So yes you can and it works, sometimes…

Nowadays you can be pretty certain it will be exploited.

It is not just run faster than slowest guy to get away from the bear, now it is dozens of bears per runner and bears are stupid enough to chew on anything but also smart enough once they bite something tasty that works will just continue biting that.

Two important informations are buried like „now smaller teams take podium 5% of time instead of of 10%” and „cost cap administration is a burden” and they there are no clear guidelines on what is in the cap and what not.

https://gist.github.com/cynthiateeters/6868ca26c059a3106cd93...

As much as cybersec forums were outraged that everyone will be hacked because of that — nothing happened.

ISP injecting ads is like annoying but if someone knows as much as Tom about TLS and totally skips rouge "airport wi-fi" can use his website to own someones else device that is the argument I should use for calling him or anyone else names on the internet.

I guess Kazakhstan example kind of covers it, because I do believe they would definetly deliver malicious payloads to dissidents.

With Google you have to make an agreement and put piece of code in your website willingly and then you get minimal cut but still, that is totally your choice.

While he does indeed have extensive knowledge of TLS/SSL. He still completely side steps points I wrote about and exaggerated many minor inconveniences. While PDF seems quite up to date it also picks on stuff that is not there anymore like green padlocks.

Conveniently Tom didn’t mention anything about Edward Snowden and what he published. That was basically start of TLS everywhere.

Then he didn’t mention ISP idiots that were actually injecting ads to cute websites like Tom’s. I hope Tom likes when his website is used by ISP to make money on ads he doesn’t have any control over.

Then he goes on to criticize certificate transparency, but it works. Companies got kicked out from trusted root program because they were doing stupid stuff like making certs they shouldn’t.

Let’s not forget glorious state of Kazakhstan where without TLS they would just listen to all traffic - well with TLS they were trying to pull MITM but were uncovered and got their stuff removed by TLS ecosystem.

Much rather contribute that amount one time to OSM and have details from all cities from there.

Looking at it from one way would be "winner takes all, real AGI company will be most powerful and everyone will switch to use it".

But it is not like that and in my opinion it is more like "AGI wipes whole knowledge work, so no one who cares has any money to pay for tokens/subscriptions anymore". Even without AGI current state of art of LLMs already starts creating such a problem. How do they continue to grow their numbers, when they actively cut the branch they are sitting on? How does AI LLMs or AGI pays for its own electricity, when people switch from hype to resource protection (like not spending any money, because generating funny cats loses with having a dinner)?