12 ms·
Bad Rails conventions got me a weekend stay with the CEO of Airbnb
- carabiner 3y ago[flagged]
- netsharc 3y agoArticle: >It's (still) all about your users and customers > Brian volunteering to host and entertain total strangers represents the importance of placing your customer front-and-center at every company stage. Brian could be "beyond that." He's not. He wants to see the details of what being a host is like so he can improve his product. So much simping... a CEO of a small company worships at the altar of a CEO of a unicorn. Maybe Brian should book random airbnbs next, ones that don't exist or have cockroaches as other guests. And then try calling support and getting his money back, without flashing his User ID = 3 badge...
- chatmasta 3y agoAgreed. It would certainly be more revealing to read an article from Brian Chesky about his experience as a guest, rather than someone else's experience as his guest. At the moment this has the sort of "house swap" TLC show vibe, but only half of it. It's missing the part where the rich guy sees the poor side of the coin.
- WendyTheWillow 3y agoDid you read the notes? > As a startup CEO of a company much earlier than Brian's – yet with plans to eclipse the success of Airbnb Plans to eclipse Airbnb? Ok man, we get it. Mamba mentality, whatever.
- deleted 3y ago[deleted]
- graphe 3y agoThey'll have to deal with the companies like blackrock who was buying out the supply of homes and making them uninhabitable and forcing them to resell it. That would make a much greater difference than Airbnb.
- xutopia 3y agoWhy aren't you saying the same thing about hotels? They're taking up space that could be made into living quarters for people.
- deleted 3y ago[deleted]
- drstewart 3y agoHe's simping for the CEOs of Starwood and IHG
- davetron5000 3y agoTo save anyone a click, the author figured that AirBnB's urls had monotonically increasing numeric ids, which is the Rails default, and figured out that the AirBnB CEO's id was 3, and got the direct link before it was shared publicly.
- deleted 3y ago[deleted]
- ericol 3y agoObviously I didn't RTFA, but without this comment I wouldn't had understood what that title was about. Thanks. (English is funny)
- wilg 3y agoThis article doesn’t make good on its claim to explain why this “Rails convention” is bad. It’s probably actually good. I wouldn’t have clicked on it otherwise. Rude, IMO.
- gaogao 3y agoIt's pretty common outside of rails too, like https://facebook.com/4 https://facebook.com/4 Some main weaknesses, if I recall correctly, is that's incremental ids make scraping pretty easy, or guessing content outside of a URL given explicitly by the service (like here).
- david_allison 3y agoThey also leak metrics (#of registered users)
- simlevesque 3y agoAlso, competitors can analyze your growth more easily.
- cartothemax 3y agoYep, you're correct. Panera had an issue where folks could scrap every user profile due to sequential profile ids. The bigger part of the exploit was they just openly exposed user data but making the profiles ids sequential made it really easy to scrap https://krebsonsecurity.com/2018/04/panerabread-com-leaks-millions-of-customer-records/ https://krebsonsecurity.com/2018/04/panerabread-com-leaks-mi...
- 3y ago
- xkcd1963 3y agoI'll be damned, billionaires are normal people! (or at least they want us to believe it)
- deleted 3y ago[deleted]
- ulizzle 3y agoThere’s no engineering analysis in this post, so those of us who were looking for that, let me save you the click Be born to the right people and toe the party line. That’s what Brian’s story will show you. But that’s basically a cliche right now so I doubt you’re in any way surprised
- deleted 3y ago[deleted]
- polishdude20 3y ago"If Brian Chesky, cofounder and CEO at Airbnb, listened to his mom, Airbnb wouldn't exist today. Or at least according to her: "I told him it's a bad idea. I didn't think it was going to work, and I didn't really understand it. If he listened to me, Airbnb wouldn't be here now."" I mean, in the end, isn't it turning out to be a bad idea? Removing homes from the rental market, increasing housing prices. Encouraging more treatment of housing as an investment. Sometimes, Brian, your mom is right.
- filoleg 3y ago> isn't it turning out to be a bad idea? Not for Brian, no. Even if Airbnb ceases to exist tomorrow, I am fairly certain that Brian is gonna be in a better spot than he would have been in if he listened to his mom.
- polishdude20 3y agoOh yeah he will be of course. It's the rest of the world that won't be.
- filoleg 3y agoNot so sure. Not trying to defend Brian or AirBnB, but realistically, it was bound to happen, just like Uber was. Perhaps under a different name with a different path, but I am fairly certain that the ending would have been the same. And there are definitely lessons to be learned form this. And honestly, it could've been much worse, so I am ok with those lessons being learner earlier rather than later. I think they were pretty useful.
- jtriangle 3y agoI mean, the guy has a net worth of ~$9 Billion, so, I think it's worked out pretty well for him, you know, being squarely in the tres commas club and all. And we can say good idea/bad idea all you'd like, that's just opinion at the end of the day, the truth is there was a market for his idea, a huge one, and the market isn't mound by any sort of moral or ethical or even logical means, so applying those things in order to support a notion of 'good' or 'bad' isn't going to yield truth by any measure. I think what you're seeing, mostly, with short term rentals, is a lack of housing inventory being created. We've got plenty of space to build, but, for a litany of reasons, it's not being built, and in a general sense, the solution to this problem is to solve those problems that're in the way of adding inventory.
- erulabs 3y agoThe tone in here sure has shifted. I remember Brian showing us his binder of maxed out credit cards they used to bootstrap the company. I remember the early version spitting unicorn errors every few seconds. A few things can be true at the same time: - Airbnb is an inspiring story for any entrepreneur - it has had arguably detrimental impacts - the founders came from privileged backgrounds - they also worked their ass off and are fiercely intelligent and risked plenty On the tech side - it’s always funny to hear the (correct) critiques of early Rails. It reminds me of when I was talking trash about Java as a kid. My boss laughed and said “Java bought me my house, so it’s good in my book”. Or the first Tesla I ever saw with the license plate “PHP LOL” in the Facebook parking lot. Pragmatism must beat idealism. In business and in database primary keys and everything in between.
- dom96 3y agoIf you come from a privileged background then what are you risking really? Maxed out credit cards can easily be repaid by your rich parents/uncles/whatever. Though perhaps there are things they risked that I am not familiar with.
- wutwutwat 3y agoRisk does not necessarily mean financial risk. There's a lot more being risked doing a startup than cash, and those things should be pretty obvious, though maybe not everyone sees them as risks. I can think of a few and I've never done a startup. Reputation, mental health, credibility, friends and business associates, future job prospects, legal risks, etc. Fuck up a startup bad enough and even if you have millions in the bank you could have lost all of the things I just listed.
- wenebego 3y agoOf all of the things you mentioned, rich people have much less risk comparatively than a poor person in the exact same situation
- 3y ago
- Rebelgecko 3y agoHow much was his cleaning fee? I imagine Airbnb employees are very different hosts from the average one.
- deleted 3y ago[deleted]
- tootie 3y agoIt's funny there's a spate of complaints about how fees have crept up to the point that AirBnB is not longer a deal, all the municipalities that have ruled against allowing them to operate outside hotel regulations and yet they also announced a massive increase in revenue in profits. I personally don't get this business at all. Staying in a stranger's house is even more disconcerting that renting out a house to strangers. I'm mind-boggled at home much business they get.
- b112 3y agoIt's not for me either. I have rented whole units, out of need(cost), but wouldn't want a room in a house. Still, some people love this sort of random interaction. Hostels are popular in some crowds. And I remember, when biking across Canada, a random couple in their 60s stopped me, in Northern Ontario(very rural!) and asked me if I wanted to stay the night. Part of me wondered if their very nice roast and potatoes, would be my last meal. But they just were bored, and wanted to talk, and were just nice folks not afraid of strangers. Good people. So some like it random. Enjoy divergent personalities.
- omnimus 3y agoThe business is exactly that. Ilegal hotels. Most airbnbs are flats/houses specifically for that. It allows individuals to be part of rental network without the pains of doing it proper. I think their biggest issue now is that the renters got more greedy and airbnbs start to cost more than hotels. Which atleast around me didnt use to be the case.
- deleted 3y ago[deleted]
- maximinus_thrax 3y agoAre there people who really think this is not a PR stunt? Pardon my cynicism but I call bullshit on all of this not being organized/orchestrated by publicist. > It's wild (vulnerable, transparent, kind, generous, and humbling) for the CEO of a $60B company to welcome complete strangers into his home to host them – including cooking together and showing them the city – for a weekend. This phrase is outright insulting in my view. Do you really think you will be in the company of a billionaire (and CEO of a PUBLIC company) without even basic vetting? Give me a break.
- thimkerbell 3y agoI did look for his airbnb listing at one point, after a previous broadcast that he was putting it up, and there was no way to book it. (I think not because it was already booked.)
- deleted 3y ago[deleted]
- elzbardico 3y agoAnd out of sheer coincidence, one of the guests is from the small founders club world. Small world indeed.
- deleted 3y ago[deleted]
- deleted 3y ago[deleted]
- ilrwbwrkhv 3y agoOf course it is a pr stunt. I used to get angry at this when I was younger but then I realized we have hit the peak of actual growth in the real world a while back. So now everything is just spin. It's chopping the small rooms into smaller rooms and selling them. Soon it will be sell a part of your kidney marketplace. All of this happens because the world needs another major revolution and change. Till then enjoy the vulnerable, transparent CEO who enjoys art and doggies. It's similar to the linkedin CEO post who was so vulnerable and transparent that he had to cry and had tears in his eyes because he had to fire people.
- londons_explore 3y agoI would expect every CEO to use their companies products. Even if they have no use for the product/service, their time using the product has to pay off in terms of better understanding the difficulties/challenges faced by the real users. Sure, they could pay a study group to do that. But doing it themselves will probably let them make better decisions overall.
- Breza 3y agoI completely agree with you. Too many CEOs and board members view their companies as numbers on a spreadsheet without understanding what they do in a practical sense or knowing what it's like to be a customer.
- narner 3y agothis makes me bullish on roboflow (more than I already was)
- emmanueloga_ 3y agoI coincidentally was exploring methods to obfuscate auto-incremented IDs to prevent information leakage. The concern arises when resources are accessed using URLs like "website.com/thing/1/children." This approach allows people to guess related URLs (e.g., replacing "1" with "2," "3," ..., N), potentially revealing unintended information or even the number of resources available. To address these leaks, one option is to generate synthetic keys for each resource. However, this method is costly because it requires indexing the new key alongside the primary key (PK). Indexing is not without overhead, and synthetic keys are often larger, like 128 bits for UUIDs or ULIDs compared to a 64-bit numeric PK. This means that every record insertion necessitates dual indexing. Generating UUIDs can sometimes be challenging too because of reasons. An alternative involves obfuscating the ID in such way that can be easily reversed in the server. Effective algorithms for this purpose are "squids" [1] (the second version of "hashids"), Skip32 Cypher [2] and ... more math :-p [3] [4]. Chaining both algorithms could provide an additional layer of obfuscation. Before someone mentions this, yes, obfuscation is not encryption, so not a thorough security measure. But I think obfuscation is a practical way to prevent casual URL leaks, even though more determined attackers may attempt to reverse-engineer the IDs. More options: * Add a "salted hash" to the id, ex: website.com/thing/1-hash/children, "hash" could be something like SHA-256("--{id}--{salt}--"). Now the "attacker" would need to know how to generate the hash if trying the id "2". Could also be combined with ID obfuscation as mentioned bedfore. "salt" would be a single string per resource type, or even for the whole app. * Encrypt the ID: only the server would know the password to decrypt the ID, so this would be secure as long as the password and method of encryption is not leaked. -- 1: https://sqids.org/ https://sqids.org/ 2: https://stackoverflow.com/a/4200193 https://stackoverflow.com/a/4200193 3: https://github.com/c2h5oh/hide https://github.com/c2h5oh/hide 4: https://en.wikipedia.org/wiki/Modular_multiplicative_inverse https://en.wikipedia.org/wiki/Modular_multiplicative_inverse
- gruez 3y agoAFAIK that's what youtube did, but the key eventually got leaked and attackers were using it to enumerate unlisted videos. They ended up switching to randomly generated ids. Unless you're dealing with billions of rows, the additional column + index is negligible, so it's better go with that approach rather than to be clever with encrypting ids