‹ BackHN Continuity

Thread

CrowdSec Source Code Leak

160 points · 57 comments · eccgecko

  1. mewse-hn · · focus · HN ↗
    Funny to see this after I spent the morning troubleshooting and fixing my crowdsec install on my debian 13 vps. Apparently they stopped supplying a community blocklist to my machine because I'm running the old debian packaged version instead of directly from them (http 500). I had a LLM build a blocklist from publicly available sources rather than tie myself more tightly to their SaaS platform.
    1. idiotsecant · · focus · HN ↗
      I feel like a massive blocklist is simultaneously exactly the kind of thing an LLM is likely to hallucinate and exactly the kind of thing you don't want to rely on an LLM for.
      1. antonvs · · focus · HN ↗
        Modern agent harnesses rely heavily on tools, as well as writing code, to avoid hallucinations affecting deterministic values.
        1. shakna · · focus · HN ↗
          Which means it'd be a lot cheaper, to use tools, and public sources, and just automate it the traditional way...
          1. KetoManx64 · · focus · HN ↗
            I'd rather spend the $0.50 in API credits than waste a couple hours of my time. How much is your time worth?
            1. ASalazarMX · · focus · HN ↗
              I'd be more worried about how much you think your time is worth. If I was your customer, and I didn't care about your work being mostly AI made and likely with non-evident flaws, I'd pay you, or anyone with the same mindset, as close as those $0.50 as I could get away with. You can take more jobs to make up for it, as long as the customers don't care.

              Even if you hid the fact that your work was mostly AI, the results will make that evident.

              1. KetoManx64 · · focus · HN ↗
                How would you as my customer know that my personal work doesn't have non-evident flaws?
                1. ASalazarMX · · focus · HN ↗
                  > work doesn't have non-evident flaws?

                  I simplified the double negative to "have evident flaws". I'm not sure I understood the question, because I would know if the flaws are evident.

                  1. KetoManx64 · · focus · HN ↗
                    I applaud you skills then, not making any mistakes that are non-obvious at the time is something that the entire industry wishes they could achieve.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.