andrewguenther

[Disclaimer, I work at OpenAI]

Sites has been one of the most valuable ships for us internally outside of general model releases imo. A few things that I think are incredibly underrated:

1. Plugin usage. I can build a site with some data vis and when someone else in the company logs in, it uses their access to evaluate those queries. The access model/BYO connection is really powerful.

2. Ephemeral sites. Setting up a site is so easy they can be ephemeral. I can set up a whole site for a presentation, or a complex form, or just a meme, and then never touch it again because it cost me basically none of my time.

3. Sites as plugins. Sites directly integrate with the plugin ecosystem in that a site itself can provide/be a plugin. Combine that with Sign in with Chat (byo subscription) and you can build some really cool experiences really easily. I've been working on a deck grader for Magic the Gathering the last few months for my own uses and now I could pretty trivially publish it as a site for others to use.

I don't see sites being abandoned any time soon :)

The self-hosted environment is just the backend for shell calls the agent wants to make. The inference bits, thread persistence, and (optionally) mcp/tool calls happen from the API.

That is correct. It is possible they didn't opt out and given the timeline and anonymization of data unclear whether a particular conversation would have made it into the training set if they hadn't.

No, remotes still work fine

Having a "buy me a coffee" link is an incredibly terrible way to monetize to the point where I highly doubt that the vast majority of these are profit motivated as the author implies.

I have personal projects that I pay >$100/mo to operate. I can afford to do so, it is not impactful to my life. People have, without prompting, offered to give me money for these projects as a way to show appreciation. I have no intent to ever make money off of these things, I don't even hope to break even, but offering some money is a material way to show appreciation for a service you find valuable and I don't think there should be any shame in it.

It looks like this doesn't work for users without accounts? It works when I'm logged in, but not logged out. I went ahead and reported it to the team. Thanks for letting us know!

How long ago was this? I had this same experience, but there's a new implementation for memory as of a few months ago which seems to have solved this weird "I need to mention every memory in every answer" behavior.

In 2025 there's no reason for anyone to be logging into an AWS account via the root credentials and this should have been addressed in the preventative measures.

There's no actual control improvements here, just "we'll follow our procedures better next time" which imo is effectively doing nothing.

Also this is really lacking in detail about how it was determined that no PII was accessed. What audit logs were checked? Where was this data stored?

Overall this is a super disappointing postmortem...

Yes, you can start with a still and a prompt

It's not an enforcement issue so much as it is a heavily exploited loophole. Part of the reason freight trains are so long is so that they can't fit in passing sidings. Since Amtrak does fit, they end up having to yield because the freight trains simply cannot.

Could this be fixed by legislation on max train length to ensure all trains fit in sidings? Yes. Will that legislation get passed? No.

An interesting video on the subject: https://youtu.be/qQTjLWIHN74?si=t3u3iyZj1kRQQUCe

How does that statement convey inexperience? The presentation doesn't try to present that as a novel conclusion, it's just a true statement.

Hardly fair when most commands don't work and you can't copy paste...

None. Windows Defender is actually quite good and the third party options are so bad I'd argue in many cases you're worse off having them installed.

Yes, but S3 has single region redundancy that is better than GCP. Your data in two AZs in one region is in two physically separate buildings. So multi-region is less important to durability.

Also if you're open to it, I'd love to reach out and get some feedback on your experience with fck-nat, how many environments you're running it in, etc. Is that something you'd be open to? If so, what's a good way to get in touch?

Happy to hear it! I've been looking to add some testimonials to the site. Is it okay if I reach out to you via email?

I don't want to get anyone too hyped on it just yet because there's still a lot of testing to be done, but hopefully will start giving some more concrete updates on "fck-nat 2.0" soon-ish!

Author of fck-nat here. Happy to answer any questions! Thanks for the post!

Author of fck-nat here. My big issue with Alternat is that it actively updates the route table which can still cause availability problems. It's a shorter outage than the current fck-nat replacement methodology, but it is still dropping connections.

The longer term vision for fck-nat is a two node approach using conntrackd and keepalived to actively failover existing connections to the secondary with no loss of availability. This has the added benefit of not requiring all of the auxiliary infrastructure that Alternat sets up.

It doesn't clear every two hours, it's a rolling two hour recording. Since the plane was still operational, it continued recording and it was just over 2 hours before maintenance crews disabled the recorder.

I feel like they've made their position here quite clear and it's well-reasoned. I understand the disappointment, but this doesn't give any indications to me of "serial mishandling" unless there's some other context I'm missing?

Open source != open to contributions. Signal has made it pretty clear that their motivations for open source are visibility and verifiability, not to get people to do work for them for free. It seems like the action item to update the CONTRIBUTING.md to make those expectations more clear is a reasonable one.

The regulatory vector for satellites in the US is the FCC. The FCC controls US airwaves so if you're providing services via satellite in the US you must have a license from the FCC.

So if you're a non-US company operating services in the US, you'll have to have a US subsidiary anyway and that subsidiary would be required to get the license. If you're a non-US company not doing business in the US then that's outside of regulatory jurisdiction.

No offense taken. I tried to be clear in my phrasing that I don't personally subscribe to the "LLMs are just like us" mentality. Just making an observation as to why people have such visceral reactions to any implication that they might be.

I think LLMs are presenting some uncomfortable philosophical questions for people about how our own brains work and admitting that there is any kind of "intelligence" (even if very basic) in an LLM is an admission that our own brains may work in a similar manner.

I'm so sick of Mozilla's constant posturing as the "open internet" champion. Unfortunately it seems to be working based on the hordes of goons who interject in any discussion of web browsers that Firefox is the "morally superior" choice.

Mozilla is lost. Not just directionless, but in my opinion a total shell of the organization they once were. Chrome's complete dominance can be directly attributed to Mozilla's mismanagement.

Just continuing to burn funds on dishonest virtue signaling and failed experiments...

Yep. I built this for Python recently and it uses introspection to automatically build this same info. It's maybe 100 lines in total? The OpenAI API is pretty amazing.

Reposting my comment from when this first got announced. I am a bit hesitant about Maker Faire's return given how its last run ended...

Maker Faire has a really special place in my heart. In 2011 I ran the iFixit booth where we not only ran phone repair workshops, but we also did a teardown of a car...live. A volunteer was kind enough to lend us his VW Golf, which he was also going to need to drive to work the following Monday. We were the last exhibitors out as it took us until around 2AM on Monday morning to get the whole thing back together and drive it out. We got two Editor's Choice awards and the Education award that year. One of the best weekends of my life.

Sadly, we never got to do anything like that again. Over the next couple years, large corporate sponsors started taking up more and more space until most of the main hall was just a bunch of ads. We were never able to get a space to do anything like that ever again. I really hope that the return of Maker Faire is also the return of makers at Maker Faire.

$40/month just to run it, but then $0.045 per GB data rates. The data rates are what is outrageous. NAT Gateways comprise a non-trivial portion of many customer's bills for this reason.

Try as they might, I don't think Postman will ever be able to justify that $5.6bn valuation...

We disassembled it as much as we could on day 1 of the show and started putting it back together about halfway through day 2.