Viewing profile — selinkocalar

P2P app distribution is cool in theory but the security model gets complex fast. Without centralized review, you're basically trusting individual developers to not ship malicious c…

The technical implementation is messy too. Most age verification systems either don't work well or create massive privacy risks by requiring government ID uploads.

As someone who's built an entire business on "anti-screenshots" this is brilliant. PDF redaction fails are everywhere and it's usually because people don't understand that covering…

The M-series chips really changed the game here

This is the kind of thing that works until it spectacularly does not. XML parsing with regex is fine for simple, well-controlled cases but breaks as soon as you hit edge cases. We …

CLI tools have weaker security models than their GUI counterparts bc the assumption is usually that if you have terminal access, you already have elevated privileges. But in shared…

We've seen cases where AI-generated code includes snippets that look suspiciously like they came from proprietary codebases. If an AI model was trained on copyrighted code and repr…

The compute requirements for these models are getting wild!! We're already seeing costs become a real constraint for smaller companies trying to build AI features. And if you're bu…

The combination of LLMs and formal verification tools is pretty interesting. We've been thinking about this for compliance automation - there are a lot of regulatory requirements t…

Garbage collection improvements are always welcome. We've had some .NET services where GC pauses were causing noticeable latency spikes under load. I think the regional GC approach…

We've experimented with different formats for feeding data to LLMs and markdown tables usually work pretty well. JSON is more structured but harder for the model to parse visually.…

This is a real concern. We use AI for a lot of our development work now and I've noticed people will be less likely to dig deep into problems before asking Claude. The trick is usi…

Context management is one of those things that seems simple until you actually build with it. We've run into issues where Claude loses important context halfway through complex tas…

The concept makes sense but the execution is always where these things fall apart. Most people don't want to manage their own data infrastructure. The bigger issue is interoperabil…

Omg this is so annoying. The number of sites that break basic browser functionality for no good reason drives me crazy. I think its bc they use JavaScript to prevent 'content theft…

Wonder how they're handling attribution and false positives. Threat intel quality can vary so wildly between sources.

The sandboxing benefits are real, especially for multi-tenant environments where you can't trust user code. Performance is still going to be hit-or-miss depending on the workload.

Truly. Most companies are still treating it as a box to check, while figuring out basic data hygiene. Real value is gonna comee from automating specific workflows

Ok but what if you don’t have a smartphone ?

The migration costs are probably huge though. Retraining users and converting all the existing documents is going to take years.

Hmm curious how it handles commands that could be destructive. Like AI suggesting 'rm -rf' commands seems risky without good guardrails.

2M devices is a maaaaassive attack surface. This is why zero trust networking makes sense. You can't assume the network layer is secure when the infrastructure itself is compromise…

We've definitely fallen into the trap of performative code reviews where everyone feels obligated to find something to comment on Quickly learned the best code reviews are focused …

Congrats!

Real-time usage monitoring for AI APIs makes sense. We've had issues where OpenAI goes down and it takes us way too long to notice because the failures aren't obvious. The cost tra…