35,595 results · Most relevant
If models can identify the chemist from the molecule alone, they may be inferring chemist intent rather than learning physics — meaning they may not learn what you're trying to teach them. Hunt down model-cheating failure modes in high-dimensional biological data before trusting results, and chase down noise sources like instrument identity if a model can predict which instrument a dataset was run on.
Harish Gaggar says every tool defined in an MCP server must be fully reviewed by the internal security team so only authorized tools reach production, and tools should enforce filters, limits, and block fields that are not required to go to the LLM.
At the core of the NX incident is that a malicious actor was able to use a trusted dependency to talk directly to an unsandboxed agent. Because dev coding tools were already trusted local tools with full file system access, they were the single most effective search tool already sitting on the machine, ready to be corrupted. The agent's environment had everything from SSH keys to cloud credentials to tokens for every service the developer used a coding agent to touch. The failures were: agents running locally on the actual computer itself, package content reaching the agent completely unfiltered, and the agent having unrestricted access to both the file system and the outbound network — which is how it was able to both find the secrets and exfiltrate them.
Giving agents all three lethal trifecta capabilities is an open door to compromise the whole organization. The trifecta is illustrated by the Replit incident: an agent with access to private data, a path to the internet, and a route to production could run destructive commands, exfiltrate data, and cover its tracks.
The big lesson from the Copilot incident is that we cannot let AI tooling have more access than it needs, especially to the point where it gets to totally bypass controls that human employees are subject to. Just because the attacker had access to Copilot, they were able to get around the vast majority of the company's access controls, and they were able to pull internal information about data exfiltration and bypassing DLP measures that the compromised finance user should have no business asking about.
Move checks that run in CI to earlier in the development lifecycle (shift left) — it's cheaper to catch issues earlier and reduces downstream bottlenecks. Moving some checks left also significantly reduces the test load on CI.
Never let the agent that made a change approve its own change, because that would not be zero trust; ensure the change was approved and tested by someone who did not write it.
Automate review for the most part and only escalate to humans for exceptional cases. Auto-approve low-risk or internal changes to remove further bottlenecks.
Enforce policy rules beyond CI — code compiling doesn't mean it complies with specifications like HIPAA or DORA; agents won't be aware of these unless enforced. A green CI does not mean the code is compliant in many cases.
Consistency beats intensity — a principle from Dan Garner — and adherence is the number one predictor of physical fitness outcomes in the literature. Choose a training program you will engage in, put effort into, and repeat consistently over time.
Dr. Andy Galpin says that for exercise splits, you shouldn't worry about which body parts to package together — only worry about how many times per week and total volume you achieve on a muscle group per week. How training is folded into a split is really a personal preference issue.
Dr. Andy Galpin argues that performing a movement without maximal intent will not produce the desired adaptation: a box jump done without powerful intent will not increase power, and intentionally lifting slower only reduces acceleration and therefore strength gains. He emphasizes executing every strength exercise with high intent, which also allows flexibility in how much load goes on the bar.
When adding type, systematize the font family (e.g., Inter, Instrument Sans), the font size, the matching line height for each font size, the font weight you're going to use, the purpose of use for each type style, and adjust letter spacing and tracking.
Katie lays out five goals for an RKO: culture building (the most important — a sales culture where everyone works together and is inspired by one another), inspiration (reps leave pumped to tackle the market), education (while warning enablement leaders often overcorrect and make the whole event about education, since people can't remember everything heard in a two-day period), celebration (the team worked hard all year whether they won or lost), and jumpstarting the year (doing actual work at the kickoff so the team is running by the next week in January).
described
A metric in the severe range will cap your performance. Get it up to just sufficient or concerning so it stops limiting you, then pursue optimization in any area you have a specific passion for.
The host argues that if you don't feel pain and grief, you will become numb to beauty — and getting everything you want doesn't matter if you can't feel it. He recommends breathwork for 20 or so minutes as a cheat code for accessing feelings you didn't think mattered, and says that once you clear the emotional sludge, you can be present, which makes you more creative, more dynamic, and more charismatic.
Dr. Chris Thompson cites the Whitehall II study, a prospective longitudinal study of British civil servants that tracked many metrics including fasting insulin. It found that people with high fasting insulin were more likely to get diabetes long-term, detectable 10-15 years in advance. He notes that no one acts on this finding because no one looks for fasting insulin, and that there are signs of metabolic dysregulation much earlier than a high A1C or high ApoB.
Jake Tuura advises that to know what is stressing and straining a tendon, look at the associated muscle and how hard it is working; the force or torque coming from the muscle is what tells you what is going on with the tendon, since the tendon is just the middleman between the bony position and muscular force.
Brooks states that people learn best by learning how something works, then actually practicing it, then teaching it — noting there is a ton of research on how people learn. The same process is true for golf, speaking Spanish, and understanding how to live a better life.
endorsed
Rick Rubin says that by the completion phase you can have a deadline and it won't hurt the project — it might even help. But if you dictate a deadline, keep it private to yourself rather than public, because a public deadline makes it harder to extend the project when a new discovery shows the work could be much better with more time.
Choose sources → to get a library of your own and a daily brief.