Hacker Newsnew | past | comments | ask | show | jobs | submit | thomas34298's commentslogin

Codex can read any file on your PC without your explicit approval. Other agents like Claude Code would at least ask you or are sufficiently sandboxed.


I'm not sure how much sandboxing can help here. Presumably you're giving the tool access to a repo directory, and that's where a juicy .env file can live. It will also have access to your environment variables.

I suspect a lot of people permanently allow actions and classes of commands to be run by these tools rather than clicking "yes" a bunch of times during their workflows. Ride the vibes.


That's the entire point of sandboxing, so none of what you listed would be accessible by default. Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents for example.


Interesting fact: Codex has access to all the files your current user has access to as well, even if you just opened it in the src directory.


Sam tweeted "taking care of my kid in the hospital":

https://x.com/sama/status/1895210655944450446

Let's not assume that he's lying. Neither the presentation nor my short usage via the API blew me away, but to really evaluate it, you'd have to use it longer on a daily basis. Maybe that becomes a possiblity with the announced performance optimizations that would lower the price...


I think it's pretty clear he's a liar in most facets of his life


Have you even tried it out locally and asked about those things?



so, no


>BUGFIX: Don't ignore SSL errors (sledgehammer999)

>https://www.qbittorrent.org/news

There should be a security notice IMO.



Recently, I decided to try out Claude for a month and bought the subscription right when mine for ChatGPT ended. However, after just a few days, I noticed how sluggish and inconvenient Claude feels on the web. Maybe it's partly because of my 4k screen, and it's not optimized for it, but I quickly switched back to ChatGPT due to the IMO better UX. Also, temporary chats are missing!


i also dislike my web experience with claude. it still generates completions after my free credits are consumed, and after it realizes there are no more free credits, the web app artificially removes the completions and throws an error. as a frontend dev, i'd think to check if there are credits left before even calling the api. i also dislike that there's a multiple second delay after hitting enter on claude. i'd expect to be on the chat page as soon as i hit enter.


Most important changes starting November 1, 2024:

- OSCP+ will replace regular OSCP with a three-year expiration (old lifetime certificates remain valid)

- Removal of bonus points to improve fairness


I think the same argument could be made for Twitter/X. The app stores by Google and Apple specifically disallow pornographic material, yet the app is full of it. Once you're big and important enough, the rules mostly don't apply for you anymore. Of course, if they tried to circumvent the app store tax directly within the app, there would be consequences, but as long as Google/Apple can make a profit, it's okay it seems.


> I think the same argument could be made for Twitter/X. The app stores by Google and Apple specifically disallow pornographic material, yet the app is full of it.

Reddit is allowed too. imgur, snap, etc.

I assumed you're fine as long as your raison d'être wasn't porn and the content was user generated / supplied.


To add, Tumblr was lambasted for them not properly policing their porn[0], accidentally allowing CSAM, and Apple being the one to inform them of this error. it's what led to them banning all 18+ content, arguably sealing the platform's fate of irrelevancy.

0: https://www.theverge.com/2018/11/20/18104366/tumblr-ios-app-...


I thought Yahoo's acquisition was what stopped their 18+ content

But perhaps the most catastrophic misfire of all was the notorious ‘porn ban’ that came into place on December 17, 2018 – a policy partly driven by a US law [1] that made websites liable for sex trafficking that might take place on their platform. The ban covers ‘female presenting nipples’, genitals, and any depicted sex acts. Until then, the platform had remained a refuge for a devoted community of users, but this decision affected swift and dire consequences.

https://www.wired.com/story/tumblr-sold-to-wordpress/

[1] https://en.wikipedia.org/wiki/FOSTA-SESTA


And who determines that reason? Twitter seems to work fine with no restrictions but Discord basically has to lock down any server marked as 18+

(regardless of the content of 18+. Don't know how mobile has had 15 years to do granular content warnings based on decades of other medium but app stores still assume 18+ = porn).


> And who determines that reason?

the exact language of their T&Cs?

Not to be too flippant, but we can guess all we want, but the individual apps signed up to specific terms at the time, and you can almost guarantee that Apple (or anyone else) reserves a lot of leeway to themselves as to how they enforce or otherwise police those T&Cs.

All the conjecture in this bit of the thread seems a bit pointless given none of us are reading it, let alone reading the specific bit that whichever app in question might be held to.

Hence my start to it, as well, these seem to be allowed ...


Can an aggregator/distributor be liable for user created content? You can find porn in Reddit or Google Search and these apps are still in the app store so I don’t think they are getting any special treatment.


Didn't work out for Organic Maps. Merely allowing to access map data makes you un-family-friendly. Or at least that's what we can assume, since Google won't indulge in specifics. https://news.ycombinator.com/item?id=41272925


Even Tapatalk had to filter out "adult" forums - and it's just a client to connect to 3rd party forums.

On Twitter you can find actual porn straight up.


There are some protections for hosting illegal data (real illegal, not EULA-disapproved), but they tend to go away if the host does any kind of editorializing (like showing the data through an algorithmic feed).

Google Search is different yet, since they aren't the primary host.


I don't think I've ever actually seen any porn on eXtwitter. (Well, on main.)

Why was a perfectly fine Unicode Blackboard X filtered out of my post.


HN strips out emoji and other non-language characters, may be related to that


There is a lot of porn. X even added official rules for it: https://help.x.com/en/rules-and-policies/adult-content

I don't have an iPhone, but I know that you can access it via the official app from Google Play.


What I'm saying, you have to seek it out.


Not everything revolves around scientific journals and their archaic rules. For my team Typst was a perfect LaTeX replacement and we've been happy ever since we switched. It is easier to understand, has faster compile times and is more powerful without enabling shell escape. However, we're not in the business of writing scientific papers, we write technical reports for our customers. If it wasn't advertised as a LaTeX replacement, we might never have found out about it.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: