I'm gonna push the responsibility up a level in the ladder:

A competent adult using a tool ought to understand the inherent pitfalls of using that tool.

Chainsaws are dangerous, in obvious and non obvious ways. The tool can operate as designed and still amputate your foot.

Not OP, but I think their point was the corollary of that.

Yes, obviously bad use of a good tool is dangerous. But correct use of a malfunctioning tool is also dangerous.

Millions of people understand when they get in their car that there’s a tiny chance the car will crash/explode that day through no fault of the driver. Most do not have the knowledge and competence (or even the time) to thoroughly check the engine every day to guarantee that that won’t happen. They get in anyway.

At some point you have to trust in something.

I think that if you continue along the logical progression of the parent poster, then maybe the smaller units of functionality would be represented by simple ranges of lines of text. Given that, deleting a single button would ideally mean a single contiguous deletion from a file, versus deleting many disparate lines.

A decade or more of people copy-pasting rote solutions from StackOverflow only supports the notion that many people will forego comprehension to foster the illusion of competent productivity.

This ain't an AI problem, it's a people problem that's getting amplified by AI.

It was interesting the other day tracing the lineage of Aaron Swartz -> Library Genesis / Sci-Hub -> LLM vendors relying on that work to train their models and sell it back to us all with no royalties or accountability to the original authors of all this painstakingly researched, developed, and recorded human knowledge they’re making billions on.

they are not making billions.. they are burning billions.

That's true. Except that you can have Agents doing it 24/7 with no human input. The amount of repos/PRs is only limited by GPUs

Just curious: why wouldn't you attack this with a jail?

Jails are alien magic and typescript is safe and familiar

What, exactly, is "safe" about TypeScript other than type safety?

TypeScript is just a language anyway. It's the runtime that needs to be contained. In that sense it's no different from any other interpreter or runtime, whether it be Go, Python, Java, or any shell.

In my view this really is best managed by the OS kernel, as the ultimate responsibility for process isolation belongs to it. Relying on userspace solutions to enforce restrictions only gets you so far.

Ah I forgot to add an /s

I agree on all counts and that this project is silly on the face of it.

My comment was more that there is a massive cohort of devs who have never done sysadmin and know nothing of prior art in the space. Typescript "feels" safe and familiar and the right way to accomplish their goals, regardless of if it actually is.

agree, or just busybox or alpine linux that will have more flexibility?

but i think its still useful if we are bound to js/ts ecosystem sandboxed enviroment like in vercel.

When the tokens are nice and lean.

But that's not what he said! He distinctly said "AI", so you were probably playing capitalism, and he cheated!

Acting without due process is oppression.

$Work pays for GitHub, so the implicit solution offered is "take my money and make your service reliable"

The providers for tofu are by design the same as for terraform.

Also, for large providers like AWS, GCP, Azure, etc - these are often largely authored by the hyperscaler themselves, for better or worse.

I don't think the boring reality of most jury trials would make for an interesting screenplay.

To every commenter offering incredulity or sarcasm at the apparent obviousness of this advice:

A great swath of us did not possess the social intelligence to arrive at this conclusion independently upon our arrival in the workforce. I didn't. I got lucky.