6 ms·
Tl;dv: Over 180k meetings left wide open
- sktb 2mo agoSix Months !?! If I'd left a vulnerability like that open for 6 hours there'd be hell to pay. Something that critical is call for hitting the big red off button.
- Cthulhu_ 2mo agoIn this case the CEO was aware of it and... did nothing.
- bigstrat2003 2mo agoAh, see, if the CEO does something that hurts the company it's ok. In fact, they will pay him (or her) for making the mistake in the form of a golden parachute. It's only the rank and file employees that actually suffer consequences from failures.
- idiotsecant 2mo agoIs this still active? I wouldn't mind spying on some meeting notes. Sounds fun.
- blitzar 2mo ago"Lets circle back and touch base to tease out any low hanging synergies we can capitalise on" - repeated 181,000 times
- mdrzn 2mo agoIf they haven't fixed it in 6 months, I'd say it's fair game to scrape as much as you can.
- bpodgursky 2mo agoI know this is a joke but it's still a felony, for your own sake don't do this.
- IAmBroom 2mo agoSerious question: how is it a felony? Distributing it might count as copyright piracy, but merely downloading public data?
- Ekaros 2mo agoJust because company failed to limit access does not mean it is public data. Just like stuff not being screwed or glued down doesn't mean you are free to take it.
- wavemode 2mo agoThe federal government outlaws "knowingly accessing a computer without authorization or exceeding authorized access" to obtain information from any "protected computer" (which, in this context, means any computer involved in interstate commerce - which, in practice, has been ruled such that it certainly includes any Internet-connected server of a corporation). Your defense would have to be that you were authorized to access the data, or that you did not know that you weren't authorized to access the data. Not merely that the data was easily accessible.
- efreak 2mo agoI suppose you might be able to argue that everyone is authorized to view the data if they made no attempt whatsoever to prevent you from doing so.
- nkrisc 2mo ago
- deleted 2mo ago[deleted]
- Ekaros 2mo agoI keep being amazed how most basic things are not checked. Cross-tenant isolation is one of the main things I check for... With other generic information leaks.
- pc86 2mo agoSturgeon's Law is proved correct time and again. Most things are crap. Most people produce some crap in their lives. Some people only produce crap. Those people still need to eat but unfortunately some of them (somehow) find their way into tech and actually convince people to pay money for crap. Especially with a low bar to entry like what is essentially AI-backed transcription-as-a-service, I'm not sure 90% is high enough. There will be 100 companies offering essentially the same thing and it's unfortunately the responsibility of the customer to find the one written by someone who doesn't have a parsnip where their brain should be.
- noir_lord 2mo agoFortunately we have LLM's to not produce that crap... wait, those LLM's were trained on the existing crap and produce the same crap... oh no.
- user43928 2mo agoI doubt SOTA models nowadays are going to produce an implementation without any kind of authentication like here, and not tell you about it. And even if, a later "is this ready for release" will probably surface such obvious issues. I do not think LLMs are the problem here. Today, they are most likely more competent than whoever set this up.
- SpaceL10n 2mo agoHmm, does Ukraine know that Russia is watching the Ministry of Digital Transformation's meetings?
- palmotea 2mo agoDon't worry, I'm sure this was all an AI agent's fault, so no one to blame and all they need to do is update their code review prompts to not make mistakes.
- HPsquared 2mo agoAlso add the word "secure" a lot.
- deleted 2mo ago[deleted]
- markboo 2mo agoAI agent: sorry for that, I'll build the next version will be the most secured one
- greenavocado 2mo agoMake no mistakes
- DrammBA 2mo agoActually they are taking one from Anthropic's playbook and saying it's the user's fault for misunderstanding what "sharing" means.
- new_account_900 2mo ago[dead]
- Aeroi 2mo agoholy crap. how do you respond as CEO to this and not escalate to like priority #1? then kick the can for 6 months?
- root-parent 2mo agoA post on LinkedIn where this CEO seems very active should solve that.
- lostlogin 2mo ago> how do you respond as CEO to this and not escalate to like priority #1? then kick the can for 6 months? We might be able to check the meeting minutes and get the answer?
- gyanchawdhary 2mo agoThis is bad. I run a company in this space (deepfake voice phishing), and one of the most common pushbacks we hear from buyers is: “Where are attackers going to get audio clips of our employees?” ... excluding senior leadership, which most companies already recognize as a risk. Another similar incident that happened recently was 4TB/40,000 contractors voice + government ID + selfie leaked .. https://oravys.com/blog/mercor-breach-2026 https://oravys.com/blog/mercor-breach-2026 PS: To demonstrate how this can be exploited with real time voice changers i.e. a voice phishing simulator .. we also built a free tool that shows this attack combined with someones voice .. https://www.callstrike.ai/voice-phishing-simulator https://www.callstrike.ai/voice-phishing-simulator (Voice Phishing Simulator) https://www.callstrike.ai/deepfake-security-training https://www.callstrike.ai/deepfake-security-training (Deepfake Video Simulator) It’s obviously a heavily restricted PoC, but it helps demonstrate the attack path in practice.
- lostlogin 2mo ago> 4TB/40,000 contractors voice + government ID + selfie leaked Leaked selfies? Do you mean ID photos?
- zeroxfe 2mo agoSelfies are used during live ID verification. (All of this is supposed to be encrypted, and destroyed within certain regulatory bounds.)
- saaaaaam 2mo agoGenuinely thought you meant you carry out deepfake voice phishing.
- gyanchawdhary 2mo agoOur customers do, against their employees using our platform.
- Oras 2mo agoNot the first time I read a shitty implementation with Firebase, I'm not blaming the platform, but seems there is a huge skill issues around it. Wasn't a dating app exposed this year with same negligence or firebase security?
- Cthulhu_ 2mo agoIt's almost like people need knowledge and experience to work with tools securely. The problem with Firebase (I think) is that its marketing is "it's easy to use" and I'm confident most problems - like storing this info - is easy to figure out and finish, then move on to the next thing. But this is lazy / "move fast" software engineering. They mention all of these certifications, I think they should be stripped of them for a year because of a failure to respond / act.
- asdf88990 2mo agoIf something happens again and again, it is by choice. Firebase chooses to make it “easy” to get started rather than “secure by default”.
- hluska 2mo agoI understand the need to shame this platform, but why expose all their clients to this much risk? This disclosure here just named a whole bunch of clients. Why?
- root-parent 2mo agoYou need to read the article.
- hluska 2mo agoI read the entire article. Did you? There’s no reason in there to expose this company’s clients. Edit - Are you capable of answering my actual question or was that the best you could do?
- root-parent 2mo agoHe has been emailing the CEO for six months with no replies. This is has also been posted here before with not a single pip or comment ... :-) And these customers absolute lack of technical due diligence, on this nth example, of move fast and break things...makes them deserve what they are getting.
- dpark 2mo ago> And these customers absolute lack of technical due diligence, on this nth example, of move fast and break things...makes them deserve what they are getting. That’s a garbage take. These customers didn’t move fast or break things. They trusted a company that made a promise and that company let them down.
- root-parent 2mo ago>> They trusted a company that made a promise and that company let them down. That is a Boeing and Volkswagen type of excuse. The engineers did it!
- seb1204 2mo agoSo did he email privacy@tldv.io? Why not? Maybe someone who understands it would read it.
- ncr100 2mo agoIt's unclear. Only stating the existence of the privacy email. > [...] Buried at the bottom, a single line: "If you have discovered a privacy or security issue that we should address, please always let us know at privacy@tldv.io. Our security team will respond within 24 hours." I emailed the CTO directly. Six months. No response. [...] This is near the disclosure schedule
- intended 2mo agoFrom the article - he reached out to the CEO directly, who acknowledged and said it was being worked on by the CTO. He did this repeatedly over 6 months.
- redsocksfan45 2mo ago[dead]
- Aeroi 2mo ago"Government meetings from 23 countries: Brazil, Colombia, Peru, Ukraine, El Salvador, the Philippines, Chile, Indonesia, Mexico, the United States, Qatar, Malaysia, Uzbekistan, Sri Lanka, Haiti, South Africa, Jamaica, Honduras, Argentina, Thailand, Japan, Israel, and Belize. " oof
- hashstring 2mo agoHegseth loves this app!
- alkh 2mo ago[flagged]
- deleted 2mo ago[deleted]
- ayang3000 2mo ago[flagged]
- wkirby 2mo agoI'm very intrigued by AI note takers, but I'm absolutely unwilling to expose me or my clients to this exact problem. The solution (theoretically) is a purely local note taker, but I haven't found one that's any good. Tried meetily and others in the same vein, including briefly rolling my own. The breakdown in the pipeline seems to be reliable local diarization and speaker identification; even if the transcription is good, when speakers aren't accurately identified and speech isn't well grouped, there's no rescuing it in the summary step.
- cyberge99 2mo agoDrafts.app is hideous but it has great routing capability and a dictation feature. I use it to capture what my thoughts and route based on content. I have a button that routes to an internal voice agent named KiKo. Ideas get routed to Things or todoist. Issues get routed to github, etc. It’s one universal surface for note capture. But man is it ugly.
- wkirby 2mo agoMy ideal use case is to pipe audio from both my microphone and capture system audio so things like our weekly team standup or my 1:1s with my devs can all have reliable, decent notes without taking me out of the flow of the conversation. I think clearly the _leader_ in the space is granola, but I'm just not going to use a cloud provider for this. Drafts have anything like that?
- properbrew 2mo agoI'm definitely biased as the developer, but maybe try https://whistle-enterprise.com https://whistle-enterprise.com and see how it works for you. It's a hard problem I've been working away on for a while now. It's far from perfect but every step brings it a bit closer.
- wkirby 2mo agoLiterally starting my monday weekly standup now, I'll run it and see what's up. Thanks!
- yellow_lead 2mo agoSeems like they fixed this a few days ago: https://tldv.io/blog/our-thoughts-on-the-darkreading-com-article/ https://tldv.io/blog/our-thoughts-on-the-darkreading-com-art... But they try to play it off as though this were public data: > Public sharing settings across AI and SaaS products have surfaced similar findings in recent months. Anthropic addressed exposed public artifacts across Claude and its MCP ecosystem via Google Search. Also, interesting, they are SOC2 compliant [1], proving again that SOC2 is meaningless/useless. [1] https://tldv.io/features/security-commitment/ https://tldv.io/features/security-commitment/
- stellamariesays 2mo ago[flagged]
- cyberge99 2mo agoIs there an entity that can validate they are not SOC2 compliant outside of their claim?
- maebert 2mo agoYes, SOC2 require an audit by an independent auditor, and in principle you can request their audit report from them. Just email the CTO about it ;)
- cube00 2mo agoOn a personal note, I recognize that I should have kept the researcher updated after his initial outreach earlier this year, and I take full responsibility for that communication gap. They make it sound like it was a single email. What about all the other outreaches the researcher made to the CEO over a six month period? Interesting how the CEO didn't contribute any explanation to the blog post and left the CTO out to dry.
- Trasmatta 2mo agoOnce again proof that SOC2 is nothing but a marketing tactic, and busywork
- usamaasfar 2mo agoI'm starting to believe Firebase is cursed at this point.
- iJohnDoe 2mo agoI think this is one of the few times public disclosure wasn’t a good idea. Some of these are government meetings and could put lives in danger. Also, shame on the CEO for not making this an emergency and confirming it was fixed by the end of the day.
- purplemoonx 2mo agoIt's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault. I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years everyone's background check data in the United States that went through this thing - millions per year - thousands of Uber drivers, DoorDash, etc. all were viewable with no clearance. Anyone including overseas contractors, new hires, etc. could just login and check anyone's criminal history. Reporting it was a disaster. They all tried to cover their asses, this huge drama and hand waving started. They tried to blame anyone and everyone. Eventually it was just AWS fault somehow (it wasn't, the Staff engineer was a dumbass, he committed it to a ruby seed file). ----- I digress, the CTO didn't respond because he was more worried about how it would make him look. This industry is dead - the wrong people work in it.
- mschuster91 2mo ago> I digress, the CTO didn't respond because he was more worried about how it would make him look. This industry is dead - the wrong people work in it. The main problem is that the IT industry for a loooooooong time "self-regulated" itself, the only areas that did have regulation had it come in externally (i.e. automotive, aeronautic, astronauts and maritime). Only in the last years, GDPR + insurances forced a bit of change and accountability, but still, it's far removed from the standards that company owners, workers and planners are held to in construction (licensed engineers), legal or medical practice. Mess up there and everything can happen from fines over a license suspension to a permanent removal, or even jail time. In contrast, mess stuff up as a CTO and you'll probably be "asked" to voluntarily depart in exchange for a nice golden parachute.
- purplemoonx 2mo agoIdk licensing and regulation sounds like involving more institutional arrogance. We effectively have that kind of gatekeeping now with the University degree and University recruiting pipelines (all other candidates are "external" and illegally deprioritized but it's somehow allowed). The CTO shouldn't have to pay, the company should. And then maybe they will be incentivized to hire somebody who knows what they're doing. Licensing just gatekeeps it more to even more dumbass people with connections getting good roles. It should be more merit based to avoid this kind of thing. People who have done it a thousand times should get that job, not some dumb kid who just got out of school.
- cube00 2mo agoI saw an YouTuber the other day sharing their "day in the life" as an Amazon Software Engineer while promoting (as part of a paid sponsorship) the AI note taking feature of SoundCore headphones, claiming they now record their meetings and receive an AI summary at the end. I wonder how many companies realise these devices that appear as "headsets" are now funnelling their meetings into these new AI companies who are more worried about the World Cup then replying to security researchers.
- newsoftheday 2mo agoNot trying to be rude or mean here but it should be, "a YouTuber" since YouTuber starts with a consonant sound.
- Ylpertnodi 2mo ago[flagged]
- anenefan 2mo agoYou are correct but it is not based on the sound, just if it starts with a vowel. If one listens to people speak, a common mistake, even I do it from copying the same in others, (depending on what crowd I've been around a lot,) is using an before hour as in 'an hour' though most times people will correctly write 'a hour'.
- asdff 2mo agoWho writes "a hour"?
- CocaKoala 2mo agoMerriam-Webster seems to specifically disagree with you on both points: the usage of "a" vs "an" is based on the sound of the following word, and "hour" is preceded by "an" since it sounds like a vowel despite starting with a consonant. > You should use a when the word that follows sounds like it begins with a consonant (‘a dog,’ ‘a balloon’). You should use an if the word that follows sounds like it begins with a vowel (‘an ant,’ ‘an elevator’). Remember that sometimes a word will begin with a vowel but it sounds like a consonant (‘a one-time deal’); in this case you should still use a, rather than an. And in some cases a word will start with a consonant but it sounds like a vowel (’an hour’); in this case you should still use an, rather than a. [1] [1]: https://www.merriam-webster.com/grammar/is-it-a-or-an https://www.merriam-webster.com/grammar/is-it-a-or-an
- nope1000 2mo agoTo forget tenant isolation on one endpoint is bad enough but to ignore it for 6 months is madness. I am at a SaaS company and our customers have such strict security requirements for us and that is for less confidential data.
- fsuts 2mo ago> He responded within minutes: "thank you! can you report it to our CTO and we will look at it immediately?" Why could he not speak to HIS ceo himself instead of asking Bob to
- peezd 2mo agoI saw that and chuckled.
- georgemcbay 2mo ago> Why could he not speak to HIS ceo himself instead of asking Bob to You can't expect a founder/CEO to spend 2 minutes relaying an email with critical security information to his own CTO, he's surely way too busy disrupting and pivoting and doubling down on product market fit.
- MarkusQ 2mo agoI've know executives like this; at some level they seem to be self aware enough* to realize that any message that passes through them will be garbled beyond recognition and so actively encourage people to route around them. * I know they're just saying the words a self aware person would say to give that impression, but it can be eerily convincing.
- brohee 2mo agoNow let's see if European users get their GDPR article 33 notification of the breach...
- slp3r 2mo agoTurns out building https://github.com/sleep3r/crispy https://github.com/sleep3r/crispy was a pretty good idea
- sensanaty 2mo agoThe worst part of these AI meeting notes and recordings is that I have literally never seen anybody, in any situation, go back to them. The (very) few times I ever bothered to check the transcripts and especially the summaries immediately after a meeting, without fail they'd have something in them that is the complete opposite of what someone said in the meeting, or they'd miss extremely important clarifications or context. Literally worse than useless, actively detrimental, but you bet your ass whichever moron forced these to be on for every meeting is putting it on their resume - "Increased long-term organizational cohesiveness via comprehensive automated meeting notes" or whatever type of bullshittery.
- IAmBroom 2mo agoThat is a wild claim. Every single quarterly meeting my company has with customers begins with redistributing the notes from the previous meeting, and "to-do" points are regularly referenced. AI notes are a godsend, because instead of forcing one person to keep careful notes throughout, the meeting's host can quickly review, edit, and send out the minutes - a job that otherwise would literally take more time than the meeting, because one person spent the meeting just taking notes. The AI notes require careful review, and contain a lot of repetitive fluff, but all notes require review before distribution. So, now you are aware that this is a normal thing in other companies.
- Terr_ 2mo ago> That is a wild claim. Perhaps we can all agree that usage is very bimodal, between the people who refer to auto-notes constantly vs never?
- saaaaaam 2mo agoMy own anecdata, fwiw. I have periods of my year where I spend the majority of my time (like 25-30 hours a week) holding and recording calls, which I then transcribe and review. I’ve never once found an error of this type. I also record and review a lot of quarterly earnings calls, and have never experienced an error of this type.
- headz 2mo agoOK, the issue sucks. That said, the post was written by an LLM and It's not pleasant to read. If I didn’t work with Claude every day, I might feel differently, but because I do, this reads like slop.
- mastermedo 2mo agoTBH I've been finding Claude quite funny lately, the pasta jokes are pretty good. > The irony is al dente.
- thenatureboy 2mo agodoesnt change the fact that the vulnerability existed. Stop whining
- deleted 2mo ago[deleted]
- plantain 2mo ago"Because the common denominator between both of these distinct incidents was Firebase, we are taking the additional step of immediately removing it from our tech stack altogether to definitively eliminate the risk of similar vulnerabilities in the future." - from their post-mortem. Thank god the root cause was definitively identified! /s
- Trasmatta 2mo ago> tl;dv names their microservices after pasta. A subdomain scan reveals cappellini, carbonara, fusilli, pasta, penne, puttanesca-v0, and ravioli, all under tldv.io. An entire Italian restaurant worth of Express servers. Pretty appropriate, given a vulnerability of this severity. Literal microservice spaghetti. (Also, please, let's all move back to boring names for services and servers. Nobody likes trying to decode what all these silly names mean.) EDIT: omg, the disclosure communication is infuriating. > We're on it. It needs some time, but rest assured we're following through. For further communication, i'll recommend reaching out to our CTO This should have been a P1 that was fixed same day, and they strung him along for months. Absolute amateurs.
- homeonthemtn 2mo agoWow.
- nashashmi 2mo agoThis breach will help with tl;dv's awareness. More people will suddenly become aware of it. The downside is that less private conversations will be hooked up to tl;dv, and more public seminars will be fed instead. This is a win-win overall. And it is a PSA to all other companies to secure their servers a little bit better.
- saadyousfi 2mo ago[dead]
- gvv 2mo agoFunny, my first thought was that this has to be related to Firebase...
- throwaway613746 2mo ago[dead]
- CurbStomper 2mo ago[dead]
- quietfox 2mo agoI wonder how the HN algo chose this one link to Bobs blogpost to be the one to hit the front page. This story was committed three more times by three different users, 6 days ago (16 points), 4 days ago (11 points) and another one 4 days ago, again with 16 points.
- msyea 2mo agoMy biggest worry is the small talk that you casually have in meetings. Comments about your pattern of life, family, locations, friends and health. Slurping all that up over 100s of meetings is concerning. Stored raw transcripts of meetings is a huge liability. Should redact small talk and only store useful extracts.
- jorts 2mo agoSome notetakers filter that stuff out automatically.
- roysting 2mo ago[dead]
- xvxvx 2mo agoThis should be the kiss of death for any company. The exposure of sensitive data like that, and for that long? There's a serious disconnect between security best practices and law, and how many companies actually operate. My own company is a sitting duck for hackers right now. I've begged them to implement basic 2FA for 6 months and all they do is brush concerns under the carpet. No one gives a shit, all the way to the very top.
- hashstring 2mo agoThe disclosure section is gold. It’s such an accurate description. Major consumer companies reply just like that. It’s incompetence and I think to an extent also arrogance.
- toreador44 2mo agoFrom an online article about the CEO: "Raphael Allstadt, co-founder of Germany’s fastest-growing startup, tl;dv, argues that European tech needs to be “bold but secure” to win the enterprise AI race." "But Silicon Valley may have more engineering talent on paper; Europeans care far more about data, security, and privacy. That means our builders pay closer attention, build compliance in from the start, and are ultimately better suited to serve the enterprise market, especially here in Europe.” As tl;dv scales, Allstadt’s mission remains twofold: to prove that a European startup can out-execute the US giants on product, while maintaining the privacy standards Europe demands. The irony
- gppk 2mo agoHeh, interesting. I literally just vibe-coded an app tonight that takes a meeting recording, runs it through whisper to generate the text, then through your local codex gives you a summary and creates actions that are pushable to either github (technical) or PM tool (project level) Takes about 7 minutes for a 2 hour meeting on my 3080 GPU so well within useful timeframe. I did it because i didn't want to pay £7 a month for a discord meeting notes taker, but seems generally useful. And ofc you could swap out for a local model if you have more compute than i do...
- asdff 2mo agoWhy not just pay attention in the meetings you are paid to attend?
- shermantanktop 2mo agoI just did this - i took notes by hand during a meeting, but also took the AI summary and compared the two. I did miss one item. My hand notes were far better though.
- saaaaaam 2mo agoDepends on your level of interaction in the meeting. I have a lot of meetings where I’m having in-depth “fact finding” interviews with one or two other participants. Taking notes breaks the flow and sometimes the other participants find it rude. So instead record those meetings and generate a local transcript after using whisper.
- gppk 2mo agoOK ill rise. It's not about the meeting, its about the work after the meeting. This tool creates a list of reviewable actions, and has API access to github and project management tools so i can tag the owners and submit them direct. It also creates comprehensive, well versed minutes, in a historically logged list. How many of your meetings you pay attention to do you actually get all that output, that you can share and push back to your team?
- ubervisor 2mo agoThese companies take anything but responsibility. The fact that they’re trying to downplay it in their own blog post with “but look at the others, they’ve had security issues too,” as if that makes it any better, says it all. I would never trust that company with anything ever again.
- quietfox 2mo agoFunny enough, there is a news story in which the same CEO that didn't care about the breach for 6 months told USA Today 'that European tech needs to be “bold but secure” to win the enterprise AI race'. https://archive.is/QQy2b https://archive.is/QQy2b
- buzer 2mo agoMy first thought was "huh, I wonder if they follow GDPR, that starts sound to like Article 32 violation" (related to security of processing). I checked the privacy policy and yes, they are based in Germany so GDPR likely applies to all of their processing. However that privacy policy raises also quite a few concerns. They say that "profile image URL" is based on contractual obligation which is quite weird, just why profile image is necessary to fulfill a contract? Additionally IP address and location are collected for "adapted pricing" and it's "legal and contractual obligation". I can somewhat understand that if it's used to calculate VAT, but "adapted pricing" sounds much wider thing. And even VAT calculation itself isn't really "adapted pricing", it's something that the company needs to handle. They are of course free to change the price based on that, but that price change goes more to legitimate interest rather than legal (or contractual) obligation. They also claim that "Product analysis and improvement, marketing and attribution, incident management and in some of our logs" as well as "Analysis of products and navigation on the site and application" are also "legal and contractual obligation". I honestly want to hear what contract necessitates those or exactly what law requires them to do that.
- odo1242 2mo agoThis is essentially the #1 Firebase footgun. Having client-accessible databases with optional rule-base security has always seemed a bit dumb to me.
- chrysoprace 2mo agoWe use a similar tool at work and it's automatically invited to every meeting. It records, transcribes, and lets you search for something somebody said and when. It is incredibly unsettling.
- jwrallie 2mo agoThe worst thing is that there is nothing technical preventing this kind of service from running fully local. All the audio is already being routed to any participant and transcription models are lightweight enough and can run in virtually any computer.
- SpyCoder77 2mo agoI love the fact that, if the emails listed in the post are correct, bob didn't even try to be professional with formatting or capitalization or anything. That shows how much power this man had in this situation lol
- LoganDark 2mo ago> I wanted to say something so badly. "Hey, you might want server-side validation too." But this was a proof of concept, not a consultation. oh man, imagine telling them "you don't want people like me breaking into your app! Just look at how I got into this call!"
- _superposition_ 2mo agoHow is this even a product? Call me cynical and maybe slightly jealous but I increasingly believe the difference between successful and unsuccessful startup businesses is suckering investors out of a check and faking it til you make it. Influencer trash vibes.
- 1vuio0pswjnm7 2mo ago1785854861 | Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | https://bobdahacker.com/blog/tldv-hack https://bobdahacker.com/blog/tldv-hack | https://news.ycombinator.com/item?id=49169753 https://news.ycombinator.com/item?id=49169753 1785962536 | Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | https://bobdahacker.com/blog/tldv-hack https://bobdahacker.com/blog/tldv-hack | https://news.ycombinator.com/item?id=49188723 https://news.ycombinator.com/item?id=49188723
- marshalla 2mo agoMy prediction is that soon every mid-size+ company will have their own hardware running an open-weight model and all employees will be required to connect to it and it alone for inference.