Live data from Hacker News

Tl;dv: Over 180k meetings left wide open

bobdahacker.com

121–130 of 231 posts

Re: Tl;dv: Over 180k meetings left wide open

#121
post #97

Earlier quoted context omitted.

> Idk licensing and regulation sounds like involving more institutional arrogance. Well it works . Aviation for example is incredibly safe if you think about it, and mostly because the governments worldwide joined forces and introduced an amount of safety regulations everywhere that sounds insane until you remember that these rules were literally written in blood. And similarly, losing your life or getting injured on…

> Trades licensing is merit based. Only on the bottom end. People with zero merit get forced out - eventually in most cases. However a lot of people who have merit are not allowed in.

> People with zero merit get forced out - eventually in most cases.

Yeah but in many cases often only after decades and still with a sizable final paycheck on departure. "Failing upwards" is a thing, and it happens far too often.

Re: Tl;dv: Over 180k meetings left wide open

#122

It's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault . I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years ev…

Many SWE teams don't care about security. Even talking about security annoys them. I get it though. I've had offensive security training at uni (VUSEC Amsterdam). It's a way different type of thinking.

Re: Tl;dv: Over 180k meetings left wide open

#123

Earlier quoted context omitted.

All depends which god we are disproving the existence of?

Prove Zeus didn't fart the Earth into existence, otherwise that's what happened

Welcome to Invisible Pink Unicorns and orbiting tea pots. You're just a fleeting experience of a Boltzmann Brain in the background of high entropy universe.

We don't need to disprove radically skeptical or outlandish beliefs. They're not consistent with everything else we know. There's no good reason to take them seriously.

Re: Tl;dv: Over 180k meetings left wide open

#124
post #89

Earlier quoted context omitted.

More proof that software engineering isn't real engineering. If a civil engineer made a mistake that bad in my country, he'd likely lose his engineering licence.

Software lost that status in the vibe coding era. It's an art form now, not necessarily something worse or easier, just different than engineering. But probably not the career path anymore for those who prefered math over philosophy in college.

Amusingly i specialized in both AI and philosophy in college. Guess I'll be ok.

Re: Tl;dv: Over 180k meetings left wide open

#125

It's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault . I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years ev…

More proof that software engineering isn't real engineering. If a civil engineer made a mistake that bad in my country, he'd likely lose his engineering licence.

I studied physics, did a PhD and postdoc, the whole science shebang. When I got into software development a few years ago, I was put into a well functioning pizza sized team that developed an internal app for another company. The crew was as software-dev as it gets,:

- one architect who was there from the apps inception yen years prior, who knows all the ins and outs of the application - one project lead, who was with the project two years, who could also code in the classical sense, but was mostly the connection to the customer - a tester who could not code, but also knew the app in and out (from the user perspective) and found things or relayed and reproduced bugs reported by the customer - a technical writer who could also code (somewhat), but was more responsible to think of user behavior, undefined app behavior, edge cases, logic issues etc - and several disposable code monkeys, who were exchangeable and expendable, who did most of the tickets. I joined as one of these

The work was great, the team functioned great and we delivered what the customer wanted. But what really struck me was that software dev is not science, or engineering, or an art form, it's most akin to a trade like plumbing or carpentry. I had computer science as minor in university and pretty much none of what I learned there helped for "real" work. I learned SVN in university, but obviously the team used git. And all of the software development and programming courses I did taught me nothing of how real software is structured or how a team works.

That impression only more strongly once I had to train new hires, PhDs in comp science, who knew basically nothing about real software development.

Again, it's a trade, something you learn on the job from someone who already knows it, like a master carpenter.

Re: Tl;dv: Over 180k meetings left wide open

#126

Earlier quoted context omitted.

More proof that software engineering isn't real engineering. If a civil engineer made a mistake that bad in my country, he'd likely lose his engineering licence.

To be fair, if the story in the comment you are replying to is actually factual and the company is found to be leaking private information on this scale, it can face pretty harsh legal consequences.

Someone should investigate, interview me.

They violated their termination agreement with me already when they went way out of their way to make sure I would not get hired at certain other companies when I left.

Re: Tl;dv: Over 180k meetings left wide open

#127

Earlier quoted context omitted.

Seems interesting. What would you say are the biggest missing points currently or things you want to get working/improved but couldn't yet?

Thank you, great question! Hard one to answer, thought about it a lot and it's going to be the diarisation of more than 5+ speakers per audio stream (your microphone + system audio for a max of 10). I actually spent a lot of time that went completely nowhere trying to fine tune my own diarisation model, it was fun to a degree but painful to see my output end up worse than what I currently had after days of work. Havi…

Interested also, which text-to-speech model do you use? For diarisation Granola uses a chrome extension instead of a bot if that can give you ideas.

Re: Tl;dv: Over 180k meetings left wide open

#129

Earlier quoted context omitted.

I doubt SOTA models nowadays are going to produce an implementation without any kind of authentication like here, and not tell you about it. And even if, a later "is this ready for release" will probably surface such obvious issues. I do not think LLMs are the problem here. Today, they are most likely more competent than whoever set this up.

Still the six month wait time when everything should be good? /s

No, what I said is that I think this has already been good for some time.

Re: Tl;dv: Over 180k meetings left wide open

#130

Seems like they fixed this a few days ago: https://tldv.io/blog/our-thoughts-on-the-darkreading-com-art... But they try to play it off as though this were public data: > Public sharing settings across AI and SaaS products have surfaced similar findings in recent months. Anthropic addressed exposed public artifacts across Claude and its MCP ecosystem via Google Search. Also, interesting, they are SOC2 compliant [1], p…

I used a product with SOC2 certification, which uploads all your chatbot conversations to a server they control (mandatory), potentially including source code and other proprietary data, which can be made visible to public with a single click. Doesn't matter if you are an individual or enterprise user.

They do have enterprise level controls that let admins turn this off. Unfortunately, it is on by default, and some of those basic security controls require a higher tier of service.

It is absolutely wild that these companies treat security like an afterthought. And I also realized SOC2 Compliant meant absolutely nothing.

Post reply on HN