5 ms·
> Authentication tokens were sent over unencrypted HTTP Wow! How do such fundamental errors make it into these apps? Did _nobody_ who was working on it have an
by pmx 3y ago
> Authentication tokens were sent over unencrypted HTTP
Wow! How do such fundamental errors make it into these apps? Did _nobody_ who was working on it have an previous experience? Or is this another case of upper management ignoring the experts and pushing terrible ideas regardless?
- wahnfrieden 3y agoUnder strict hierarchies of business, workers must do what they’re told and lack organization with their peers to gain leverage over bad direction from ownership/exec
- jedrek 3y agoThis is by design.
- wahnfrieden 3y agoOf course hopefully workers start to wake up to the leverage they can have over just about anything after seeing the “openai is nothing without its workers” organizing going on Because these hierarchies ultimately aren’t in their interest or the interest of customers, and are only as inflexible as workers allow them to be
- actionfromafar 3y agoSo interesting that the same event has several spins right now: - OpenAI is nothing without Sam Altman - OpenAI is nothing without its workers (following Sam Altman) - OpenAI is nothing without its workers (Sam Altman is just a figurehead) A glitch in the Matrix?
- wahnfrieden 3y agoWithout commenting on the purpose and goal of the organizing, it is a display of worker leverage gained through organizing
- actionfromafar 3y agoYeah, but it kind of taints the picture that they rally under the banner of a Lord.
- seanhunter 3y agoConsider he may not be a lord but a friend and colleague they value and may feel was treated unfairly.
- actionfromafar 3y agoI value all my 500 friends.
- UseStrict 3y agoThat's a bit of a false dichotomy - just because they follow Sam Altman doesn't mean they can be incompetent. OpenAI was successful because of the rare mix of leadership with a vision and competent workers to back it up. Sam leaves, the vision dies. Workers leave, the product dies.
- Nextgrid 3y agoI bet this was outsourced to some offshore boiler room next door to the tech support scam call centre.
- Hamuko 3y agoWhy would anyone even build a product on top of unencrypted HTTP these days? I don't even use my NAS over HTTP in my local network when I can use HTTPS instead.
- nikanj 3y ago"Nobody had time to figure out how to patch the letsencrypt runner to work with the only docker image that was compatible with the whatever web engine we run"
- ThePowerOfFuet 3y agoOh... oh, that hurt so much to read because it just rings so damn true.
- AndroTux 3y agoThat’s what ChatGPT generated for us. There was a note saying something like „this is just an example. In a production environment please ensure proper encryption,“ but we ignored that.