arcza

60+ people died and you're making laughs over it. Distasteful and totally crass.

Insane take. This has like 10x the number of failure modes than a proper signalling system with verifiable software design.

SSO is a core security feature, not a value add. I do not mind charging extra for say SCIM or advanced RBAC. I have a different view to business than most SaaS apps, and feel when you bring value and delight to the customer, they take you as a trustworthy partner and want to grow with you. Trust is very important and I feel so bitter paying Bitwarden, Adobe, and all the other enshittified stacks that 30-100% uplift on the base plan to get SSO. I also love my homelab stuff and it's a sour taste when I need to set up some system with local auth. yeah, maybe some nerd's A/B test show charging SSO makes more money, that's a shame and I think long term it's simply harmful (and probably less profitable due to my comment on stickyness and delighting customers being good business sense).

Well this slightly (but only slightly) makes this a little better. So Cory at the Home Depot cannot stalk his ex by tracking the nationwide Flock network, but _in effect_ has a mini nationwide network available to him because he can see any Home Depot/Lowes which is a huge dragnet anyways?

But this sounds like a policing problem not a private enterprise problem. By all means let them have an ALPR reader at the parking lot egress. 'Hi 911 yes we saw this pickup truck XX1ABC steal our shit at 2359hrs this evening', not 'cool we'll play cops & robbers with highly sensitive PII and no accountability or due process'

Yes, this. I wouldn't start by victim blaming over what is a plausible event from recent media coverage of Flock.

Sorry, I did misread that. Stay safe I guess :/ I just find it bizarre this whole thing is a private company with a sales@ email the Home Depot etc can contact. I won't be political but a) unlike many countries you can elect your sheriffs, remind them who they work for, b) you have a thing coming up in a few weeks, remind your lawmakers who they work for too.

That is fucking insane. I'm also separately sorry your friends are being stalked. I'd like to give a perspective here without sounding holy. Yes we have ANPR (what you'd call ALPR). There are national police databases and I am sure the cameras are very effective, but every search would require a justification of proportionality and access is not sold to the highest bidders. I think the furthest stretch of users would be the tax authorities' investigations departments. That a private company can profile citizens' movements like this is insane.

Sorry, ignorant European here. WDYM a Home Depot employee can access Flock? This thing is not restricted to LEO?

Probably the department's fault for not using (presumably) Entra Conditional Access to restrict SSO to corporate devices / corporate subnets.

This is why if you're building a product, please give SSO for free (see sso.tax) - you shift responsibility, requirements and posture to the tenant's IdP.

More annoying trash slop. I stopped reading after the first graphic.

I agree. OP is oddly risk averse to what i would regard as normal conduct of business.

Don't do an on-site either, they might connect to the wifi in the office and guess the password, we can't guarantee they won't guess it and download bad things.

Don't hire in the first place, there is a liability they turn up to work in the wrong mood, we can't guarantee it.

A reminder of the great minds working tirelessly at this mega-corp: https://en.wikipedia.org/wiki/British_Post_Office_scandal

Sorry OP, I stopped reading when I saw it was Substack. I won't subject myself to hostile UX, no matter the content.

People literally die of heat exhaustion and legislation is being discussed now about mandatory AC in care homes. You and others on the "AC is far right" brigade are the polarising commentators here, not us.

Agreed. Interesting to see the HN echo chamber of downvotes in full force on this subject of what is efficient modern technology. AC is civilised and a huge quality of life improvement, I won't be uncomfortable and miserable in summer if I can afford not to be.

Anything except using AC like the rest of the world, hey Monocle? There is no comparison, and not to mention the excellent efficiency of R-32 based super inverter systems that are no different to winter heating heat pumps. AC should be the norm in Europe, but apparently it's "far right"!

Bizarre hate towards someone's little blog. And it's not even LLM spam, just someone running their own WP site. By your logic I should save myself the Wikipedia verbosity and just ingest LLM output for any query I have forever.

Meta comment: nice to see someone NOT putting their FOSS project on Microslop (GitHub) and using another platform for hosting their code. I respect that, thank you for standing up to GitHub's dominance. I wish more projects didn't give GitHub such monopoly power by defaulting to using it.

What is the convincing reason that MicroSlop is the trusted party to sign the shim with their (presumably NSA-blessed key)? Why is there no charitable equivalent like a small/mini LetsEncrypt foundation for the PKI aspect of Secure Boot? I also do not see a convincing reason it meaningfully improves security posture.

If a coffee shop is charging $25 for a latte and sells none, we don't say everything's fine because no sales data. The sales are $0 and it's not fine.

There is no escaping the powers of supply and demand.

and why do you get to decide what it "is about"?

Imagine how refreshing if the press release simply said:

"We over-hired, we're ram-packed full of managers pinging each other on Slack all day and need to cut costs to sustain our operation. We think GitHub's shit and we want to be a nimble org with a fighting chance at eating their lunch. We're also gonna provide 1000 free runner hours/mo to open source projects that move from GitHub to gitlab, and we're gonna make project namespaces on gitlab.com a first class thing like GitHub did"

Wild claim that setting the minimum age to 7 days will result in me "never" getting a supply chain npm vuln.

Hey, it's Jack/Bob/Jill/Jane from Claude here! We don't give a shit about your issue. Have a nice day.

Well... my gitlab.internal.corp.com is up. As it is every day. Takes about 1 hour every few months of maintenance work at most.

> This one did not destroy machines or blow things up. It corrupted the math.

This LLM style of writing has had it's day.

Another low effort, dark mode slopsite. You lost me at "44 terabytes" before I even got to the emdash in that sentence.

@dang, when is the 'flag as slop' button coming?

You need to seriously look at your corporate communications and hire some adults to standarise your messaging, comms and signals. The volatility behind your doors is obvious to us and you'd impress us much more if you slowed down, took a moment to think about your customers and sent a consistent message.

You lost huge trust with the A/B sham test. You lost trust with enshittification of the tokenizer on 4.6 to 4.7. Why not just say "hey, due to huge input prices in energy, GPU demand and compute constraints we've had to increase Pro from $20 to $30." You might lose 5% of customers. But the shady A/B thing and dodgy tokenizer increasing burn rate tells everyone inc. enterprise that you don't care about honesty and integrity in your product.

I hope this feedback helps because you still stand to make an awesome product. Just show a little more professionalism.

I quit reading the moment your website said "sign in with google" took a single pixel of my real estate. It became spyware at that moment.

Fuck all these dark patterns and trackers. I've had enough and hope your Google Webmasters console bounce rate shows it.