emphasis on the "data loading" aspect of LLMs. I expect to see a swing back into using 3rd party API's SDKs. Interested to hear your thoughts on the Google API, it's absolutely massive and trying to shoehorn that into a unified API scares me.
The only real player that I could see to launch something like this and be successful is Okta.
[0] - https://github.com/NangoHQ/nango [1] - https://merge.dev/
Interesting they kept that strategy even after spinning out that group. Curious if they managed to keep anyone from that team to help with this product.
It also helped out when I was struggling to reconcile with how large of JSON payloads I was getting. The REST endpoints are just killing the prompt size, but having the model choose the fields it needed from GraphQL really helped out there.
Put it down for a while until I can get access to the plugin fine-tuned version of chatgpt and see if there's still a need or if it is additive still.
GPT3 on release was more expensive ($0.06/1000 tokens vs $0.03 input and $0.06 output for GPT4).
Reasonable to assume that in 1-2 years it will also come down in cost.
At least in our blind chat it seems there are several other like-minded people.
Jio.
> try advertising any small business on the internet
Facebook is the dominate player here.
> try avoiding meets meeting when you apply for a job
Zoom? Bluejeans?
If you're a Retool user you can find it under the Beta section in your org settings. And yes, this is available on our cloud offering
>Correction: The possible fine mentioned in Twitter’s 10-Q was not related to the recent bitcoin scam security breach.
Musk very clearly did _not_ get stoned with Joe. Taking a puff off of a joint is akin to taking a drink or two of beer. You're going to have much more of a placebo than anything.
There's no reason to lie to make Musk look stupid. He's doing that plenty well himself.