- I think there is a difference between automating “things” (as you put it) and getting to the point where people are on stage suggesting that the government becomes a “backstop” to their investments in automation.
- Sorry to burst your bubble but it takes more than Linus to make Linux.
- I think I understand now, the Cookie just is not present in the POST if a user clicked on, for example, a maliciously crafted post from a different origin?
- What does this even mean?
I’m not being rude, what does it mean to unexpectedly carry cookies? That’s not what I understand the risk of CSRF is.
My understanding is that we want to ensure a POST came from our website and we do so with a double signed HMAC token that is present in the form AND the cookie, which is also tied to the session.
What on earth is unexpectedly carrying cookies?
- Good question, it’s not. You're responding to just another Rust and/or LLM fanatic claiming they can predict the future. Dime a dozen on this board.
- I’m confused, how does this prevent a CSRF attack?
SameSite or not is inconsequential to the check a backend does for a CSRF token in the POST.
- Simon have you got to the point where you just don’t read the article?
Others have pointed out your interpretation of long task is not the same as the article.
Maybe this is the negative effects of excessive LLM usage that are spoken about.
- What purpose does this statement serve?
Everyone working in programming is writing code for a project more like Postgres or Linux than they are a project like making a wood cabinet or a life drawing.
- Your tone is kind of ridiculous.
It’s insane this has to be pointed out to you but here we go.
Hammers are the best, they can drive nails, break down walls and serve as a weapon. From now on the military will, plumber to paratrooper, use nothing but hammers because their combined experience of using hammers will enable us to make better hammers for them to do their tasks with.
- I’m afraid the boosters hear nothing.
The commenter you’re replying to, in their heart of hearts, truly believes in 5 years that an LLM will be writing the majority of the code for a project like say Postgres or Linux.
Worth bearing in mind the boosters said this 5 years ago, and will say this in 5 years time.
- Unrelated to the article but I want to address something that really rubs me up the wrong way about comments on HN.
I recall the ML phase we had before the “AI” phase and I do not remember anyone disputing that complex mathematical models can shift the economy, make or break jobs, the whole shebang.
What really irks me about comments like “AI will/won’t xyz” is the muddying of the waters by the word AI. It’s utterly meaningless but because it means nothing it has so much power. For example:
“Statistical models will take over middle class jobs”
Vs
“AI will take over middle class jobs”
In my mind, these two statements are equivalent in what they are actually saying but the latter closes off any reasonable discussion and lets the looney bin users on here (of which there are many) start with their basilisk song and dance and all the absolutely insane hot takes that come with it.
- You’re absolutely right!
- Sorry but your SQL comparison is way off. SQL is deterministic, has a defined implementation that databases must follow and when you run a statement it presents a query plan.
This is the absolute opposite to using an LLM. Please stop using this comparison and perhaps look for others, like for example, a randomised search engine.
- If you read the first 5 sentences of the article you’d see there are at least 3 popular front end libraries that do morphing. I think suggesting the world has settled on anything when it comes to technology is very silly.
*Edit fixed typo.
- Oh do get a hobby Dylan.
- Hey Dylan, you’re being an ass.
Their tone was disgraceful, let me explain by giving you an example of how posts should be made.
“Hey! This looks interesting, quick search on Google didn’t explain what the BEAM is as well as I would like, can someone let me know what this is about in layman’s terms?”
This is inviting people to talk about the topic at hand. It puts the responsibility of knowing something squarely on the person who wants that information and it’s generally pleasant.
How the parent decided to phrase his desire for being spoon fed information was in fact disgraceful.
- Agreed.
The tone in which people like the parent comment is disgraceful. I’m sorry this is hacker news and hackers know that BEAM is the Erlang VM, no introduction or explanation needed. It is respected and admired as a great piece of engineering to be studied by all hackers.
- Hey Delaney! Thanks for you and your teams work.
It doesn't put me off the project! I will happily pay for great software that enables me to make money just like I'd pay for good tools around the house (once I get started with D*).
I was just pointing out that in my mind the criticism is totally fair game because many OSS do not do this, that is all. By the looks of it you agree.
I think I want to just mention something here that is really important. The Datastar team have done more to push for performance, better UX and the ways of thinking around SPAs and MPAs than multi billion dollar companies have done in the last couple of years. Not forgetting HTMX, this cooperation has been incredibly fruitful and I am very excited about the future with you guys.
- As much as I like Delaney, the discord server and Datastar I find this question baffling.
If the Postgres team released PGPro, swore it just contained anti patterns and you can just write the code yourself if you needed that feature, you’d roll your eyes, no?
It’s about the fact they went there, not about the intentions.
What on earth are you talking about? Don’t quit your day job to become a detective.