Hacker Newsnew | past | comments | ask | show | jobs | submit | jeffisabelle's commentslogin

> web search sucks because it has to be profitable, and the profitability comes from making it suck. That's not true today for AI tools, but it will be in a few years.

Many people pay to use _AI tools_, that already brings in revenue. I had chatgpt plus since very early days, which was 20$/month, I don't have it at the moment because my company provides pro plan to me (and every other engineer) which is probably around 200$/month/user.

Of course, serving a single inference on LLM's probably costs a lot more than a serving a single search on google, but they've already got a solid business model and they won't need intrusive adds _in a few years_ (if at all)


I'm skeptical that a significant number of people will be willing to pay cash money for these products when web search still exists for free, but we'll see!


I started my career as a backend developer and did a fair bit of frontend development as well. However, I'm solely doing infrastructure engineering for the last 6-7 years.

I think you are kind of mistaken here, as a _devops_ I never enforced our development teams to use docker, or another specific tooling. The thing is, software engineering become a whole lot difficult and complicated over the years. When I was first learning web-development 15 years ago, notepad was the only thing you needed to do web-development, now look what you need to have to have a simple CRUD app running locally. Setting up local environments become so much harder, so people found the answer within the containers as you set it up once and you can share it within the team easily. Please do not blame _devops_ for that.

You don't have to run your app via multiple docker images locally, you can still configure everything to work natively. It's just way more difficult because of the dependencies of modern technologies.


According to the article [1] - App store made 11.5 Billion $ revenue in 2017. That's like 30 million dollars per day. I'm not even going to argue that you need such money to maintain a static binary distribution platform.

[1] https://www.forbes.com/sites/chuckjones/2018/01/06/apples-ap...


Revenue is not profit. I am not saying I believe them but it was in their earnings report. I think maybe it doesn't turn profit the same way that movies lose money.


I still can't believe more people complain about this being publicly disclosed than this being possible in the first place. No one is obligated to know the procedures on InfoSec 0-days and follow those steps.


Most likely another from of bikeshedding; people don't have real input on the main matter, so they comment on circumstantial matters just so they can throw in their 2c


Or they have real circumstantial comments to make.. it doesn’t have to be that they just want to talk


I wouldn't bash the guy. Someone already let him know about his technical faux pas in a professional manner on his twitter.

My guess is he found this vulnerability on accident, freaked out, and tweeted about it. Probably has limited infosec experience.


Or he cares more about doing the right thing than about following best practices designed to protect the guilty under the guise of helping users.


Idk why u say “designed to protect the guilty under the guise of protecting the innocent”.. it clearly does both. It does protect the innocent. That is a fact! It also does protect the guilty! Both are true. It makes it harder to have a strong view when you must acknowledge both facts I suppose


I don't know, he's tweeted more about the topic: https://twitter.com/lemiorhan/status/935619881143324673

So he's either not reading his replies or he's being deliberately irresponsible. My guess, based on his profile and online behavior, is that he's trying to ride the coattails of getting some exposure online.


Definitely. How many people outside the infosec industry know that responsible disclosure channels exist?


> I still can't believe more people complain about this being publicly disclosed than this being possible in the first place.

I think the problem is due to the fact that they are fans. In this case, it's Apple, but there's no reason it couldn't be Linux or Go or whatever. Regardless, any bad news about their hero is irresponsible to disseminate. We see this same phenomenon in politics, in sports and elsewhere — I daresay it's regrettable human nature.


I've not commented either way on the subject in this thread, but personally I would much rather have read this as a writeup 2 or 3 months from now after the discoverer had responsibly disclosed the vulnerability and Apple had a chance to patch it.

On the other hand, I'm glad that I have this information so I know not to install High Sierra on my work iMac (sitting on a desk in a WeWork behind a door whose lock would be very easy to force open) until this is fixed.

[Edit: I now see that there's a simple workaround (change the root password and keep root enabled), so I'm all for "irresponsible disclosure" in this case]


As an addendum apple released a fix for this less than 48 hours after it was reported (I think I've got the timeframe right), so there's something to be said for irresponsibly disclosing to light a fire under the ass of whomever is responsible for fixing a vulnerability.


> I think the problem is due to the fact that they are fans.

I think this is an unfair characterization. Sure, it's hard to hear that their "hero is irresponsible", but the real reason is that this kind of behavior puts everyone at risk while Apple tries to fix it.


That may be true for cisco and juniper where upgrades must be carefully rolled out across globally distributed critical infrastructure, but this is APPLE. They need no such help. They can push to everyone, now, and it will be fine. Forcing their hand is safer than trying to hide a flaw a 3 year old could find on accident.


> They can push to everyone, now, and it will be fine.

I'm pretty sure any fix has to go through Build and Integration before being rolled out. Then you need to have people actually install the update…


Oh my goodness I totally forgot they had to build it first! /s


They were already at risk. Now they can mitigate.


*Significantly more risk


Except when people politely explain to the original poster not to do what he did. His tweet and a follow-up tweet still exist on the topic. He could easily delete them.

If you read through the comments, you'll see people are arguing that Apple is to blame here. It doesn't require much discourse to recognize that's the case and hence why you don't see more people complaining about this being possible in the first place.


> I’ve always wondered why some people seem so married to a single editor.

I'm thinking exactly opposite. I wonder why people change their IDE's/Editors so much between Eclipse/Visual Studio/IntelliJ or between notepad++/sublime-text/atom/VScode/coda/text-mate etc.

What's wrong with using vim or emacs and being happy rest of your career? It's funny so many of my colleagues kid me by saying "emacs is a great operating system but it lacks a good editor" without ever trying it while I'm using emacs without a problem for the last 6-7 years and people around me changing their editors every year to "popular editor of the year" for better features/performance.


> It's funny so many of my colleagues kid me by saying "emacs is a great operating system but it lacks a good editor" without ever trying it while I'm using emacs without a problem for the last 6-7 years and people around me changing their editors every year

I thought only the vim users used that refrain. vim users are also unlikely to switch to a different editor.


Vim users used to, but now that emacs has a decent text editor[0], they can't.

[0]: https://github.com/emacs-evil/evil



> What's wrong with using vim or emacs and being happy rest of your career?

I agree with your basic notion -- it takes quite some time to be really fluent with serious IDEs and editors, so changing is inefficient.

But just one editor/IDE doesn't work for everyone. If you favour a GUI-only editor like Sublime Text, for example, then you probably need to also know a console-based one. Or if like me you prefer a heavy IDE for most project work, you probably need to be fluent with a lightweight editor.

For me IntelliJ IDEA + emacs covers all the bases. I'll look briefly at new tools to keep familiar with the landscape, but I'd rather invest the time it would take to learn them into something which will improve my skills in something more useful to the craft than just more tools that do essentially the same things.


I used EditPlus for over 8 years until SublimeText appeared, and have been using it for the last five years.

I think your point applies to current users of Atom/VSCode, but for me Sublime has stood the test of time, again and again.


I made something for myself, which parses provided subreddits, and sends the top voted links as a list to my e-mail daily. Few of my friends requested to receive same e-mails with different subreddits, and I have turned it into a product.

I have never publicly shared the product anywhere and lost my enthusiasm to develop it further, but most of my friends are happy that it keeps them up-to-date on the topics they actually care. I humbly welcome you to try if you generally enjoy reddit content.

https://reddit.cool/


Exactly what I've been looking for. Much love.


> We've already seen that people who use this new feature tend to Retweet and Tweet more, creating more live commentary and conversations

I really don't like this trend. The same thing happened with facebook with notifications. They looked at the data and figured that when people have notifications they tend to open the app more. Then started to send tens of unwanted notifications every day. (Which comes from eg. groups that I never joined, or games etc.) Result: hard blocking notifications from the mobile OS level.

I hope twitter doesn't follow the same path. (Actually they already do this at some level with 'your friend x & y liked tweet z' notifications)

These retention things just kill the apps that I already love. But since the trend is this way, it is probably working out for majority of people and not for me.


> Result: hard blocking notifications from the mobile OS level.

For me the result was uninstalling Facebook. The app was showing daily notifications for people it thinks I could follow, with no options to disable the feature.

This was fixed at some point, so I guess the user feedback got through.


Ditto. The minute the official Twitter client started sending irrelevant notifications I uninstalled and switched Twitter clients.

Interestingly enough one of their 5 things this quarter is going to be "improved developer support". I wonder how they'll balance this with third-party Twitter clients that intentionally filter out official marketing efforts.


I've learned about buffer while looking for job. (probably from who is hiring threads) Since then, I've been reading their medium posts.[1] Their values, hiring strategy, salary transparency and managing remote teams seems perfect to me and I really liked reading their posts. (Highly recommended)

[1] https://medium.com/buffer-posts


twitter's IP block also blocked, so other dns servers dont work either. VPNs are quite OK now.


Good news is you can change hosts file


you were also looking for interns last month, does that changed?


Nope - sorry, I asked and it looks like we're at max capacity internwise right now. Feel free to apply later on when you feel like you're ready for fulltime work! :)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: