eranation
Joined 14 years ago
Joined 14 years ago
Imagine if your smart toilet would just send a small anonymized message to a urine sampling analysis service so it can let you you know your cholesterol levels are a bit high, totally anonymous, totally for your benefit. Maybe it's a great feature, but would anyone expect this to happen without consent / opt in?
- Should a password manager send even one byte of my data to any service, regardless of whether it is for a good intention and mathematically proven to be "safe" without opt in? I'd say no.
- So would any other product out there, be it a smart home manager or a toaster, send any of of my data, hashed or not to any 3rd party without opt in? even if it's just the byte "1" to a page called "donothing.com"? I say hell no.
- Should open source developers who are not Linus Torvalds be a bit nicer on a public issue?
- And should open source users should be less heated because "let us know if you plan to fix this or we will uninstall and fork it" deserves the "go ahead, this is open source, threats don't really help here"
We all can sometimes write a reply at the heat of the moment that we later regret. Frenk definitely realized it after the fact and I respect him owning it, apologizing, and keeping the old messages. He is right it's open source, and he doesn't owe anyone anything, but still, I believe a phoning home of any kind is violating The Principle of Least Astonishment.
> Our design team will make that less AI and more humane in the coming days.
Wait, isn't it already illegal to forge someone's signature?
I would go as far as making this a skill perhaps, so I can get the same results on other projects... but not sure what is the benefit of making it a Mac only binary, it can be a simple HTML / jsx, with maybe hooks or a /loop to keep it up to date.
A solution needs to be really better than what I can ask Claude to build in 20 minutes. It's not the "someone else spent time and thought and tokens so you don't have to" which does have some value, it's knowing that whatever I try, it will be a little different from what I want, and the energy to fork it, tweak it, is too high vs just asking Claude to build it for me on the spot...
tl;dr Definitely cool, definitely needed, but the bar for everything (including free and open source) has gone extremely high. Things that would become beloved de-facto "industry standard" tools a la "oh are you still using X everyone is using Y" just a few years ago, are now shrugged as a vibe coded lunchtime project (the new weekend project)
It's impossible to impress anyone anymore. I feel dead inside. We all got accepted to hogwarts and we became desensitized to having magic powers.
My opinions are my own
Harden your package managers and protect yourself from supply chain attacks (no dependencies, MIT):
- https://depsguard.com - https://github.com/arnica/depsguard
Socials: - linkedin.com/in/eranmedan - x.com/eranmedan