selinkocalar

6 ms·

31.
by selinkocalar 1y ago
Certificate revocation has always been broken in practice. OCSP is slow. It creates privacy issues. CRL distribution is a mess. Honestly most implementations just fail open when they can't reach the revocation server. The real problem
32.
by selinkocalar 1y ago
IoT security is generally terrible, but the fact that consumer routers are essentially unaudited black boxes processing all your network traffic is genuinely concerning. Most people have no idea their router firmware hasn't been update
33.
by selinkocalar 1y ago
This is more about regulatory compliance than technical capability. PayPal already had the infrastructure - they've been waiting for clearer guidance from regulators. The interesting part will be how they handle the AML requirements. T
34.
by selinkocalar 1y ago
The ecosystem lock-in is real. We rebuilt our frontend 3 times and kept coming back to React not because it was the best choice, but because hiring developers who know anything else was so hard. The irony is that React's 'flexibil
35.
by selinkocalar 1y ago
The reliability piece is interesting - we've seen AI apps fail in ways that are hard to predict or reproduce. Traditional monitoring doesn't really work when your 'bugs' are stochastic. How are you handling failure modes
36.
by selinkocalar 1y ago
The memory safety guarantees in Rust are probably useful here given how easy it is to have buffer overflows in transformer implementations. CUDA kernels are still going to dominate performance though. Curious about the tokenization approach
37.
by selinkocalar 1y ago
This is actually a regulatory rollback. During the emergency authorization, pharmacists could administer without physician oversight to scale distribution quickly. Moving back to normal approval processes means more friction but theoretical
38.
by selinkocalar 1y ago
It's not just the architecture - it's the memory subsystem. Unified memory gives Apple huge advantages for workloads that need to move data between CPU and GPU frequently. x86 is stuck with discrete graphics memory in most configu
39.
by selinkocalar 1y ago
The hard part with tools like this is maintaining context across different data models. GitHub PRs, Linear tickets, and LLM conversations all have different information architectures. Are you doing any semantic linking between related items
40.
by selinkocalar 1y ago
The security model here is going to be interesting. Browser extensions with AI capabilities essentially get access to everything you're doing online. Wonder if they're doing any local processing or if it's all hitting their A
41.
by selinkocalar 1y ago
The bottleneck might not be the generation itself but the digital preprocessing. Most of the power in current image generation goes to the transformer computations, not the final pixel output. Still, optical computing for specific ML operat
42.
by selinkocalar 1y ago
This is why browser extension permissions are so important. Users see "VPN" and think privacy, but this extension was doing the exact opposite. 100k installs means this was happening at scale for months or years. Browser stores ne
43.
by selinkocalar 1y ago
This is exactly why alternative app stores matter. Apple's control over iOS app distribution has always been too centralized. The EU's Digital Markets Act is forcing some competition, but Apple is clearly going to make alternative
44.
by selinkocalar 1y ago
Another privacy browser enters the market. The challenge isn't building a privacy-focused browser - it's getting people to actually switch from Chrome. Most users say they care about privacy but aren't willing to deal with th
45.
by selinkocalar 1y ago
This was inevitable. AI lowers the barrier to entry for cybercrime just like it does for everything else. The concerning part isn't that someone used AI for attacks - it's how "unprecedented" the scale became. Automation
46.
by selinkocalar 1y ago
nd of an era. Typepad was one of the first platforms that made blogging accessible to non-technical people. There's something poignant about these early web platforms shutting down. They enabled so much creativity and community buildin
47.
by selinkocalar 1y ago
This is the inevitable result of inconsistent privacy laws across jurisdictions. Instead of one clear federal standard, we get a patchwork of conflicting requirements. Small companies can't afford legal teams to navigate 50 different s
48.
by selinkocalar 1y ago
This is why I'm cautious about tools that become too integrated into daily workflow. When Copilot goes down, entire teams slow to a crawl. Don't get me wrong - AI coding assistants are incredibly useful. But building dependencies
49.
by selinkocalar 1y ago
Interesting to see Google flattening their org structure. Management overhead is real, especially in engineering organizations. At early-stage companies, every manager hire needs to be justified. Can this person actually multiply the produc
50.
by selinkocalar 1y ago
This is exactly why compliance frameworks exist. When your security controls fail, it doesn't just affect you - it ripples through every organization that trusts you. German banks are right to be concerned. PayPal processes massive amo
51.
by selinkocalar 1y ago
Supply chain attacks on developer tools are getting more sophisticated. This hits every project using these plugins. The scary part is how long malicious packages can sit undetected. Your CI/CD pipeline could be compromised for months
52.
by selinkocalar 1y ago
This is fascinating from a security research perspective. Exposing state-sponsored hacking operations takes serious courage and technical skill. The transparency around their methodology is refreshing. Too often these disclosures happen wit
53.
by selinkocalar 1y ago
Crazy! Eager to see how this foundational model space goes.
54.
by selinkocalar 1y ago
This is terrifying from a compliance perspective. Audit logs are literally the foundation of every security framework - SOC 2, HIPAA, ISO 27001, you name it. If your audit logs are broken and you don't know it, you're not just non
55.
by selinkocalar 1y ago
This is exactly the kind of proactive security thinking we need more of. Supply chain attacks are getting more sophisticated, and preventing domain resurrection attacks is smart defensive strategy. Too many security incidents happen because
56.
by selinkocalar 1y ago
This is why I'm skeptical of "AI-powered everything" approaches. Sometimes the simplest solution is the right one. Microsoft has infinite resources and somehow made a calculator unreliable. Meanwhile, the built-in calculator
57.
by selinkocalar 1y ago
Every AWS update can potentially affect your SOC 2 or HIPAA compliance posture. I've seen companies fail audits because they assumed their security configurations were still current. The cloud moves fast. Compliance processes need to k
58.
by selinkocalar 1y ago
This is exactly why data sovereignty matters. Big tech companies will always prioritize their home country's laws. That's fine, but businesses need to understand what they're signing up for. For healthcare and financial servi
59.
by selinkocalar 1y ago
This is why transparency about AI usage matters so much. It's not about whether AI was used - it's about being honest about it. Eg at Delve, we're upfront that AI powers our compliance automation. But we're also clear ab
60.
by selinkocalar 1y ago
Love seeing privacy-first approaches to dev tools. This is the same philosophy we apply to compliance tooling. Your code, your compliance data, your business processes - these shouldn't have to live in someone else's cloud by defa

More ›