I can't speak to all of your browser combinations, but most desktop browsers can present a QR code when logging in with a passkey. I keep my passkeys in a password manager synced between my phone and personal computers. On my work computer, where the password manager is not installed, I can still use passkeys by scanning the QR code with my iPhone's camera app.

Especially when I find that, when I ask an agent not to do something, the mere mention seems to put the "idea" in its "head," making it more likely to ultimately do that thing.

yes, because this is how transformers work, when you introduce "don't do x" x is also entered as a pattern that is more likely to be repeated than if not mentioned at all

Wow. I was reading this article on a iPhone when the heavy ads crashed my Safari tab. After it auto-reloaded, the paywall claimed I had used all of my free articles. Thanks, Wired.

Zach Barth and his former studio Zachtronics released several entertaining puzzle games based on idealized fake assembly languages. These are a lot of fun and useful for introducing registers and multiprocessing.

I keep coming back to the idea of taking that concept and just running with it, IE building up a toolchain alongside some concrete tasks to solve with it and just adding more detail until we reach a reasonably sophisticated level

I've been staring at 0x10c, carwars and battletech and there's a sense that I could build a sort of programming / engineering Zach like

I use this feature to reduce Valve's egress bill, but local transfers do seem slower than downloading from the internet. I'm not sure why. I have one device hardwired to my network switch. Maybe Steam is bottlenecked on poorly optimized disk IO code?

The value of code is approaching zero. SpaceX is buying training data and customer relationships.

Google has always been like this. I remember a presentation from the Google Cloud Platform team a decade ago when they smugly asserted that they'd take care of "the hard stuff" while I, their business customer, focused on ... the easy stuff?

A skill is just instructions that the agent can autonomously copy into context. There’s no trust boundary between trusted and untrusted context.

Yeah, this is your fault if you install the skill.

This reads to me as "user installed exe file can upload your data to a server". Um, yes, that's the point?

This seems like this generation's equivalent of "don't open Linkin-Park.mp3.exe from limewire"

This is the result of anthropomorphizing LLMs. People are thinking “I am giving instructions to a human” and not “I am giving instructions to a computer”.

Humans get phished all the time. The two generals problem predates LLMs.

If this can be exploited via a skill, then it can be exploited via untrusted input inserted into context. Does Cowork help with reading email?

> Does Cowork help with reading email?

Yes. It can read email.

Note that AWS ALB does not support h2c. When the client and server do, ALB will dutifully forward the h2c header and fail to handle the upgraded response.