Johngibb's comments

Johngibb | 8 months ago | on: Supabase MCP can leak your entire SQL database

I am actually asking this question in good faith: are we certain that there's no way to write a useful AI agent that's perfectly defended against injection just like SQL injection is a solved problem?

Is there potentially a way to implement out-of-band signaling in the LLM world, just as we have in telephones (i.e. to prevent phreaking) and SQL (i.e. to prevent SQL injection)? Is there any active research in this area?

We've built ways to demarcate memory as executable or not to effectively transform something in-band (RAM storing instructions and data) to out of band. Could we not do the same with LLMs?

We've got a start by separating the system prompt and the user prompt. Is there another step further we could go that would treat the "unsafe" data differently than the safe data, in a very similar way that we do with SQL queries?

If this isn't an active area of research, I'd bet there's a lot of money to be made waiting to see who gets into it first and starts making successful demos…

Johngibb | 13 years ago | on: My Windows 8 app approaching 100,000 downloads

This reads like an infomercial... like someone was paid to write it.

Johngibb | 13 years ago | on: Hey, C Is a Functional Language Too

If we're going to grant that a machine can have infinite ram, surely we can grant that a spec of C can have infinite stack allocated arrays... :)

Johngibb | 13 years ago | on: Going back to Dropbox from Google Drive

Can I have one please?

Johngibb | 13 years ago | on: BootMetro: Metro style web framework

I think your criticism is well founded.

That said, the author did put work into something, document it, and share it freely with the community - and for that reason, I'd rather not see someone hurt their feelings calling their work an 'abomination.'

I just think with a slightly different tone you could have made the same point in a way that would show the OP some brutal honesty but without discouraging them.

Johngibb | 13 years ago | on: BootMetro: Metro style web framework

Please, be constructive instead of just dismissive. A nasty tone doesn't help anyone nor does it encourage trying new things.

Johngibb | 13 years ago | on: iPad mini

I bet the variation in the size of people's fingers is greater than the difference in the size of touch targets between original and mini iPads... :)

Johngibb | 13 years ago | on: Git 1.8.0

Deprecated, but not removed yet. It "may be removed in a relatively distant future"

Johngibb | 13 years ago | on: How Git shows the patriarchal nature of the software industry

That's true, and I think assigning malice to this situation is unfounded. But maybe this is a problem worth solving?

Johngibb | 13 years ago | on: How Git shows the patriarchal nature of the software industry

Come on, don't reject it so flippantly. Sure, for the case of a woman getting married and taking a new last name, I doubt it's that big of a deal - you can change your name for future commits, but your old name will exist for historical commits. However, there _are_ cases where you might not want your former name around (transgender, or even something like privacy / witness protection). Right now, these folk are being sort of excluded (however inadvertently) and it's worth discussing ways to fix that.

Johngibb | 13 years ago | on: Some advice from Jeff Bezos

That stood out to me too... is there an inside joke? What's the white have to do with it?

Johngibb | 13 years ago | on: Show HN: Easily publish an email conversation to the web

I know you'd miss the syncing, but why not let me just cc [email protected] instead of having to gain access to my google account? It would be usable to people on exchange as well that way...

Johngibb | 13 years ago | on: Retina Revolution - smaller images with better quality

Yea that pesky tablet revolution wasn't a thing either, and neither was the GUI actually. I'm still using lynx.

(No offense to lynx users.)

Snark aside, it seems like high dpi will inevitably become standard in the next few years.

Johngibb | 13 years ago | on: A Letter from Tim Cook on Maps

I didn't know it had been confirmed yet, can you add a link?

Johngibb | 13 years ago | on: Facebook Gifts

That doesn't mean that people don't care. I certainly wouldn't able to remember the birthday of all my closest friends, but I do care and am glad to be reminded. On the other hand, there are of course a ton of bday wishes from people who probably don't really care, but is that really a bad thing?

Johngibb | 13 years ago | on: What happens to our brains when we exercise and how it makes us happier

Why the snark? They're just providing another piece of data in an open discussion that may encourage more people to try the app. What's wrong with that?

If your argument is that the comment didn't add much to the discussion, I'd reply that yours added even less.

Johngibb | 13 years ago | on: Announcing the First Beta Release of Persona

Is there any way to use it for say an iPhone app interacting with web services authenticated as a user?

Johngibb | 13 years ago | on: Nigerian scammer gets a laptop from me

Why shouldn't you be able to walk down a dark alley in NYC at night? It's not your fault if something happens. With that attitude, we are just tolerating crime and accepting it. If more people walk around at night, the crimes will gain more exposure, be more aggressively stopped, and things will get safer.

Johngibb | 13 years ago | on: Bank of America Giving Access to Random Accounts

Yep, that'd do it!

Johngibb | 13 years ago | on: Bank of America Giving Access to Random Accounts

Are you sure about that? I am almost positive that you're wrong, and @@identity is per connection. Otherwise how woul it know which table to return an identity for?

I thought that the difference had to do with what's returned if a trigger does an insert or something like that...