News for hackers. Stuff that matters.
Re:Rabbit data breach: all r1 responses ever given can be do... by yazzku on Tuesday June 25, 2024 @04:11PM (#40793041)
It was obvious from their "key note" in day one that this project was a scam. The best thing that can happen to it at this point is for it to be sued and shut down.

Anybody can string a couple of API calls together and write an "app". That is not programming, and this project is a massive undertaking for somebody of their skill. It should have never gone to market to begin with, regulations should have stopped it on its feet. The fact that they put more effort into their "key note" than the actual product was already a red flag. It's like some marketing guys got together and decided that they were going to "take the world by storm with AI".

> we have internal confirmation that the rabbit team is aware of this leaking of api keys and have chosen to ignore it. the api keys continue to be valid as of writing.

Yeah.

Re:Rabbit data breach: all r1 responses ever given can be do... by llamaimperative on Tuesday June 25, 2024 @04:43PM (#40793358)
I mean that is definitely programming. The real distinction you’re looking for is the gap between programming and building a production-ready product.
Re:Rabbit data breach: all r1 responses ever given can be do... by RIMR on Tuesday June 25, 2024 @05:32PM (#40793903)
I see no benefit in being pedantic. Obviously writing code that performs simple API interactions is "programming". The definition of programming is extremely broad.

It is rather clear to me that yazzku is saying that the programming required to pull of what the R1 does falls well below what Rabbit promised their customers. That this is such a bullshit design that we can infer that the entire product is a scam, because if they were serious it wouldn't be so obvious that no work into actually making a useful product.

Re:Rabbit data breach: all r1 responses ever given can be do... by llamaimperative on Tuesday June 25, 2024 @05:42PM (#40793999)
You can build perfectly fine products without programming anything at all. The problem isn't the lack/scale/type/complexity of programming. The problem is that the product is bad, and this is not a pedantic point at all.
Re:Rabbit data breach: all r1 responses ever given can be do... by sandwitches on Tuesday June 25, 2024 @05:51PM (#40794081)
Please don't cheapen professional expertise in this way. The product is bad, yes, but why? Because the programming is bad, and the programmers are negligent.
Re:Rabbit data breach: all r1 responses ever given can be do... by llamaimperative on Tuesday June 25, 2024 @05:51PM (#40794090)
> Anybody can string a couple of API calls together and write an "app". That is not programming

Yes it is. Simple as.

Please don't gatekeep something as casual as writing code. Good lord.

Re:Rabbit data breach: all r1 responses ever given can be do... by nerdile on Wednesday June 26, 2024 @01:24AM (#40796680)
Casually writing code and writing code that securely handles customer data and maintains availability for something you're selling are two different things.
Re:Rabbit data breach: all r1 responses ever given can be do... by hughesjj on Tuesday June 25, 2024 @08:42PM (#40795307)
Imo it's programming, but not engineering.
Re:Rabbit data breach: all r1 responses ever given can be do... by tonyarkles on Tuesday June 25, 2024 @09:05PM (#40795426)
And it plays, in large part, why some engineers get upset when programmers call themselves engineers without the skill, discipline, and responsibility to back it up.

To me it has nothing to do with size or complexity. You can have a 20-line well-thought-out imperative Python script that is well-engineered. And you can have a 200,000 line Java app that leaks PII all over the place, loses user data twice a week, and is impossible to debug because it's a giant spaghetti rats nest.

Re:Rabbit data breach: all r1 responses ever given can be do... by sandwitches on Tuesday June 25, 2024 @05:51PM (#40794085)
I have bad news about most SaaS products.
Re:Rabbit data breach: all r1 responses ever given can be do... by VTimofeenko on Wednesday June 26, 2024 @02:05AM (#40796875)
If claims from this[1] video by Coffezilla are to be believed, the r1 is not their first questionable project.

https://www.youtube.com/watch?v=NPOHf20slZg

Re:Rabbit data breach: all r1 responses ever given can be do... by Retr0id on Wednesday June 26, 2024 @07:09AM (#40798624)
The r1 is not just not-their-first, it's a pivot that reuses code from their earlier endeavours. (which itself is fine, like, that's what you'd expect from a pivot, it's just that their PR strategy relies on claiming those past projects are wholly unrelated.)

When they rug-pulled GAMA (after selling a bunch of NFTs), as consolation prize they "open sourced"[0] a few things.

One of their many promises was that their space-station "metaverse" would have "Quantum Engine AI Integration" (letting you talk to NPCs, among other things). They released a lightly edited Unreal Engine game template (the "metaverse"), along side a file named `api.yml`[1] which documents an AsyncAPI[2] API (the "AI integration"). There is no actual integration, the API spec is just positioned adjacent to the Unreal project - there's a note in the README that amounts to "integrate it yourself".

The back-end component was never open-sourced, and they've long since shut down the API server, but based on the docs, the API used by the r1 is clearly a direct evolution of that design.

As for the R1's API, there is no documentation, but I partially reverse-engineered it and wrote some docs of my own[3], which is enough to see the similarities.

[0] https://github.com/gamaspacestation/

[1] https://github.com/gamaspacestation/gss_release/blob/main/ap...

[2] https://www.asyncapi.com/

[3] https://gist.github.com/DavidBuchanan314/aafce6ba7fc49b19206...

Re:Rabbit data breach: all r1 responses ever given can be do... by officeplant on Wednesday June 26, 2024 @10:59AM (#40800831)
I swear all these shitty startups need is that clean look from Teenage Engineering to sell worthless garbage.