Live data from Hacker News

What Happened to HackerOne?

blog.teknogeek.io

171–180 of 209 posts

Re: What Happened to HackerOne?

#171

Earlier quoted context omitted.

Bangladesh bank got its reversed when hacked by NK. Does that look b2c?

The method of “reversal” was sending the money back, because it was a transfer between banks. The actual method of transfer or underlying currency is of no import in such circumstance.

The entire point is that the bank can send the money back and transaction is always between banks. Whereas in cryptocurrency world transaction is direct. Like with cash, except you can accidentally a million dollars

Re: What Happened to HackerOne?

#172
post #28

> To the companies: You don’t need HackerOne anymore. The tokens to build your own in-house platform cost less than single year of HackerOne. You know, the biggest thing that HackerOne delivers is a universal payments system that requires absolutely no efforts from companies. Have you tried to manually pay hackers from around the world? It is a laborious process involving trying to find what providers are compatible…

This (money transfer) is one thing Pix would solve trivially.

...or UPI (India), wechat pay/alipay (China), SEPA (EU). The problem is that none of these systems are actually global.

Re: What Happened to HackerOne?

#173

I have 7.00 signal on HackerOne (the highest it can be), I've never filed a report that was closed as not applicable or spam, and I consistently report highs and critical severity issues which make up just over 70% of my reports. Yet I still find it next to impossible to get issues resolved. I'm a software engineer / tech bro by trade, and hacking and CTFs have always been a part time hobby for me, and thus I'm not p…

They absolutely are and they are also sitting on a goldmine of data they are using to enable them to do just that. If you doubt this just ask them for a demo of their agentic capabilities and start talking to them about roadmap, they are full steam ahead with fucking over the people that made them what they are.

Re: What Happened to HackerOne?

#174
post #163

Earlier quoted context omitted.

This is a great example of a general trend, which is why I don't think SaaS is going anywhere. The bar may be raised, but it's not going anywhere. HackerOne and SaaS in general makes problems go away for money. If you use your own tokens and solve it yourself, it's still your problem. The deficiencies are your problem. The support and ongoing maintenance are your problem. Discovering some country split in two and now…

> If you use your own tokens and solve it yourself, it's still your problem. The flip side, of course, is that I can fix my problem - which may be unique and not something a large SaaS will ever do - on my timeline.

That's not a new flip side, though. That's always been with us. SaaS will be more able to take on more requirements then they used to be but no one SaaS will ever be able to take on everything. And the decision between "roll our own and own it forever versus buy this one service that almost does everything we need, but not quite, but maybe it's worth living with it because it's still better than rolling it ourselves" isn't going anywhere either.

I would not want to be a SaaS that offers some really simple service that can be replicated in a heartbeat, though. Something like "how do I pay people all over the world" is already very complicated, and over the next decades as governments start writing laws with the understanding that AIs can implement them in code no matter how complicated they are, it's likely these problems will become even more complicated and even more important to just buy a service that can deal with them. (I'm not celebrating that, merely predicting it.) But I sure wouldn't want to be selling some super simple scheduled reminder service or something else really small.

In the worst case, envision a world where home owner associations or townships or whatever other local governmental division of just perhaps a few hundred people start levying sales taxes, with their own complicated exclusions and offsets and conditions, because LLMs make it possible to handle the code for all of the literally hundreds of thousands or millions of such jurisdictions. Even if you can throw tokens at that problem to solve it yourself, you probably don't want to. And again... I'm not celebrating that. More a world-weary bowing to the inevitable despite it being an obviously bad idea.

Re: What Happened to HackerOne?

#175
post #174

Earlier quoted context omitted.

> If you use your own tokens and solve it yourself, it's still your problem. The flip side, of course, is that I can fix my problem - which may be unique and not something a large SaaS will ever do - on my timeline.

That's not a new flip side, though. That's always been with us. SaaS will be more able to take on more requirements then they used to be but no one SaaS will ever be able to take on everything. And the decision between "roll our own and own it forever versus buy this one service that almost does everything we need, but not quite, but maybe it's worth living with it because it's still better than rolling it ourselves"…

> That's always been with us.

But the ability to meaningfully make a personal implementation has changed.

Re: What Happened to HackerOne?

#177
post #172

Earlier quoted context omitted.

This (money transfer) is one thing Pix would solve trivially.

...or UPI (India), wechat pay/alipay (China), SEPA (EU). The problem is that none of these systems are actually global.

Hence "would solve" and not "solves"

Re: What Happened to HackerOne?

#180

Earlier quoted context omitted.

Any universal system would. The problem is there isnt a universal system.

That's untrue because it assumes all systems are interchangeable just because they are centralized and global, but intention matters and how you operate them creates hidden incentives that can alter how these systems evolve over time. Pix in Brazil, unlike other solutions, is entirely state-run and shouldn't suffer from investor pressure. It can still potentially suffer from service quality degradation and lack of tr…

Yeah, but it only works in Brazil. There's no political will for the US to adopt a Brazilian payment system, and plenty of political will for that to not happen. The same is true in every country. Europe has the SEPA system (often incorrectly called the IBAN system), but you can't use SEPA to transfer to a US account. When the Ukraine war broke out and Ukraine sought donations, they were asking people to donate to a Deutsche Bank account with SEPA, or a JPMorgan Chase account with ACH, or an Australian National Bank account with whatever system they use in Australia.
Post reply on HN