Earlier quoted context omitted.
What is the corrupting force?
Entropy. Game theory.
[dead]
What Happened to HackerOne?
191–200 of 209 posts
Re: What Happened to HackerOne?
#192Earlier quoted context omitted.
Unfortunately I think you are right, this is kinda Capitalist Realism but applied for imperialism: it's easier to imagine the end of the world than to imagine that the US (or any regional power for that matter) to cooperate with their neighbors. I think this applies however only to the US. It's possible that Europe, India, Brazil and other powers to form a infrastructure chain around US to make financial cooperation…
It's not even about capitalism. You're asking Bitcoin, Ethereum and Monero to cooperate. What do the technical details of that cooperation actually look like?
I disagree, they don't cooperate just because they operate immersed in competition. Take out competition for instance by state sponsored cooperation treaties and see the technical limitations dissolve by creating the right incentives.
Re: What Happened to HackerOne?
#193I reported some exploits on hackerone. Most got dismissed. One of them, a remotely triggerable DoS vector got downgraded in severity. I got a token payment from the company, and 7 years later, it is still not marked as resolved. I doubt my situation is unique.
I reported a security bug, it was all processed very quickly and I got paid. I doubt my situation is unique. I think it would be the individual companies slowing things down, not the platform.
You are right, but it was a billion+ revenue company that everyone here knows about and probably interacts with every day. I've also heard from others than other companies act the same way.
And they have hackerone employees pre-screen submissions and I had to tell them multiple times why my submission was valid.
Re: What Happened to HackerOne?
#194> To the companies: You don’t need HackerOne anymore. The tokens to build your own in-house platform cost less than single year of HackerOne. You know, the biggest thing that HackerOne delivers is a universal payments system that requires absolutely no efforts from companies. Have you tried to manually pay hackers from around the world? It is a laborious process involving trying to find what providers are compatible…
This is a great example of a general trend, which is why I don't think SaaS is going anywhere. The bar may be raised, but it's not going anywhere. HackerOne and SaaS in general makes problems go away for money. If you use your own tokens and solve it yourself, it's still your problem. The deficiencies are your problem. The support and ongoing maintenance are your problem. Discovering some country split in two and now…
> This is a great example of a general trend, which is why I don't think SaaS is going anywhere.
One learning I can share from the indie game industry is copycats become dime a dozen when a particular game becomes successful. With execution becoming nearly cheap, tasty products and their behaviour will be copied and competition will rise substantially.
Re: What Happened to HackerOne?
#195Earlier quoted context omitted.
This is a great example of a general trend, which is why I don't think SaaS is going anywhere. The bar may be raised, but it's not going anywhere. HackerOne and SaaS in general makes problems go away for money. If you use your own tokens and solve it yourself, it's still your problem. The deficiencies are your problem. The support and ongoing maintenance are your problem. Discovering some country split in two and now…
> This is a great example of a general trend, which is why I don't think SaaS is going anywhere. One learning I can share from the indie game industry is copycats become dime a dozen when a particular game becomes successful. With execution becoming nearly cheap, tasty products and their behaviour will be copied and competition will rise substantially.
Are there many copycats that are meaningfully impacting the revenue of games?
You can argue that games are derivative, but I think most revenue still goes to premier titles, not knock offs.
Re: What Happened to HackerOne?
#196Earlier quoted context omitted.
> If you use your own tokens and solve it yourself, it's still your problem. The flip side, of course, is that I can fix my problem - which may be unique and not something a large SaaS will ever do - on my timeline.
That's not a new flip side, though. That's always been with us. SaaS will be more able to take on more requirements then they used to be but no one SaaS will ever be able to take on everything. And the decision between "roll our own and own it forever versus buy this one service that almost does everything we need, but not quite, but maybe it's worth living with it because it's still better than rolling it ourselves"…
I think there is a chance that this changes.
I think there might be space for "source available" enterprise software where you can use an LLM to modify it in a way that is cheap to continue reintegrating in new releases.
It may also be reasonable to send your prompts to the vendor and see if it is a feature they are willing to maintain.
Re: What Happened to HackerOne?
#197Re: What Happened to HackerOne?
#198Earlier quoted context omitted.
This is a great example of a general trend, which is why I don't think SaaS is going anywhere. The bar may be raised, but it's not going anywhere. HackerOne and SaaS in general makes problems go away for money. If you use your own tokens and solve it yourself, it's still your problem. The deficiencies are your problem. The support and ongoing maintenance are your problem. Discovering some country split in two and now…
> This is a great example of a general trend, which is why I don't think SaaS is going anywhere. One learning I can share from the indie game industry is copycats become dime a dozen when a particular game becomes successful. With execution becoming nearly cheap, tasty products and their behaviour will be copied and competition will rise substantially.
I feel like there's this assumption that some people picked up a few months back and never examined, that the big guys were going to keep plodding along with the same old methodologies and the little nimble guys with AI might be able to nimbly out play them.
But the simple truth is 100 programmers with AI are going to do a lot more work than 1 or 2 programmers with AI. All the usual considerations for communication overhead and all the old reasons why 100 programmers aren't necessarily 100 times as productive as 1 are in play... but so are all the reasons why that group of 100 programmers is going to outdo that 1 no matter how hard that 1 works.
We are probably in roughly the middle phase of the time period when we're still learning to harness AIs at all, and seeing simply some modest accelerations of process. Eventually we're going to progress to getting significantly enhanced productivity from them for pretty much everybody. And then what will happen is not that the SaaS market crashes, but what constitutes an entry-level SaaS product will rise up to meet the increased programming firepower. Find me a SaaS whose current two-year roadmap is "Eh, don't do anything, really, we're set" and I'll show you the SaaS company who probably ought to be really, really worried about AI eliminating their entire niche. I'm sure there are some out there, but it's not the usual SaaS company experience.
Re: What Happened to HackerOne?
#199Earlier quoted context omitted.
It's not even about capitalism. You're asking Bitcoin, Ethereum and Monero to cooperate. What do the technical details of that cooperation actually look like?
I disagree, they don't cooperate just because they operate immersed in competition. Take out competition for instance by state sponsored cooperation treaties and see the technical limitations dissolve by creating the right incentives.
So what's your plan to merge Bitcoin, Monero and Ethereum into a single currency?
Re: What Happened to HackerOne?
#200Earlier quoted context omitted.
I'm pretty sure the legal way to pay someone in a sanctioned country is: you can't. Full stop. Especially not for hacking services.
I'm not actually sure how HackerOne skirts around this.
Accountability firewalls, probably. They won't pay a sanctioned country, but they'll turn a blind enough eye to anyone who says they're from a different one.