Emil Privér

Emil Privér

@priver.dev

Founding engineer and Part-Owner at http://enad.io | Love rust and go

523 followers328 following487 posts

View full thread
Emil Privér
@priver.dev

An example of these types of tests is when you want to: 1. Insert a new user. 2. Test that the user exists via HTTP. 3. Delete the user.

Emil Privér
@priver.dev

something I've noticed is that on those days when I spend the majority of my time vibing with projects that don't matter and will only be used one time, such as this integration I've built now, I am exhausted. my brain is melting after a day of this LLM usage

Emil Privér
@priver.dev

Good morning you all Started off by vibe-coding a change to an internal tool. Now time for some rust Anyone working on something fun?

Emil Privér
@priver.dev

Garry Tan, the CEO of Y Combinator said they write 10k lines of code. I asked Opus 4.5 to write a solution to encode only the filename in a url. The first image is AI and the second is my solution. The AI code got bugs, for instance if we encode a char outside of S3_ENCODE_STR.

Emil Privér
@priver.dev

Vibe coders will look at this solution and think, well, this look good to me Tested if opus could figure out a deadlock issue :)))))

Emil Privér
@priver.dev

At the moment, I'm developing a new feature for a side project focused on data analysis and automation to uncover synonyms. The goal is to leverage real user search data to determine if suggesting synonyms could enhance search results. Stack is #Rust, Meilisearch & Postgres.

Emil Privér
@priver.dev

But it's also horrible and dangerous solution because we now have an LLM with capacity of opening and reading apps, browsing the web and even executing CLI commands, and we run it in an unsupervised environment with no human in the loop where anyone can prompt it via WhatsApp, Discord and emails

Emil Privér
@priver.dev

The hardest part about this type of service is not building the app that talks to other systems. Is all the security around it such as firewalls or analysis of traffic that cost much money and is really hard to get secure. If this was easy would Anthropic or Openai 100% already built a version

Emil Privér
@priver.dev

Working on a integration between us another service, I build the foundation for the integration such as the http client, how to fetch data and so on. Then I let @ampcode.bsky.social build the 4 other requests we want to make against a swagger I got. Worked like a charm

Emil Privér
@priver.dev

Now I am double checking the payload we send so that we send it the way we want I also need to take some time and improve my work desk at the office, It's about time ☺️

Emil Privér
@priver.dev

I don't think people really understand how important this is—or how bad it is for curl.

Emil Privér@priver.dev

cURL official closes bug-bounty program on hackerone due to AI slop

View full thread
Emil Privér
@priver.dev

With the recent changes, curl will eventually miss important exploits because: 1. AI "slop" reports are taking up most of the maintainers' time. 2. The removal of monetary rewards takes away one of the main reasons talented exploit researchers look for vulnerabilities in curl in the first place.

Emil Privér
@priver.dev

It doesn’t necessarily mean curl will be less safe overnight, but it definitely means that talented people won’t be looking for exploits in it as much.

Emil Privér
@priver.dev

I don't think people really understand how important this is—or how bad it is for curl.

Emil Privér@priver.dev

cURL official closes bug-bounty program on hackerone due to AI slop

Emil Privér
@priver.dev

curl is a commonly used library in almost every major industry, including banks, car manufacturers, phones, and computers. This means that if someone wants to hack a large organization and they are aware of an exploit in a library like curl, I wouldn't be surprised at all if they tried to use it.

Emil Privér
@priver.dev

Simple setup for running Svelte SPA on top of Axum in rust. bun run dev for development bun run build for build production static files that we serve in static folder. This will probably run inside CI localhost:5173/dashboard for dev with autoreload localhost:3000/dashboard for production build

View full thread
Emil Privér
@priver.dev

Something that I think is underated is when you can download a binary and simply run the binary without docker or similar. Just provide env variables and then run the binary and you get everything you need

Emil Privér
@priver.dev

Even if docker is amazing can it sometimes be a bit of an overhead you don't need and maybe what you want is a simply systemd config with auto restart I used gemini to generate this example :D

Emil Privér
@priver.dev

Simple setup for running Svelte SPA on top of Axum in rust. bun run dev for development bun run build for build production static files that we serve in static folder. This will probably run inside CI localhost:5173/dashboard for dev with autoreload localhost:3000/dashboard for production build

Emil Privér
@priver.dev

This will be used to ship a all-in-one docker image with both UI and API. The goal later on is to also build a binary where we store the static generated files inside the binary using include_str!()/include_bytes!()

Emil Privér
@priver.dev

Working on a pretty massive Rust project right now. Earlier this week, I swapped out one of our packages. I used @ampcode for the migration and Lumen to check the diff. It was a super easy fix since I mostly just had to swap types and update some fields. The exact kind of task for an LLM

Emil Privér
@priver.dev

> It is very important the world adopts these tools quickly to make software more secure. Don't know if LLMs will make anything more secure tbh but it will for sure open more jobs because people need to fix security issues by LLMs.

Emil Privér
@priver.dev

I've seen too many logical security issues written by Opus & Codex. Using these models to prevent security issues feels like asking to get hacked.

Emil Privér
@priver.dev

Gotta love the DX (Cargo, Clippy, etc.) and the error handling in Rust. Even in simple cases, while TypeScript might throw 20 lines of noise at you, Rust shows you the actual error, its location, and most of the times even tells you how to fix it.

Emil Privér
@priver.dev

> We will ban you and ridicule you in public if you waste our time on crap reports cURL vs LLM slop prs and security reports Hats off for cURL I hope that we soon will have better frameworks to help with open-source against this LLM slop

Emil Privér
@priver.dev

Got this 1 tiny task to add a new field in 1 of the APIs Used @ampcode.bsky.social to build it Used Lumen to verify the changes This is one of the flows I like with using LLM. It worked great because the task is super tiny

Emil Privér
@priver.dev

I've started to use @use_bruno more and more. I really like that you can store the API schema as a folder within the project and it's really good as well I am not using it for querying the prod apis but for local dev is it really nice

Emil Privér
@priver.dev

The Anthropic CEO said the exact same thing 1 year ago Also, why trust a super rich CEO who in a media interview, makes unverified claims which furthers his own business Let us all trust him