bmitch3020

Not just making it seem like a new idea, but a shiny and trendy one.

The important data being handed over was the IP address of the admin. If you self-host the server, that skips the first step to discover who is running the server, your own IP address is in the web site's DNS entry.

The downside of offline cameras is they are mysteriously missing the SD card after the vehicle gets impounded.

Extending the length of the stop to wait for a drug dog isn't legal. The key phrases include "am I being detained", "am I free to go", "what is your reasonable articulable suspicion of a crime", and "what is your name and badge number". Record everything.

Of course they'll be more than happy to break the law themselves. They'll investigate themselves and find no wrongdoing. And I'm sure the officer will claim they smelled something giving them reasonable suspicion.

I've yet to voluntarily enable passkeys, for the main reason that I want portability, and not to be tied to any single device that can be lost. I want to be able to backup and lock my credentials in a safe. I also want to control the strength of my credentials for different services, and I don't consider my thumbprint used to unlock my phone to be as strong as a long password in a password manager.

The first time I was forced to use a passkey implemented within the vendor's app (3rd party password managers were not an option). I quickly closed that account.

The second time was an app that popped up a passkey opt-in in the middle of a bunch of transaction screens. I quickly realized the error, but there was no easy undo. The opt in was one green button in the middle of the screen. Turning it back off required digging through settings to find the security option to disable, and then confirm my choice multiple times. That process also signed out all my other devices.

The fact that companies are resorting to dark patterns and forced requirements, where my money is held hostage, should be pretty good evidence of how poorly the passkey rollout is going.

Compared to the current state, where multiple "security researchers" independently send unsolicited identical reports, this feels like the right solution:

1. It's opt-in, anyone that doesn't want to receive these reports, or has reasons to not want AI used on their project gets that by default.

2. It's free for OSS projects, many of us won't spend money for a hobby we work on in our spare time and give away.

3. The reports go back to the maintainer, and not to potential attackers.

I would like to see more locally run models in this space, breaking the dependency on SaaS vendors. Even though those local models can't be controlled and would therefore be used by attackers. At some point, we'll get past this wave of newly discovered issues that have been lurking in the code for years, and the scans should run like any other linter or dependency checking tool.

For me to believe this is not a bubble, I'd want to see that revenues exceed expenses by a large enough factor to sustain the business (often a 10% or greater profit margin). Right now, every one of these companies is following the Uber business model: give the product away at below market prices to hopefully capture the market and force their competitors to go bankrupt first. They're also speed running the bubble with massive data center builds that will increase their debt and future interest payments on that debt.

The question for me isn't "is this a bubble", it's "how many of these companies will be left after it pops". The few companies that remain are likely worth their current inflated value. But I'd want to see the back of the envelope math showing that all of the companies together will be able to earn the necessary profit to justify their valuations, how much revenue would that require, and how does that compare to the current tech purchasing today.

They're targeting 9 5s of uptime now. 55.5555555%.

I can't imagine they'd ever get enough people to opt-in to mouse tracking to generate enough data for their model training. It's either a DOA AI project, employees will be pressured into accepting it (making it part of their review), or their managers will accept the monitoring on their behalf.

There are two things keeping me using "Big Map".

1. Address lookups. Many of the buildings in OSM have yet to get street addresses added, so navigating to an address is a bit hit or miss. This gets fixed with time as people update the maps and wouldn't be a show stopper.

2. Real time traffic and detour navigation. This is really needed when navigating around busy cities where a wreck on a major highway can result in significant delays. This needs a combination of an external service (separate from OSM) but also one that has enough adoption to have usable data.

The OSS tool for nautical charts is OpenCPN.