Additionally after looking at the source it looks like a lot of Anthropics own internal test tooling/debug (ie. stuff stripped out at build time) is in this source mapping. Theres one part that prompts their own users (or whatever) to use a report issue command whenever frustration is detected. It's possible its using it for this.

> Overall simple security design flaws but it's good to see a company that cares to fix them, even if they didn't take security seriously from the start

I don't think that should give anyone a free pass though. It was such a simple flaw that realistically speaking they shouldn't ever be trusted again. If it had been a non-obvious flaw that required going through lots of hoops then fair enough but they straight up had zero authentication. That isn't a 'flaw' you need an external researcher to tell you about.

I personally believe companies should not be praised for responding to such a blatant disregard for quality, standards, privacy and security. No matter where they are from.

The thing that put me off was the speech recognition. I am not in a loud environment and I wasn't even talking and it was picking up responses and responding to it before I even opened my mouth. It blazed through the 'preferences' set up itself making up responses. Then when I did get to talk it just simply got my answers wrong. It would often interject too at random during my sentences.

Comments URL: https://news.ycombinator.com/item?id=44074561

Points: 2

# Comments: 1

I would definitely like some sort of “decade” option if at all possible so you can stick to films of a certain era. Some of the older ones I had no ability to guess (which is fine, just would like to weed those out for my own fun).

Also as others stated, some made for the movie tracks would be nice!

It’s an absolute joke.

That being said I don't know why you would pay for an application that does this but I guess I'm not the target market.

I always used Ryan Air a while back when I didn't have much money and needed to get somewhere. I dislike them now because of the removal of hand luggage by default. Additionally I find they're not even that much cheaper than alternatives nowadays which makes it harder to put up with their smaller seats and in general worse service.

- Bank sends you a tiny card reader that you enter your PIN and it gives you a one time code. If you want to make payments that require 3DS (online only ofc) you have to have this card reader on you but it doesn't actually require an app or internet connectivity.

- You have an app on your phone, you drag a code from a notification onto another area of the app itself which does something (somehow - no idea the purpose) and verifies the transaction. Certificate is stored on device only.

- You open an app and it'l notify of the purchase amount, location, merchant and you just tap allow

- You receive a code in the mail that is renewed once a year which is then combined with a SMS message (or app notification). The payment flow asks you for some characters from both codes.

You do not require cell service for any that I have used and wifi is enough.

Further Edit: Just to clarify though, all of these are ONLY for online purchases. Purchases in shops you just use your pin if it requires authorisation.

Comments URL: https://news.ycombinator.com/item?id=36482284

Points: 4

# Comments: 1

Reddit didn't need to be a video and image host as you allude to. They didn't need to bloat their stack with 'hot' technology. They didn't need to even make an app, the third parties were basically doing that for free.

They want to be an ad and data platform because they know that this will in the long run net them more money. To get there though they will have to alienate their entire user base.

1) Speech to text into an input field, allow the user to modify

2) I presume this is uses an LLM to generate the responses, submit the new text and give it the entire convo as context but initially ask it to "correct" the text to what would make sense in context based on similar sounding words.

Edit: Hah oh it's not too great right now at all. Tried it again and it ended up writing Cyrillic as my response despite me speaking Spanish.