9 ms·
Search.chatgpt.com domain and SSL cert have been created
- cynicalsecurity 2y agoRIP Google. Yet another story of a company killed by "effective" management. The McKinsey school isn't so effective after all, is it.
- unraveller 2y agoCan someone tell me how all that leet coding doesn't lead to their AI having better coding ability? More fizz buzz has been spilled on google whiteboards than in any other place on earth.
- kolinko 2y agoBad organization. So what if you hire good engineers if you make then do wrong tasks.
- deleted 2y ago[deleted]
- deleted 2y ago[deleted]
- 01HNNWZ0MV43FF 2y agoTls, no?
- cqqxo4zV46cp 2y agoWe all know what it means.
- 01HNNWZ0MV43FF 2y agoI know what "nucular" means too
- yau8edq12i 2y agoThere is no such thing as an "SSL certificate" or "TLS certificate". There are certificates, which are used in various protocols including SSL and TLS. You can use the same certificate for both. The name "SSL certificate" is just a shorthand indicating the intended purpose of the certificate, nothing more. As such there really is no point in being pedantic over SSL vs TLS.
- paxys 2y agoMore accurately they are X.509 certificates.
- yau8edq12i 2y agoIf we want to be pedantic, X.509 mainly defines the binary format of these certificates.
- teddyh 2y agoX.509
- justsomehnguy 2y agotty. World Wide Web.
- grandpoobah 2y agoOoo exciting :)
- rany_ 2y agoI know about things like https://crt.sh https://crt.sh but how could you be notified about something like this? Is there some service that allows you to be alerted whenever a new certificate is generated for a domain?
- w3ll_w3ll_w3ll 2y agoThere is this tool from Facebook. "Certificate Transparencyis an open framework which helps log, audit and monitor publicly-trusted TLS certificates on the Internet. This tool lets you search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates and potential phishing attacks." https://developers.facebook.com/tools/ct/search/ https://developers.facebook.com/tools/ct/search/
- arccy 2y agocrt.sh has rss feeds for any search result you throw at it, e.g.: https://crt.sh/atom?identity=chatgpt.com https://crt.sh/atom?identity=chatgpt.com most commercial offerings are about monitoring your own domain, e.g. from cloudflare, sslmate, etc.
- lambdaxyzw 2y agoYou can set up your own certificate transparency listener, and get notified of every certificate created, in realtime, assuming you can handle the load. In my company we do this to scan new domains for potential phishing domains, to take them down before they become active.
- lifthrasiir 2y agoAnd if you need a concrete tool, use something like Certstream [1]. [1] https://certstream.calidog.io/ https://certstream.calidog.io/
- ollybee 2y agoThe amount of json you get from it it terrifying. If you do play, I found when piping though jq it could not keep on on my machine, but a jq clone called jaq handled it with no problem.
- lagniappe 2y agoSounds like they're building something like what Phind.com does
- t00ny 2y agoOr maybe something like Perplexity AI.
- mritchie712 2y agoChatGPT already has browsing, it's just way slower than Perplexity. I'm impressed how quickly a Perplexity search runs and integrates the results into the LLMs response.
- havaloc 2y agoPerplexity is pretty amazing. I've tried asking really obscure questions and it just answers them almost immediately and with decent sources every time.
- kome 2y ago[flagged]
- seydor 2y agoChatGpt will happily sell you snake oil wrapped in your favourite flavor of BS
- wildrhythms 2y agoWhat makes you think an AI can't be gamed in the same ways?
- jsheard 2y agoI think calling it AI horsepiss implies it will be just as bad, just in different ways (and I agree)
- hoistbypetard 2y agoThat's overly pessimistic. It will be gamed to the same *ends*, but you'll have to game it in slightly different ways.
- marginalia_nu 2y agoSearch engine manipulation isn't really even a search problem. It's a Google problem. Google's struggle with search engine manipulation begins and ends with their advertisement based business model. As long as their main source of revenue is the very ads on the websites that pollute their search results, they will never find a solution to the problem. Search engine spam increases the search count (apparently an important KPI), and it also increases ad impressions, both on the SERP and on the results pages. This is a conclusion that is straight from Page and Brin themselves[1]. [1] http://infolab.stanford.edu/~backrub/google.html#a http://infolab.stanford.edu/~backrub/google.html#a
- filleokus 2y agoI'm taking this opportunity to once again ask for the widespread adoption of the Name Constraints extension in x509, and subsequent roll-out of constrained intermediate CA certs signed by a publicly trusted root. Would be so convenient to have an intermediate CA cert constrained to *.my-name.com to avoid situations like this. Being forced to either use a private PKI infrastructure or using wildcards to not leak host names is so annoying.
- supriyo-biswas 2y agoLet’s encrypt and similar ACME compliant services allow you to get wildcard certs through their DNS-01 challenge.
- lxgr 2y agoA wildcard cert is an unnecessary risk, though. Just because I trust a server to hold the cert for preview.example.com doesn’t mean I’d want it to be able to pose as prod.example.com, for example.
- nlitened 2y agoWhy? As I understand it, the domain owner can assign the name you “trust” to any server already. Might as well trust all names by that domain owner.
- freedomben 2y agoBecause if your one wildcard cert gets compromised somehow, the attacker can now impersonate every subdomain of yours. Consider what happens if there's an old test box called daves-test-box.example.com that has a copy of the wildcard cert valid for *.example.com. Dave quits and never updates his box. Eventually an unpatched CVE gets used to steal the cert. Now the attacker can phish or MitM your users of www.example.com using the stolen cert and browsers will trust it. If you'd instead of wilcard certs used specific ones, then the only thing the attacker can do with it is MitM or phish the users of Dave's test box, which is approximately zero. There are certainly other strategies and best practices that can mitigate the risk in this scenario, but not using wildcards is a good one to include.
- seydor 2y agoIsn't that conflicting with their microsoft deal?
- jsheard 2y agoUnless this is the Microsoft deal, and they're using Bing as their indexing backend.
- seydor 2y ago"chat gee pee tee search" is a terrible name. In comparison, bing is genius
- Horffupolde 2y agoI don’t know. ChatGPT has sticked.
- lxgr 2y agoI don’t know – Microsoft has been pretty efficient at poisoning the name “Bing” for me, and I was initially neutral on it.
- seydor 2y agoHow about 'bong'
- spacebanana7 2y agoAfter a certain point of popularity, bad names become good names. Their awkwardness and abrasiveness become unique and distinctive.
- arcticfox 2y agoI don't know about that, I always hated the name Bing...and I worked there and thought the product was actually pretty good. IMO Microsoft should have bought search.com and competed with the verb Google.
- 2y ago
- lokicik 2y agoDoes this mean that the next gpt model could be online, like Gemini?
- unraveller 2y agoSearch chatgpt ah but you repeat yourself, we already use LLMs to replace this antiquated notion of loading webpage snippets and pointing me in 5 different directions. I'd say "just chatgpt it"? is closer to being in the lexicon and this url just doesn't roll off the tongue >"here let me search.chatgpt that for you" There I was hoping sama-gpt5-chatbot had some creativity chops for naming new things but they must have decided not to use it this time.
- snapcaster 2y agoIn my experience LLMs are terrible at naming things, usually some combination of cringe and silly
- shawabawa3 2y ago> >"here let me search.chatgpt that for you" Why would you say it like that though? You don't set "let me google.com that for you" In the same way you don't say "let me chat.openai it for you", likely search.chatgpt.com will just become the new default interface to chatgpt, and "to chatgpt" something will mean to look it up on search.chatgpt.com
- asadotzler 2y agoToday's chatGPT and today's (not OpenAI) web search are very different creatures and experiences. Are you saying that today's chatGPT experience will be abandoned and replaced with a web search experience? That seems terribly unlikely to me.
- robofanatic 2y agoSo does that mean my chat will be publicly searchable?
- bossyTeacher 2y agoThey would be open themselves to a class action lawsuit and no one would use their LLMs so I doubt it
- nlitened 2y agoI am not from the US, is a “class action lawsuit” supposed to be something scary? From the instances I’ve seen over the years, these lawsuits result mostly in tiny $22M fines and a slap on a wrist.
- kolinko 2y agoNo
- bossyTeacher 2y agowhat's the point of this post?
- belter 2y agoSomebody has PUT options on Alphabet? :-)
- surfingdino 2y agoIt's a clever way of getting around the accusations of stealing content. They can say that they are scraping it to make it searchable, just like Google.
- toxik 2y agoIt will be interesting to see what happens to copyright claims against ChatGPT. Google can just remove claimed content from its index, what will OpenAI do?
- surfingdino 2y agoUse their legal and PR fund to fight back.
- kweingar 2y agoIf all you have to do to beat these claims is throw money at the problem, then why haven't the other (better funded) search engines done that?
- surfingdino 2y agoClogged arteries, i.e. layers upon layers of risk-averse and clueless management. Top management paralysed by what the stock market may think of their ideas. You could also ask why Bing has been forever underperforming despite all the cash Microsoft has throw at it so far?
- kweingar 2y agoI'm talking about the copyright claims. If Bing and Google stand down when people request their sites to be removed, how would OpenAI have the resources to push against that?
- surfingdino 2y ago
- jmacd 2y agoAltman has said explicitly on several podcasts that they are working on search and that it was something he is particularly excited about. I am guessing that this falls under the "we will steamroll" clause of OpenAIs gradual move towards AGI.
- maxdaten 2y agoOn the other side he said, the "next Copy of Google Search" would be boring. So let's see what they try to make differently https://youtu.be/jvqFAi7vkBc?t=4681 https://youtu.be/jvqFAi7vkBc?t=4681
- unraveller 2y agoI can tell you that a piece of trillion dollar pie does not taste boring.
- alexcanton 2y agohe did also say they weren't going to try and make their own chips in an Oxford interview. I think he is known for saying one thing while doing the other. Like the former board said, he isn't always candid.
- siva7 2y agoImagine being an innocent developer trying to spin up some internal dev tooling and accidentally landing on the front page of HN to be misinterpreted as an attack against google which could affect both stock
- belter 2y agohttps://news.ycombinator.com/item?id=40234028 https://news.ycombinator.com/item?id=40234028
- wouldbecouldbe 2y agoAh well I like your joke, but I know GPT is moving fast, but it would be unlikely and innocent dev can change DNS records of chatgpt.com
- unglaublich 2y agoIsn't that what DevOps is supposed to be?
- kevindamm 2y agowell, I mean, there's a review process too, if it's done right? Something business critical (like code, keys, and I'd include DNS records) should still need two pairs of eyeballs and a process before any changes are made. DevOps doesn't necessarily mean unrestricted control.
- tasuki 2y agoOnly the guilty ones can?
- skywhopper 2y agoI hope they don't use this level of DNS to set up internal tooling.
- beambot 2y agoSama & Lex Fridman literally talked about disrupting search in their latest podcast.
- deleted 2y ago[deleted]
- andrewstuart 2y agoMost underwhelming product launch ever.
- deleted 2y ago[deleted]
- EZ-E 2y agoWasn't ChatGPT already doing searches for you when relevant? For example if you asked for recent news? I can't get it to do it again for some reason it will share month old publications right now.
- kolinko 2y agoThat was through bing. And bing uses similar algorithms to google for ranking. OpenAI can do way better.
- ramshanker 2y agoJust today, I was having difficulty with printing in AutoDesk software. Copilot(Previw) was right there at the bottom, I opened it and asked for steps to solve the issue. It told, in steps, exactly what to do, which worked as instructed. Solving my issue. The original article from AutoDesk was also linked. My immediate thinking was search is doomed. Compare this to what I would have to do with google. Open browser, type the query, guess which of the top 10 results are likely to answer the issue I was having. Click few link to open them in new tab. Read though it to see if the correct problem was being discussed. If not see another link in the top 10 list. Repeat. I even thought where in that interface, Microsoft could place the future ads. It's totally in the realm. EDIT: At this point, ChatGPT is basically old school "I am feeling lucky" on steroids.
- kevindamm 2y ago> Compare this to what I would have to do with google. Open browser, type the query, guess which of the top 10 results are likely to answer the issue I was having. Click few link to open them in new tab. Read though it to see if the correct problem was being discussed. If not see another link in the top 10 list. Repeat. This is outdated. I repeated your experiment with Google query [how do I print from Autodesk] and the top result is the step by step instructions (not a link but the actual instructions, with a link to the source following). The second result is a link to Autodesk's own help docs for the print function. No ads above the fold. But you make a point that people will keep assuming what they want to anticipate how the search will unfold, and I admit this is in part due to the enshittified commercial and news-related (and other) results, the bias is coming from somewhere, right? But I would encourage anyone to at least verify this assumption before posting it as fact.
- ramshanker 2y agoWell, that was me trying to simplify the query for HN audiences. Let me recall the actual conversation. Me: How to add missing monochrome.ctb file in autodesk dwg trueview? [Upto this part google is same. Pointing to the same link, but not showing any steps though.] Copilot: Here are the steps. Put them here in this folder...... Me: I put it there as suggested. Still didn't work. How to make tureview refer another folder location? Copilot: Here are the steps. Me: It worked thank you. [I really thanked it ;)]
- oleksiyav 2y agoA new search system is coming. At least I've already seen about 50 visits to my website from ChatGPT.
- throwaway143829 2y agoWhy do you think this implies they are building a search service rather than just scraping your site for more training data?
- oleksiyav 2y agoThat's an assumption, as they could easily develop a search engine and incorporate the same advertising model used by Microsoft Bing. I've noticed an interesting pattern: before releasing LLaMA 3, OpenAI provided access to ChatGPT 3.5 without requiring registration. Meta might also follow this path with its own search engine. Did you know that you can now ask questions directly on Instagram and receive answers from Meta AI using LLaMA 3? Why go elsewhere for information when you can easily find it in the app you use every day?
- ChildOfChaos 2y agoThere is a rumour of an OpenAi event apparently next week, so likely what this is. Some creators also seem to suggest they know what is going on, youtube mattvidpro hinted at it when talking about the gpt2-chatbot, he mentioned he knew something but couldn't talk about it or get sued.
- alexcanton 2y agois there a source for this outside 1 guy on twitter? If they were holding an event I would imagine invites would have gone out a while ago like their dev day..
- mnk47 2y agoFWIW, that one guy on twitter is spot on more often than not in his leaks and predictions.
- b3ing 2y ago[flagged]
- deleted 2y ago[deleted]