QkPrsMizkYvt

Question to the community. I managed to expose all customer data of a well-funded D2C brand and when I reached out to them I did not ask for bounty before I shared the fix/the security hole. I only got a 200 USD gift card for their shop :D

What is best practice here? Do you first tell the company that they have a security issue, ask for bounty and then help? Is that unethical? Blackmail?

I use this as a subscription Stripe starter: https://github.com/vercel/nextjs-subscription-payments/tree/...

Still quite a bit of customisation to do, but was a good starter.

It is consistent!

Very off topic, but I +1 this. I am half and half and as a baby and young kid we went to one spot every summary. To this day I remember these travels. They matter a lot indeed.

This conversation sums up why HN would never ship a successful product.

What other startups did you use for inspiration?

Not OP, but I'll share my insight. The main way I keep myself on track is to remind myself as to why I am doing it. For me it is: sports and not being hungover (in particular on weekends). When I drink too much I tend to get anxious and emotional and that would last for a couple of days. Both of these reasons kept me from drinking again. It has been 3 months thus far and I haven't had an urge yet. People are also much more accommodating these days if you don't drink. I downloaded an app to help me track my "progress" and remind me as to why I am doing it. App is called "I Am Sober". It's free and has no ads. Can highly recommend.

nice it is live now!

got it - thanks

Most of the API docs were updated, but none of the new APIs work for me. Are other people experiencing the same?

same here. I wonder why they are not opening it up to more devs. Seems strange.

There used to be an app called scroll (https://twitter.com/tryscroll?lang=en), which got bought by Twitter, which is now part of subscription, but only for the top articles. Informed.so is doing something similar but different: https://www.informed.so/

The problem creating such a service is that most media houses believe that their content is the best thing since sliced bread and thus they often don't want to partner. Even though most of their content isn't that unique. Of course, some publications do have unique content, e.g. nyt, bloomberg.

I could see artifact being an interesting company to tackle this though (https://artifact.news/). They are already sending traffic to news sites and only serving what the user wants. If they now let me bypass paywalls for $20 that would be nice.

It worked for Meta.

Did you come across some other self-hosted ChatGPT clones that you can recommend?