ozim

While he does indeed have extensive knowledge of TLS/SSL. He still completely side steps points I wrote about and exaggerated many minor inconveniences. While PDF seems quite up to date it also picks on stuff that is not there anymore like green padlocks.

Conveniently Tom didn’t mention anything about Edward Snowden and what he published. That was basically start of TLS everywhere.

Then he didn’t mention ISP idiots that were actually injecting ads to cute websites like Tom’s. I hope Tom likes when his website is used by ISP to make money on ads he doesn’t have any control over.

Then he goes on to criticize certificate transparency, but it works. Companies got kicked out from trusted root program because they were doing stupid stuff like making certs they shouldn’t.

Let’s not forget glorious state of Kazakhstan where without TLS they would just listen to all traffic - well with TLS they were trying to pull MITM but were uncovered and got their stuff removed by TLS ecosystem.

Much rather contribute that amount one time to OSM and have details from all cities from there.

Looking at it from one way would be "winner takes all, real AGI company will be most powerful and everyone will switch to use it".

But it is not like that and in my opinion it is more like "AGI wipes whole knowledge work, so no one who cares has any money to pay for tokens/subscriptions anymore". Even without AGI current state of art of LLMs already starts creating such a problem. How do they continue to grow their numbers, when they actively cut the branch they are sitting on? How does AI LLMs or AGI pays for its own electricity, when people switch from hype to resource protection (like not spending any money, because generating funny cats loses with having a dinner)?

He is showing no doubt backed by his extensive experience — while we have loads of other people writing about their experience that is totally opposite.

Well yes people writing about their opposite experience also have the same issue.

For me for example TDD never landed, it was always too much hassle for not enough return on investment. Scrum/Agile the oposite it landed quite well despite of what I read every day how useless it is. For me AI also landed, it wasn't that way 3 years ago, exactly 3 years ago I could have written the same experience as the parent poster.

When used in projects with good practices it was writing good code.

I have JIRA mcp wired up I tell agent to pick up the ticket it makes a feature. I review PR deploy to test server click happy flow through.

It works for me and company I work for. There is a world of difference between using Claude Code, Cursor configured properly and just using copy paste code with chat interface.

I am always baffled by how people take their experience as „this is ultimate truth”.

My bet is they hire smart kids that think they know it all. But being smart and thinking you can figure out stuff as you go doesn’t work the same as having people who actually know what they are doing.

If I name the price for actually developing apps no one will pay, there are only nerds nagging about how they are annoyed by web apps.

Main point is that even if you could slop out some code to have a mobile app there is enough of additional burden that makes it not really worth it when you can get away with web version that is good enough and you don’t have to care about all that bs coming with publishing and maintaining a mobile app or to be specific you need to maintain exactly 2 apps.

Business people I work with tend to have all kind of ideas in different places, I cannot count all the Trello boards they have abandoned. Users are usually lazy and don't want to fill in data properly, well yeah chatbox with llm is cool interface, but you still have to enforce structure for data so it is useful.

With AI problem is still there "garbage in, garbage out", models are not going to imagine correct data to fill in blanks, in the end if you need someones birthday, someone has to type it in.

Web app I am working on is organised only because we get engineers and quality assurance and we get paid for maintaining application. Data is structured and we can deliver insights because the application enforces structure.

There are far more requirements than AI can deliver on its own.

You have to adhere to bizarre requirements, you can be taken down on a whim without possibility to appeal.

You have to pay for a developer account at least to Apple each year $100, Google one time fee $25.

Nothing like that for a web app.

No wonder ad platforms that stay afloat till this day can have up to 30% of income from scam ads.

I get vague statements thrown at me with people expecting me to understand it.

Same with writing, setting up whole context to properly transfer 300 bits is always orders of magnitude bigger then just additional 700 bits.

I am annoyed by people who do bait and switch, like „we are open and promise free forever” - just after they build community or they manage to get some VC to talk with suddenly they start charging for project taking in all work contributors also created with it.

On the other hand there is bunch of cool projects that started like that and even if they bait switched it is hard to be angry at them.

We fail to imagine how much time takes to „craft a nervous system”.

Super scary how small are we in big scheme of things.

That is just maths here working. Two systems combined always will have more states and inputs/outputs.

There is nothing to check here as it can be proven purely by maths.

Complex systems having more attack surface are obviously less secure.

They might be less interesting for attackers if they have to scan huge attack surface like IPv6 vs IPv4 but no one is claiming IPv6 network is more secure.

Worst things happen always when 2 or more systems are combined because each system might be simple on its own, yet a combination is always much more complex.

I would be set for the rest of my life if I got half a mill falling from sky today, I guess I could even make it work with 250k.

Currently I am pondering how absurd amount of money a billion of dollars is. When loads of people can only -earn and eat through/spend not save- $1 million; working their asses off for something like 20 years.

Running this would be nice but it still takes time and still there is no ROI for me.

Of course there will be people who find it useful but I am pretty much done with building knowledge bases or having todo lists.

Stuff that I need to do or remember - everything else if I forget nothing happens and it doesn’t impact my life or work.

Why do you need to spell it out like that?

Still I take debugger in Visual studio or Rider any day instead of VSCode debugger.

Anyways I find it mind boggling how many useful actions are not known by „normal people”. Most people are really using computers in a very inefficient way.

My idea is if we would spend time making people learn computers or software they use daily better - we wouldn’t need AI agents and we would triple GDP.

Especially cybercrime one?

Police doesn’t have any capacity to deal with normal cybercrime. AI incident like that is basically out of their reach.

Maybe by „police” you mean FBI/NSA/CISA.