BandButcher

Haha no doubt, tech is all about vendor lockin and ecosystem lol if anything car play was just a temporary loan (or even beta testing)

Wow very great write up, this is incredible analysis. Its these kinds of exploits that scare me away from security due to the vast knowledge required. I for sure didn't understand all of it as im not knowledgeable on compiler theory or v8 internals but the article had a very good overview on all the subjects, i even learned new things about JS as a web dev!

Saving this post for later reference thanks

Haha yea on edge and ff mobile it doesn't look crisp, but not sure if its actually the base image itself. The copilot image looks super jagged, like a bad photoshop. not sure how much effort ms is putting into images, maybe they are ai generated now??

Haha "...access a very small percentage of Microsoft corporate email accounts, including members of our senior leadership team and employees in our cybersecurity, legal, and other functions, and exfiltrated some emails and attached documents."

Seems like a big deal. Also, this may be why I've been getting massive amounts of "unusual account sign-in activity" emails for Microsoft about an old outlook account i no longer use...

Hopefully these state actors can get access to my vsts server i no longer can find and deploy an old app for me ;)

most likely there are no security issues in the code, but there could be potentially, see this link: https://security.stackexchange.com/a/81926

tldr: its possible for images to not really be images. Whenever you are getting user input, its usually best practice to always validate it "server side", in this case, the rust code, which is compiled machine code. An attacker could possibly upload a malicious "image" and if there are rust functions that operate on that data blindly, it could lead to a pwnage (ex. access to memory outside the browser/colorizer program)

Fyi im pretty sure LinkedIn has had a major data breach in recent months q4 2023 but its been on the hush hush...

See: https://www.troyhunt.com/hackers-scrapers-fakers-whats-reall...

Very cool, also be careful with handling raw binary data chatgpt

Curious, did you use chatgpt to fix the bug? Or did you ask it what could be wrong? Or did you do it yourself

Great idea! However i think your initial concept might blow up into something much bigger and technically challenging. You want it to be a QR code to link to a business card/personal bio/ai biz helper.

Also, although i do believe many people want this, there is already TONS of competition. Social media apps all kinda have this (profile page), tiktok and Instagram make heavy use of apps/integrations such as linktree to facilitate off site marketing.

Furthermore LinkedIn is unfortunately the de facto "business card" for most people and companies. Again you can totally create an experience that tops these tech companies but it wont be easy imo and will require a bit more than a single markdown file.

Also one major question i have is how will users share their qr code? By sending the qr image as a text? Maybe as a post on social media?? (if so how can i scan the qr if im viewing it on my phone - just send me the direct link).

Bless

I see what you mean by the Nvidia outsourcing, its a typical company strategy that i dont think is the root problem. Plus people overseas dont HAVE to accept but obviously they do as for them its a better opportunity financially.

But i took the quote "state where no actual productive work is done and instead companies become financial manipulation instruments" to mean that companies now only care about the immediate financial turnaround as opposed to building quality products (normally done out of fear of healthy competition). So because most companies are considilating/merging, the healthy competition goes away and monopolies continue to grow leaving people with fews alternatives.

Personally i dont think its so much about stocks/offshoring talent/new world order as much as it is these huge companies and billionaires saying "yes this product or service is shtty, yes it costs more than before, yes the quality will continue to go down, and yes the price will continue to go up, BUT, no gun to your head, you're free to go to the next billionaire company and try them out for the same thing... " See the telecom companies, apple, fast food, etc...

I guess the end question is how to farm a healthy mom and pop system, but typically they die because of lack of service-ability and marketing which the big corporations can easily do and have done

2nd this haha, firebase wasnt always a google product...they ended up buying them out because it was a truly innovative framework (at the time). How they've maintained the product since is debatable but the tech is solid.

I've used firebase for many apps - albeit not enterprise level - and they have been very performant and efficient. No issues tbh. But ive never paid for firebase so i cannot speak to the paid teir.

All it is under the hood is websockets, no sql db, oauth, and html/js. Yes you COULD write those integrations yourself, but doing it for many apps or for POCs would be tedious and difficult to maintain. firebase was a great playground to go from idea to code to prod quickly.

Is it the best cloud solution for enterprise production or multi tenant saas platforms... Probably not lol

I have several "prod" websites using Firebase. However i wrote them 5-7years ago so im sure the framework has changed a lot since.

its a solid framework for real time db and hosting but imo its struggling to keep up with competitors (aws, cloudflare, pocketbase, and my current fav supabase)

My bet is that google is shifting money and engineering time towards AI hype as opposed to firebase cloud infrastructure. Also they bought out firebase way back and googlefied it, then i guess you're seeing the final result

tldr: check out supabase

Very cool project, i was just thinking about rss readers and the like the other day.

I enjoyed your take on using the app how you imagine it and developing around it (frequency buckets, etc). Those problems sometimes go unnoticed during the design stage but are crucial to really getting the benefit of the app - the REAL reason why you're building it and and eventually excited to use it. I have gone through similar career burnouts and it's projects like these that can re light the flame... Until the next burnout lol

I forget where i read it, whether book or anecdotal, i wanna say there are general rules for testing these

I think first you're supposed to rub the leaves on your skin and see if a rash or reaction occurs. If not you proceed to lick or chew the leaf/stem, spit it out, then await a any reactions...

This continues to consuming a small piece, then the fruit, ... Etc.

Again just what i remember hearing before

Very cool

Agree, im in my early 30s and jump through most platforms, but very little with tiktok/discord. but i have to admit a lot of newer content (and tech framework support) has migrated to discord channels. Even some YouTube sports talk shows have their own discord for call ins, etc...

These big teleconference apps are usually hit or miss but discord seems to be the winner currently for actual "social networking", also add in its trend in the gaming community

Agree with the text input being annoying and possibly more of an impedance. Personally i would prefer to speak out the sound i want (think beat boxing noises) and then have the generative ai give me an array of similar sounds and then i can just drag and drop where i want it

Writing into a prompt feels opposite to the creative process but as a first pass its a cool tool, kudos