71–80 of 97 posts
how does this work? for eg, how is it possible to even deduce bitcoin structure from rpc list?
sorry a bit confused on your question here. If you're asking about JSON RPC we handle this via parsing. The AI can then handle deducing structure most of the time given enough context
Compared to your our approach, we are doing this entirely within a browser extension so meeting users where they already doing their existing work.
Within the extension just record doing a task, we reverse engineer the APIs and write a script. Then execute the script from within the webpage so that auth/headers/tokens get automatically added.
You can just prompt to reuse the tools at zero token cost.
so if API is published, there is nothing to reverse engineer. and if API is not published, and you MITM with self-compromised CAs, and then use it (commercially?) you ~100% breaking ToS. this is just un-ethical. or YC does not have regard anymore for such things?
Noticed you have two comments here. I think my response to your other comment best answers this ( https://news.ycombinator.com/item?id=47798259 ). Definitely open to discussing this more here. Not sure if I agree on the self-compromised CA bit. MITM proxies have been used for 20+ years for debugging. In fact, I use Kampala to debug our personal APIs/web app all of the time.
what kind of moral gray areas you are walking in? how is this not clear?
theft and crime was for thousands of years. and the fact that there were horrific multi-million legal cases. this is why we have curts and legal system and ToS and Copyright laws. so people who break the law (or contracts like ToS protected by law) get reprecautions. FAFO.
so if API is published, there is nothing to reverse engineer. and if API is not published, and you MITM with self-compromised CAs, and then use it (commercially?) you ~100% breaking ToS. this is just un-ethical. or YC does not have regard anymore for such things?
> anymore Ehh…
so if API is published, there is nothing to reverse engineer. and if API is not published, and you MITM with self-compromised CAs, and then use it (commercially?) you ~100% breaking ToS. this is just un-ethical. or YC does not have regard anymore for such things?
> this is just un-ethical. There is nothing unethical about this. You can technically do this with a browser and its dev tools. You being here is far more unethical than this app.
how am I being far more un-ethical again?
did I develop an AI tool to massively assit people breaking ToS and Copyright? (which is legaly punishable)
so if API is published, there is nothing to reverse engineer. and if API is not published, and you MITM with self-compromised CAs, and then use it (commercially?) you ~100% breaking ToS. this is just un-ethical. or YC does not have regard anymore for such things?
Some people may believe in equal measure that intentionally trying to break interoperability is unethical. Especially if it's my data.
"interoperability" is never the case in the agreements.
it is very stupid decision from business perspective. and unless legally required (like in agriculture or something, "right to repair"), no sane business will provide this to their customers.
Earlier quoted context omitted.
> this is just un-ethical. There is nothing unethical about this. You can technically do this with a browser and its dev tools. You being here is far more unethical than this app.
> You being here is far more unethical than this app. how am I being far more un-ethical again? did I develop an AI tool to massively assit people breaking ToS and Copyright? (which is legaly punishable)
smeels like severe breach of ToS. virtually every single website and app mandates not to reverse engineer and not to temper with inner workings (including client-server networking). side note, YC25/YC26 batches have multiple startups that blantly violate ToS and sitting on a timebomb just pending a lawsuite and Cease and Desist Letters.
Wait till these sites discover web browsers and developer tools.
as in ios or android. this is in their name.
smeels like severe breach of ToS. virtually every single website and app mandates not to reverse engineer and not to temper with inner workings (including client-server networking). side note, YC25/YC26 batches have multiple startups that blantly violate ToS and sitting on a timebomb just pending a lawsuite and Cease and Desist Letters.
The goal is not to scrape sites en-masse, but to allow people to automate their existing workflows and actions that they perform already via a browser. I understand the concerns around this being unethical, and it's something I spent a lot of time thinking about when I worked on automations previously. I've written a decent amount about how I don't think that sneaker bots or ticket bots are ethical. I don't support m…
FTX also raise lots of money. so did Terra/Luna. large valuation does not mean you cannot end up in life inprisonment for fraud.
> Why is hitting network requests directly different?
again. business publishes their official API. prohibit automatic and tool use in their ToC.
you go pass that and access what they do not release publicly.
this is borderline Copyright infringement, Trade Secrets theft, and violation of ToS.
> others do it
no they don't. "assisting screen reader" in ios. does not intercept MITM network traffic, attempts de-obfsucate, decrypt, bypass TLS and CAs with fake CA roots with intent to "udnerstand inner workings".
this is very far from the "assisting user". you do not need that level of breaking into internals.
and besides. if app really wants to assit user there are legitimate ways to do so, like accessibility labels in ios, exposed by app itself to OS. crucial point here - app already exposes it itself.
I mean, if you get legal permission from business owner to run this tool and expose their API. sure, run whatever you want (as long as your ad-hoc contract allows). and if you cannot get this contract, you are clearly breaching use and going directly agains what business intended.
you are not assisting any user here. you are trying to directly steal trade secrets to replicate their business.