Hacker News Reader

Comment by pmx | Hacker News Reader

> Authentication tokens were sent over unencrypted HTTP

Wow! How do such fundamental errors make it into these apps? Did _nobody_ who was working on it have an previous experience? Or is this another case of upper management ignoring the experts and pushing terrible ideas regardless?

View on HN

I bet this was outsourced to some offshore boiler room next door to the tech support scam call centre.

That’s what ChatGPT generated for us. There was a note saying something like „this is just an example. In a production environment please ensure proper encryption,“ but we ignored that.

Why would anyone even build a product on top of unencrypted HTTP these days? I don't even use my NAS over HTTP in my local network when I can use HTTPS instead.

"Nobody had time to figure out how to patch the letsencrypt runner to work with the only docker image that was compatible with the whatever web engine we run"

Oh... oh, that hurt so much to read because it just rings so damn true.

Under strict hierarchies of business, workers must do what they’re told and lack organization with their peers to gain leverage over bad direction from ownership/exec

This is by design.

Of course

hopefully workers start to wake up to the leverage they can have over just about anything after seeing the “openai is nothing without its workers” organizing going on

Because these hierarchies ultimately aren’t in their interest or the interest of customers, and are only as inflexible as workers allow them to be

So interesting that the same event has several spins right now:

- OpenAI is nothing without Sam Altman

- OpenAI is nothing without its workers (following Sam Altman)

- OpenAI is nothing without its workers (Sam Altman is just a figurehead)

A glitch in the Matrix?

That's a bit of a false dichotomy - just because they follow Sam Altman doesn't mean they can be incompetent. OpenAI was successful because of the rare mix of leadership with a vision and competent workers to back it up. Sam leaves, the vision dies. Workers leave, the product dies.

Without commenting on the purpose and goal of the organizing, it is a display of worker leverage gained through organizing

Yeah, but it kind of taints the picture that they rally under the banner of a Lord.

Consider he may not be a lord but a friend and colleague they value and may feel was treated unfairly.

I value all my 500 friends.

Reply on news.ycombinator.com