Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tl;dv: Over 180k meetings left wide open

bobdahacker.com

Post reply on HN
Print view View original

191–200 of 231 posts

Re: Tl;dv: Over 180k meetings left wide open

#191

Post by paradox460 »

valbaca wrote: post #142
cube00 wrote: post #60

I saw an YouTuber the other day sharing their "day in the life" as an Amazon Software Engineer while promoting (as part of a paid sponsorship) the AI note taking feature of SoundCore headphones, claiming they now record their meetings and receive an AI summary at the end. I wonder how many companies realise these devices that appear as "headsets" are now funnelling their meetings into these new AI companies who are m…

I remember while at Amazon, during the "everyone needs to be using AI in every way" push, one of my teammates was proud to present that he had figured out how to split the audio on his mac to record the meeting (because our meeting software didn't allow for recordings without consent) and fed this into speech-to-text and generated summaries of the meetings without any of us knowing (i.e. no consent). I let him and ou…

DC is a one party consent "state", so I don't think Washington state's law would apply to him

Re: Tl;dv: Over 180k meetings left wide open

#192

Post by briHass »

SAI_Peregrinus wrote: post #156
fg137 wrote: post #130

Earlier quoted context omitted.

I used a product with SOC2 certification, which uploads all your chatbot conversations to a server they control (mandatory), potentially including source code and other proprietary data, which can be made visible to public with a single click. Doesn't matter if you are an individual or enterprise user. They do have enterprise level controls that let admins turn this off. Unfortunately, it is on by default, and some o…

SOC2 requires a company to write policies in a large number of areas, and to demonstrate that they're complying with the policies they wrote. AFAIK SOC2 does not require anything meaningful about the actual contents of the policies, nor does it require the policies to remain constant.

This is true. They (the auditors) usually have guidance or areas they need to see policy address, but not specific implementation details.

Using common, overbearing MDM or endpoint tools make providing evidence of adherence to policies easier, however.

Re: Tl;dv: Over 180k meetings left wide open

#193

Post by arcfour »

cube00 wrote: post #60

I saw an YouTuber the other day sharing their "day in the life" as an Amazon Software Engineer while promoting (as part of a paid sponsorship) the AI note taking feature of SoundCore headphones, claiming they now record their meetings and receive an AI summary at the end. I wonder how many companies realise these devices that appear as "headsets" are now funnelling their meetings into these new AI companies who are m…

Well, on the plus side, SoundCore (Anker) are at least reputable enough (even though security teams would still want to review that!):

Under the security part, they do seem to at least be compliant with your typical security standards (HIPAA, SOC 2 Type 1, etc.) and claim that all data is deleted within 12 hours of transcription. So it isn't like the contents of your meeting are being siphoned off to some fly-by-night service, at least.

https://www.soundcore.com/soundcore-work-ai-voice-recorder

Re: Tl;dv: Over 180k meetings left wide open

#194

Post by BobbyTables2 »

CocaKoala wrote: post #178
anenefan wrote: post #172

Earlier quoted context omitted.

You are correct but it is not based on the sound, just if it starts with a vowel. If one listens to people speak, a common mistake, even I do it from copying the same in others, (depending on what crowd I've been around a lot,) is using an before hour as in 'an hour' though most times people will correctly write 'a hour'.

Merriam-Webster seems to specifically disagree with you on both points: the usage of "a" vs "an" is based on the sound of the following word, and "hour" is preceded by "an" since it sounds like a vowel despite starting with a consonant. > You should use a when the word that follows sounds like it begins with a consonant (‘a dog,’ ‘a balloon’). You should use an if the word that follows sounds like it begins with a vo…

Of course there is the other can of worms of debating whether Y is a vowel or not. Also, “YouTube” sounds like it starts with “u” sound, despite starting with “y”.

Maybe English is just broken. Words starting with a long “u” sound make me question the rule - different than other long vowels…

Does one play “a ukulele” or “an ukulele”?

We need an umpire to make the call (;->

Re: Tl;dv: Over 180k meetings left wide open

#195

Post by purplemoonx »

suzzer99 wrote: post #93
purplemoonx wrote: post #56

It's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault . I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years ev…

At a few companies I've worked at, they squelch this kind of bug/security breach reporting by immediately making it the discoverer's job to fix the problem and champion it through the system to production, taking on all responsibility if something breaks of course. You only have to go through that once to get the message.

Hahaha nightmare. Like I'm pretty sure I had that nightmare

Re: Tl;dv: Over 180k meetings left wide open

#196

Post by purplemoonx »

suslik wrote: post #162
mettamage wrote: post #122

Earlier quoted context omitted.

Many SWE teams don't care about security. Even talking about security annoys them. I get it though. I've had offensive security training at uni (VUSEC Amsterdam). It's a way different type of thinking.

I hate hearing about security because I saw orgs decimated by paranoid (and incompetent) security to such degree that nothing could be done there and I had to look for a new job.

One time a startup I worked at (NOT YC THIS TIME) had a "secret shopper"[1]

[1] Some old guy who I'm pretty sure was a severe alcoholic

Send us Gmail links that were 1000000000% obviously fake, like from a fake version of the CEO saying to wire him cash.

I opened the email in gmail to copy the text to Slack, and was like "Did anyone else get this?"

One other guy goes "lol yeah wtf"

Next day in standup, security alcoholic is there. He goes:

"2 people opened the malicious email"

I'm like dude. Nothing will fucking happen if you open the Gmail message We didn't DOWNLOAD anything or visit any URLs.

No. In the boomer mind, we were retards. We should be fired. We weren't, but we should have been. ???????

I'm like "GUYS" "I have some React components to make, what the fuck are you doing today?????"

There are so many instances I wish technology was removed from "the pedestal" and just treated how it is. What it actually is, there is no non-determinism we can prove everything. I don't care if that makes it $30/hr work at this point, I just can't handle the pretentiousness anymore especially around faux security

Re: Tl;dv: Over 180k meetings left wide open

#197

Post by NewJazz »

arcfour wrote: post #193
cube00 wrote: post #60

I saw an YouTuber the other day sharing their "day in the life" as an Amazon Software Engineer while promoting (as part of a paid sponsorship) the AI note taking feature of SoundCore headphones, claiming they now record their meetings and receive an AI summary at the end. I wonder how many companies realise these devices that appear as "headsets" are now funnelling their meetings into these new AI companies who are m…

Well, on the plus side, SoundCore (Anker) are at least reputable enough (even though security teams would still want to review that!): Under the security part, they do seem to at least be compliant with your typical security standards (HIPAA, SOC 2 Type 1, etc.) and claim that all data is deleted within 12 hours of transcription. So it isn't like the contents of your meeting are being siphoned off to some fly-by-nigh…

[dead]

Re: Tl;dv: Over 180k meetings left wide open

#198

Post by antonvs »

BobbyTables2 wrote: post #194
CocaKoala wrote: post #178

Earlier quoted context omitted.

Merriam-Webster seems to specifically disagree with you on both points: the usage of "a" vs "an" is based on the sound of the following word, and "hour" is preceded by "an" since it sounds like a vowel despite starting with a consonant. > You should use a when the word that follows sounds like it begins with a consonant (‘a dog,’ ‘a balloon’). You should use an if the word that follows sounds like it begins with a vo…

Of course there is the other can of worms of debating whether Y is a vowel or not. Also, “YouTube” sounds like it starts with “u” sound, despite starting with “y”. Maybe English is just broken. Words starting with a long “u” sound make me question the rule - different than other long vowels… Does one play “a ukulele” or “an ukulele”? We need an umpire to make the call (;->

There isn’t really any debate about “Y” - it acts as a vowel in most cases, and as a consonant in some cases, particularly at the beginning of a word, as in “Youtube”. The “you” sound is a consonant sound, and that also answers the ukulele question: it’s “a ukelele”, because it’s the sound that matters here.

Using a more familiar example might help illustrate this: we say “a user”, not “a user”; similarly, it’s “a European”, not “an European”.

Here’s a good article about it: https://phonicshero.com/when-is-a-consonant-a-vowel-and-why/

Re: Tl;dv: Over 180k meetings left wide open

#199

Post by antoniojtorres »

yellow_lead wrote: post #46

Seems like they fixed this a few days ago: https://tldv.io/blog/our-thoughts-on-the-darkreading-com-art... But they try to play it off as though this were public data: > Public sharing settings across AI and SaaS products have surfaced similar findings in recent months. Anthropic addressed exposed public artifacts across Claude and its MCP ecosystem via Google Search. Also, interesting, they are SOC2 compliant [1], p…

Besides the downplaying and obfuscation about the timeline on the first half, I find the inclusion of anthropic and zoom examples to be wild. Just spraying in all directions.

Re: Tl;dv: Over 180k meetings left wide open

#200

Post by purplemoonx »

goatlover wrote: post #123
purplemoonx wrote: post #107

Earlier quoted context omitted.

Prove Zeus didn't fart the Earth into existence, otherwise that's what happened

Welcome to Invisible Pink Unicorns and orbiting tea pots. You're just a fleeting experience of a Boltzmann Brain in the background of high entropy universe. We don't need to disprove radically skeptical or outlandish beliefs. They're not consistent with everything else we know. There's no good reason to take them seriously.

[dead]
Post reply on HN