Like if CERN published the discovery of the Higgs boson with 99.9997% certainty, but refusing to tell you how they calculated that number, or what equipment they used and how they calibrated it, in order to prevent other labs from copying their methods.
Or like a machine learning lab claiming SOTA on a benchmark, beating a well-known method that they re-implemented, possibly with bugs, on their private dataset, for millions of compute. But you don't get the source to check, and they don't release any intermediate results or ablation experiments. Aka, from the outside you can't distinguish it from corporate marketing.
Yes but it's annoying to collaborate with a Claude proxy person who thinks to have it all sorted out and who will question everything you say but not really listen, just itching to get back to Claude to confirm or deny what you said.
Compare that to being asked for advice, to explain directly something you know or have done, with the expectation of the person asking to learn something. Like asking why some decision was made in the past, based on what information and context, instead of confidently saying that it was done wrong. Both will eventually get you the same information.
Yes it is annoying, however I find that it gives me a much better grasp on the things I am explaining to a "proxy" Claude person. Basically, I would never have stumbled upon the arguments that I'm being presented with as I would never have prompted Claude in the specific way that a proxy Claude person would.
I find a lot of value in understanding how they have misunderstood things and clarifying those concepts.
My favourite is a logout button with a logout API that fails. (Not a huge pratical concern, I admit, because it's a local attack.) Nobody ever notices because it still shows the logout screen, which hides the API error toast (if errors were even displayed). The still valid refresh token stays in sessionStorage (or even localStorage) while the app displays "logged out". (Bonus points if you cleared the access token in the error handler but not the refresh token, and on page reload you ask the user to log in again despite having a valid token.)
Or a login form that gets hidden after login, but clears the username and password only when you click "login back in". (Bonus points if the backend also enforces a 5min session timeout "for security".)
If your clients are compromised then what's even the point of backend security. Users will login and do legitimate actions while their compromised client does whatever behind their back, while still looking normal. And the backend can't tell the difference.
I think it's the other way around. Without the cultural norms around impersonal markets, you have to rely on your extended family network or clan for everything, because there is no trust otherwise. This is what keeps you from traveling. If you were trying to trade with a far-away stranger, why should they not just rob you instead? Nobody is around to punish. And for all they know, you were just as likely trying to poison them rather than make a fair trade.
There is also https://apertus-ai.org/ but yeah, "not useful yet" if you were looking to replace your coding agent. Very useful if you are doing LLM research.
Yes. I paused reading at some point just to marvel at the clarity of writing. It seems absurd to complain about length, it isn't long. Maybe we have different ideas what good writing is, but I'd say this is in the top percent.
AI can mirror this style of writing, but it can't mirror the clarity of thought behind it.
reply