Hacker Newsnew | past | comments | ask | show | jobs | submit | brunes's commentslogin

The answer to his question is right here.


It's frustrating to read articles like this written by people who obviously don't travel much and therefore have no clue what they are talking about.

- Yes there are way fewer overhead bins than there are possible space for. This is a very well known thing to anyone who has ever boarded a plane.

- Not having carry on bags is an unworkable solution to anyone who ever has to connect anywhere, or values their time in any way. - Checking bags adds a minimum of 20 minutes on either side of the flight in the best of cases, and when you have a delay and rebooking, not having checked bags will very often be the difference between you making the flight on the same day at all or not at all. - The real problem, as any frequent flyer knows, is that airlines don't enforce their sizing guidelines. If they actually did, then a solid 30% of carry on bags would be refused at the gate because they are too large to fit properly in the bin and take up more space than should be allowed.


You are misreading and misunderstanding this whole paragraph.

The purpose of 10.4 is to allow zoom to send your call to other services, like say YouTube for live streaming, or any of the dozens of other services that integrate with their APIs. Without 10.4, three quarters or more of Zooms use cases would no longer work.


It's not a privacy violation because Service Generated Data is not PII.

All of this is a lot of BS about nothing.


It is depressing how few people seem to be able to read or understand basic legal text nowadays.

Service Generated Data is *very clearly defined* to not include user generated data. Service Genrated Data would include data like APM, error logs, aggregate stats around how many customers use features. None of this data us PII.

It is depressing how many CISOs and others reposted this drivel.


Because Apple makes a shitton of money selling ads on iOS using its Ad ID.

Wait, did you seriously buy into their marketing BS about how they care about your privacy? Apple cares about making money, and that's it. They hamstrung Google and Meta on iOS simply so they would have a monopoly on advertising trackers on the platform.


How does Apple make money with this exactly?


If Apple can convince your cohort, herein referred to as "you" for simplicity, that everyone else is toxic, then you'll only use Apple products. If you only use Apple products, Apple has higher quality user data about you than their direct and indirect competitors, herein referred to as "anyone else" or "others". This means Apple is uniquely positioned to sell more effectively targeted advertising to you than anyone else. This is especially true when Apple takes steps to improve privacy and security for you by making it more difficult for others to track you.

Apple said they cared about your privacy [from others, not from them]. To be clear, I'm trying to be objective. They're not selling individual personal data or recklessly leaking your data. They have promised to keep your data secure, and I think they've often lived up to that promise, especially compared to others (full disclosure: I own a multitude of Apple devices, but I'm not a fanatic).

However, the bottom line here is that using Apple products means you're putting a kind of centralized trust in Apple, and Apple never said they wouldn't take advantage of that trust where possible.




Apple is selling ads on its iAd platform, developers can opt to display them in apps to receive a percentage.


that used to be the case, but they discontinued iAd [1] about 7 years ago

[1]: https://en.wikipedia.org/wiki/IAd


I'm old enough now to have both been:

- the person rushing to comment about Apple because there's no way Apple would ever do that

- the person complaining about clearly rushed and motivated comments denying something obvious about Apple

Read up here: https://www.apple.com/legal/privacy/data/en/apple-advertisin...


i'm not denying anything. the comment i replied to stated that developers can use iAd to "display [ads] in apps to receive a percentage", which i pointed out is no longer the case.

in no way does my comment deny that there's other ads sold by apple (there are, obviously, e.g. app store search ads), but that's a completely separate issue from the specific iAd program the parent comment was talking about.


Ok, thank you


The same way anyone makes with ads, you charge people to show them to others. Apple's ads division alone has revenue in the same ballpark as Netflix. And now that they're cracking down so that first party is the only way to go, they will do really well.


They collect your data and sell ads to advertisers based on segments you fall into


What data do they collect? Where/how do they collect it? Are they mining my camera roll and notes or just my browser history? What about my text messages?


You don’t remember being asked to opt in?

Oh wait that’s because they created that rule for others

Go Settings -> Privacy -> Ads

>>You may still be served ads based on the criteria listed below. Your personal data is not provided to third parties.

Contextual Information On the App Store, relevant ads may be selected using your search query, information about the page you're viewing, or the app you're downloading. On Apple News and Stocks, the type of story you read may be used to select relevant ads. In addition, information about your device’s keyboard language settings, device type, OS version, mobile carrier, and connection type may be used to serve ads to you. If Location Services is enabled and you’ve granted permission to App Store, Apple News, or the Apple TV app to access your location, your location may be used to serve you geographically relevant ads in each respective app.


So basically absolutely nothing..


?????? The stories you read, the words you type


Where are the ads on iOS?


Buy more icloud! Buy apple music! Buy appletv! Buy apps! Buy stuff in apps! Buy apple home! Buy apple clock! Buy apple airpods!


Where are you seeing this? I am a heavy apple user and dont see this. I do use those services, so maybe that stops adverts?


I dont really care except about the icloud popup on my mac which is annoying. But notifications on the phone mostly for apple music sometimes appletv, preinstalled app for the watch and for apple home products, some guide popped up for apple home once, theres a space in the pull down menu for apple home I probably removed it, mail campaigns for new products i probably unsubscribed. Obviously a lot of copywriting in the app store. Anyway I already have the ecosystem so to speak so its not expensive relatively to just buy icloud but I have no need for it. Music is worse than spotify. Appletv I watched only for "for all of mankind".


When my phone’s eligibility for renewing applecare approached I got a red bubble on my setting app and there was no way to say “yeah, I got it but stop telling me” except by waiting for the eligibility to run out.


i've only ever seen ads for apple music and the new devices. everything else is an exaggeration imo


Nearly every company does that. There’s nothing particularly nefarious about Apple here.

This may surprise you, but Microsoft, Google, Samsung, Amazon, and nearly every other major tech company use similar tactics to try to get you to use their other products.


Im not surprised I just answered in hyperbole because to not notice or pay attention to any ad surfaces or product placement in iOS, presumed if you use it often, I envy that level of mind filtering


I have an ipad, an iphone and a macbook pro, and the only time i get asked to “buy more icloud” is when i’m running low. I got an add to try out apple music once when i got a device and maybe whenever i get a device i get ads for subscriptions, once. You’re exaggerating


Yes I'm exaggerating I'm glad it was noticed I should make my next comment on this site sagely and confucian again rather than attempt hyperbole humor against the largest company in the world on a venture capitalist tech forum


I don’t know of any mainstream computer platforms with any less of that sort of advertising. No, Linux desktops and de-Googled Android phones are not mainstream. I don’t understand why Apple is being singled out here.


> Buy more icloud!

Except you can’t get more than 2tb which is a joke these days, esp when you share with 5 family members.


If you subscribe to Apple One you can add 2TB of iCloud+ to that for a total of 4TB. I agree that there should be a better way to do this though.

> https://support.apple.com/en-us/HT211784


Apple One Premier not available in my family country. Switching to my actual country disables TV/Music subscription sharing...


Besides all the Apple ads, Apple News is one such place where 3rd party ads exist prominently.


Apple does care about your privacy and has repeatedly proven so. You have to give credit where it’s due.


It certainly is good for business to appear to care about it


This is cynical to the point of uselessness. This is true of anything any business does. Customers still benefit even if a company is "only doing it for the money", or whatever.


> This is true of anything any business does.

Exactly, now you get it. It's especially true for FANG, which literally exists only for the purpose of squeezing as much money as possible out of us.

I'll give you an excellent data point on Google as an example. They don't care about click-fraud, at all, because it makes them money. In fact, it makes them so much money, I don't think realistically they could exist without it. When I was a teenager I ran a network of websites, one of which three of my web developer friends actually ran ads on frequently for their websites. We got attacked by a massive click-fraud botting attack (shady competitor wanted to get us kicked off of AdSense). Anyway, $843 of my earnings that month got flagged as click-fraud. $55 of that was actually ads that were run by my friends. While Google happily ripped that money away from me, my three friends never got anything refunded nor any indication that their ad buys were subject to click fraud.

FANG is a bunch of criminals.


Similar to openai and ai regulation. There’s good business in knocking out your competition by coincidentally picking up the right cause that does so.


They committed three person-years, not three years. This project would need dozens of person-years over a three year period.

Also a comment on Github is not a binding support contract. Meta executives could deprioritize this project at any time... hell the person making the commitment could already be laid off, we have no clue. As someone who worked in big tech for a long time, trust me - it needs to be in writing with an exec signature.


Name a single other major social network around today that has an API and allows third-party clients. The only one I can think of is Reddit - and even in that case, there are numerous features already being locked out of third-party clients. They are on the same path as Twitter, and at some point they will realize that maintaining a gigantic cost center that provides no revenue (since they don't control ads) and does not allow them to rapidly innovate or build a brand (since they don't control the app) does not make a lot of business sense.

The death of the Twitter API is long, long overdue. Bad for us consumers? Sure. But these companies are not charities, they exist to make money.


> maintaining a gigantic cost center that provides no revenue > these companies are not charities, they exist to make money.

From the article: > Twitter already had a $400m paid API business

If this is true, the API would be generating almost 10% of Twitter's revenue. This is a serious business unit for Twitter.


The commercial API has nothing at all to do with the third-party client API.


What makes you think this post is about the third party client API? The commercial API tiers have also been nerfed [1] to a level where you need Enterprise to do almost anything useful.

[1] https://twitter.com/TwitterDev/status/1641222782594990080


Sounds like they're focusing on the profitable part.


The obvious problem is that there's nothing between $100/month and $42,000/month.

That's a huge chasm to cross. A moat, if you will.

Anyone who starts out small and grows organically is just going to get choked out, like planting an acorn in a bucket. So why even try?

Maybe that's the intent?

Sometimes I really wonder about this new CEO guy.


I think the enterprise plan is probably intended for established corporations that already pay out hundreds of thousands per month. As developers we're looking at it from the perspective of like "I want to build X on top of the twitter platform" but from their perspective it's more like "I want to sell access to my database to Pepsi and ESPN."


makes you wonder did the commenter read the article at all?


Wouldn't twitter not have many of its current features and conventions if it wasn't for third parties?

https://techcrunch.com/2023/01/24/how-the-recently-shuttered...

Why couldn't they just add ads within the API instead of alienating the community which is responsible for its success?

Aka, name another major social network around today which has been as influenced by third party clients as Twitter has


> Why couldn't they just add ads within the API

Because the first thing every 3rd party client will do is ignore the ads and not show them to users.


And 2 seconds after that, it'll be in the ToS that you can't do that. It's not like it will be hard for Twitter to check.


> It's not like it will be hard for Twitter to check.

Are you sure? That would require a centralized review and distribution process for all 3rd party clients, like the App Store for Twitter. It's not outside the realm of possibility, but there's very little incentive for them.


It barely needs to be more than a line in the ToS for the API. I'm sure Twitter already had a list of terms, and a way to ban people who misbehave. This is one more way to misbehave and get banned. Going right to an App Store would be insanity.


Showing ads isn’t enough. You need to count as impressions to bill advertisers and convince them to trust the impression data coming from third party clients.


They could just tell Apple & Google that your app doesn’t conform to their TOS, and poof, it’s gone. Especially PlayStore is really careful around 3rd party content.


> add ads within the API

Realistically, how much of the "content" is already ads? Ie corporate announcements, brand building, or political astroturfing, etc. It's almost like twitter is double dipping.


Without all the integrated tracking the ads would be basically worthless.


The public apis are what you use to get other people to build stuff that you dont want to build and increase the usage of your application by creating an ecosystem around it. Through the api, you draw in users, partners, entire use cases that are not provided for by your app directly and your app becomes something that is much bigger than what could it have been without an api.

The problem with Twitter was that it had no legitimate monetization for the app itself. It was a zero-interest, investor/vc money fueled growth machine. And even for that purpose, it used that api to great extent to bring a lot of users into the platform and integrate a vast swath of internet to Twitter - from Twitter logins to automatic embeds to entire 3rd party applications that served different subsets of users.

But now that the investors who dumped cash on something that does not have a level of monetization and revenue compared to its over-inflated valuation want something for their money, suddenly growth is not that important anymore and problems ensue.

Even in this particular situation, its a dumb idea to restrict or close down an api. If you do that, another service that doesnt do it will get an ecosystem built around it and it will eventually eat your lunch. A fixed set of people working on a singular app in a company can never produce as much features as an entire ecosystem with its large community can produce through an api. The Open Source movement and its successes follow the same pattern: Centralized, large corporations cannot compete with the development speed and breadth of communities of millions of people, even if those corporations employ tens of thousands of engineers.


The open API access is a very large differentiator for Twitter and Reddit because of the presence of novelty accounts/bots, automatic moderation tools etc. Twitter can follow along with Facebook wrt APIs, but then there's less of a reason to use Twitter instead of Facebook.


According to the post, the Twitter API was already generating $400M/year in revenue. Not sure what it cost, but that doesn't sound like a charity to me.


That is the commercial API. People keep treating these the same, when they have nothing to do with eachother.


You need both. Without the free API you don’t have a funnel of new customers who can grow into the enterprise tiers.

They have a hell of a lot to do with each other beyond that too.

(Led the search API team at Twitter and worked on both API platforms)


> But these companies are not charities, they exist to make money.

for sure. and, as we all know, society only exists so that companies can make money. where would we be without bezos, musk, gates, et al.


Social media giant Pinboard. People are warned not to compete with Pinboard but they still make 3rd party clients which seem to work.

On your point: In my opinion 3rd party clients expand services, are a new place of innovation and a place accompanying different usage patterns. The trick is not to kill them; the trick is, to make it work. I would have accepted a Tweetbot with ads. But without Tweetbot I mostly stopped visiting Twitter.


Yes, we're at the stage of enshittification where twitter turns ejects anything inessential, and the only value is for the investor.


I don't know if Flickr counts any more but I think they were up there at least in the past.


The API is not just about 3rd party clients. The API is about integrating all kinds of stuff from 3rd parties, and it's absolutely required if Elon Musk wants to make Twitter an "everything app" like WeChat.


Twitter I used for several years and may go back now that someone with common sense is at the helm but only ever heard of WeChat and what I heard was mostly negative.


> only ever heard of WeChat and what I heard was mostly negative

WeChat is pretty lit and contains a whole internet, sort of akin to how Facebook Pages might contain the only information or updates about many businesses and municipalities.

Yes, a state agency will censor some things, just like a corporation will censor some things. Yes, they collect your data and share it with third parties including the government, just like a series of corporation do on every other network. You're not Chinese, you're not going to disappear, its rare they experience anything more than a message disappearing too, its the same user experience. I don't find the reality to be different enough to warrant the perception of reality.


Discord currently provides to the public almost-stable and maintained parts of its API, it allows the network to gain some attractions


He said an API that "allows third-party clients". Discord is perhaps the least kind to third-party clients of any major social media right now.


> Reddit - and even in that case, there are numerous features already being locked out of third-party clients

I've used a third-party client for years and I don't miss any features. Maybe I don't know what I'm missing but, like, I can read, comment, and post and that's enough for me.


The ones I use today:

- Facebook

- Instagram (finally opened in the last two years)

- Youtube

- Linkedin

Perhaps I'm not getting your point, but... most of the major social platforms in the US are still open, except for Twitter.


Telegram


Users → revenue

Working API → users

Therefor:

Working API → revenue


How do you position this against AWS's own Security Lake announced at re:Invent in November (https://aws.amazon.com/security-lake/) ?

Your architecture diagram looks like a carbon copy of theirs.


We launched before Amazon Security Lake :)

Amazon Security Lake's main value prop is that it is a single place where AWS / partner security logs can be stored and sent to downstream vendors. As such, Amazon only writes OCSF normalized logs to the parquet-based data lake for it's own data in a fully managed way (VPC flow logs, Cloudtrail, etc.) and leaves it to the customers to handle the rest.

For partner sources, the integration approach has been to tell customers to set up infrastructure themselves to accomplish OCSF normalization, parquet conversion, etc. For example, here is okta's guide using Firehose and Lambda, https://www.okta.com/blog/2022/11/an-automated-approach-to-c...

The Amazon Security Lake offering is built on top of Lake Formation, which itself is an abstraction around services such as Glue, Athena, and S3. Security Lake is built using the legacy Hive style approach and does not use Athena Iceberg. There is a per-data cost associated with the service, in addition to the costs incurred by other services for your data lake. Looks like the primary use case of the service is being able to store first-party AWS logs across all your accounts in a data lake and being able to route them to analytical partners (SIEM) without much effort. It does not seem very useful for an organization that is looking to build its own security data lake with more advanced features, as you will still have to do all the work yourself.

Matano, has a broader goal to help orgs in every step of transforming, normalizing, enriching and storing all of their security logs into a structured data lake, as well as giving users a platform to build detection-as-code using Python & SQL for correlation on top of it (SIEM augmentation/alternative). All processing and data lake management (conversion to parquet, data compaction, table management) is fully automated by Matano, and users do not need to write any custom code to onboard data sources.

Matano can ingest data from Cloud, Endpoint, SaaS, and practically any custom source using the in-built Log transformation pipeline (think serverless Logstash). We are built around the Elastic Common Schema, and use Apache Iceberg (ACID support, recommended for Athena V2+). Matano's data lake is also vendor neutral and can be queried by any Iceberg-compatible engine without having to copy any data around (Snowflake, Spark, etc.).


You're ignoring something critical here.

The whole reason these address validation and KYC measures exist is to protect against fraud. They aren't done "just for fun".

Please explain how bitcoin solves for that problem. Hint: it doesn't.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: