RRR and PBS in Melbourne both stream online and are both fantastic for music discovery. Go the former if you lean indie and the latter if you lean international.
Their findings about auto mode catching more dangerous commands, and most permission requests being accepted without scrutiny is interesting. I can totally see how that happens.
On the other hand, soooo many of the tool uses it asks permission for are custom commands to replace functionality I should be able to trust once instead. e.g. instead of having a trustable Find tool, or using its already-trusted Read tool, it often will run `find` or `grep` or `cat` with a series of pipes and substitutions or `-exec` args, requiring me to give permission every time for basic, safe operations.
The (increasingly active) conspiracy theorist inside of me says it's precisely designed to do that, to give me "permission fatigue", so I turn on auto mode and give myself over to the machine spirit :)
I changed from cursor to claude code a couple of weeks ago and this is the biggest difference I've noticed. cursor very rarely had to ask for permission for a command because it almost always used builtin find/read/edit tools. Whereas claude code makes extensive use of unix tools with mysterious flags which are basically impossible to whitelist and pretty impractical to manually review.
Overall claude code seems better at "just get things done" if you blindly trust it, but cursor was much better at keeping the human in the loop.
Regarding ulterior motives - these permissions are 'performative' in that anything you can give it permission to do, it already has the ability to do. They're app level - not OS level. So if they wanted to do something, it wouldn't require you to give permission.
Right and you rely on that browser to enforce those protections. But if the browser itself was working against you, then the permissions you tell it to give (or not) become meaningless. A good example there is trying to turn off "telemetry" on Windows.
To be clear, I'm not accusing Anthropic of being evil black hats trying to break my computer, I'm accusing (or rather suspecting) them of pushing me towards some kind of product lock-in by making my preferred "sceptical at-arms-length user" workflow more annoying.
If you clutter your context window and pay for the tokens to do so and risk distracting it etc., would it obey if you included this comment in the system prompt or noted it in memory (if supported) or something?
“Avoid custom commands, e.g. series of pipes & substitutions, when my previously approved trustable Find/Read tools are sufficient with little downside. [Already trusted tools: x, y, z…] […]”
Not just that, the commands also have often slight variations in each new session. They still do the same, but the variations are enough so it isn't matched by the allowlist any more.
Exactly. It’s no surprise that people just blindly hit accept on permission prompts after the 80th time Claude code asks if it’s allowed to read-only parse a csv.
Your "tilting at the windmill" phrasing is interesting. I don't get the sense from your tone otherwise that you disapprove of it or think it's pointless.
I took it as doing what too many people feels like tilting the windmill. As a society (and frankly in myself on too many issues) I notice way to much "well what can we do" defeatist attitude.
Yeah, def is tiling at windmills, but my point is the same, I took it as them saying the public has taken a defeatist attitude and views it as tilting at windmills but here's a case where it wasn't fruitless effort and we need to view it as inspiration.
This explosion of optionality types is (the most important) topic of Rich Hickey's "Maybe Not" talk. I recommend it!
The short version is: the shape of a type is inherent to the type itself, but the optionality of its members is dependent on the situation. A type system that solves this problem separates these concepts to allow for this distinction.
I _suspect_ it's possible to implement something like that in typescript but I haven't tried it myself (and I doubt it's very ergonomic).
Wonderful to see Durak mentioned. I learned it in its Vietnamese form (Tấn) and introduced it to friends in Australia where it was a big hit. We eventually settled on calling it "Dickhead" or "Dumbarse" which seems like an appropriately Australian interpretation of the source material :thinking:
In my little hometown back in Lithuania we played the game as teens so much that everybody knew the optimal strategy, and it was more about either sheer luck, or who misremembers other people hands.
From my experience, the reason CORS is hard to understand is that it's somehow inverted from the default "shape" of security in web dev.
We easily form the intuition of the client being a by-default untrusted entity, and checking whether it has the privilege of accessing this data, where the server is the arbiter of that access.
CORS is so inherently different to that, and while the information is easily available, it requires a short but careful read to grok the idea -- which a dev tunnel-visioning towards getting their application code written may not wish to slow down for.
I think that once you understand that CORS is about protecting the visitor not the server you're halfway there.
Also, if you have everything set up properly, the fact that you're haveing any CORS issues at all means you're probably trying to do something stupid and you need to ask someone smarter how to solve your problem.
Went looking for that article out of curiosity. For what it's worth, I think the original commenter expressed a fair opinion politely, but the "author has issues" commenter was unnecessarily unpleasant.
Neither of those should prevent you from writing how you want!
If you've got the ability to play the original, it still held up fantastically when I last played it properly (2-odd years ago).
I tried emulating it a few years before that when I didn't have any workable screen for my PS2 and that was not so good. A game that pushed the original hardware to its limit also pushed the emulator past its limit. Might be better with more powerful hardware than mine?
However, I've heard the remake is perfectly good, and surely easier to play with modern PC hardware!
I wrote a response to this, but then I realised I was responding to the claim that modern media was more derivative, rather than what you actually said, which was that modern media is more _meta_.
Can you go into that a little more? Do you have specific examples that make you sad?
The first example that comes to my mind is the show Community, which I really enjoy, and which doesn't make me sad at all.
P.S. an article I linked to in my original response was https://www.filfre.net/2025/01/the-crpg-renaissance-part-1-f... which I mentioned as it talks about a historical standout in the genre but puts it in the context of the copycats and the schlock. It's now irrelevant to my comment, but I'd like to link to it anyway.
Not OP, but there is a wide chasm between what Community does and what OP was referring to.
Community's thing is that it is a meta show. It uses the meta it references to get a point across, make a joke, or provide a spectacle (a good example of spectacle are the Paintball episodes)
What OP referred to, and what I've noticed, was that media nowadays is just a mashup of what came before with little to say about it. Or to put it in other words: not transformative. The creator likes something, and they put it in their work because it's cool. There's nothing wrong with doing just that, but when you start seeing the same thing over and over again in different works, it gets tiresome.
We're so obsessed with filling every waking moment with something that we don't allow ourselves to have the "a-ha!" moment any more, so we default to "what if X and Y?" where X and Y are thoughts on the surface of our mind rather than two unrelated things that somehow click when the default mode network activates. For example: what do archways in a Shinto shrine have to do with a fox piloting a starship around? Absolutely nothing, and yet for Miyamoto that thought made sense.
Ah, thank you very much for this reply, because I haven't watched Community myself so I didn't realise the confusion between a show that's intentionally about a meta situation vs. ... well what you've written explains my meaning exactly.
You should watch some episodes, even if you don't watch all of it. There's a reason why it influenced popular culture (even if no one remembers it doing so).
I don't know if I have a good argument for it myself. I have seen a lot of people saying specifically that they based their {thing} on {prior thing} rather than something from life, but I haven't exactly kept a list. Beyond that it's mostly a feeling.
The very brief (and bastardised) summary is that we're cutting ourselves from what is real, so we base our art on the fake reality that we're experiencing.
I'll never forget when one of my teachers asked: "who has seen a sheep?" The entire class put up their hand. The next question was "who has seen a live sheep, in front of them?" more than half the class put their hand down. We all know what a sheep looks like, but not because we've been near one.
Yes indeed, I'm aware of it, though I admit I never finished the whole thing. It did make me notice this situation even more acutely.
It's funny that the part everyone quotes from the book (namely the Borges fable and the 'desert of the real itself') is in the introduction. Makes me wonder how many others didn't actually get through it. :)
reply