selinkocalar

8 ms·

1.
by selinkocalar 9mo ago
P2P app distribution is cool in theory but the security model gets complex fast. Without centralized review, you're basically trusting individual developers to not ship malicious code.
2.
by selinkocalar 9mo ago
The technical implementation is messy too. Most age verification systems either don't work well or create massive privacy risks by requiring government ID uploads.
3.
by selinkocalar 9mo ago
As someone who's built an entire business on "anti-screenshots" this is brilliant. PDF redaction fails are everywhere and it's usually because people don't understand that covering text with a black box doesn't
4.
by selinkocalar 9mo ago
The M-series chips really changed the game here
5.
by selinkocalar 11mo ago
This is the kind of thing that works until it spectacularly does not. XML parsing with regex is fine for simple, well-controlled cases but breaks as soon as you hit edge cases. We learned this the hard way trying to parse security questionn
6.
by selinkocalar 11mo ago
CLI tools have weaker security models than their GUI counterparts bc the assumption is usually that if you have terminal access, you already have elevated privileges. But in shared environments or CI/CD pipelines, this doesn’t work. An
7.
by selinkocalar 11mo ago
We've seen cases where AI-generated code includes snippets that look suspiciously like they came from proprietary codebases. If an AI model was trained on copyrighted code and reproduces patterns from it, who's liable? The trainin
8.
by selinkocalar 11mo ago
The compute requirements for these models are getting wild!! We're already seeing costs become a real constraint for smaller companies trying to build AI features. And if you're building anything serious with AI, you're basic
9.
by selinkocalar 11mo ago
The combination of LLMs and formal verification tools is pretty interesting. We've been thinking about this for compliance automation - there are a lot of regulatory requirements that could theoretically be expressed as formal constrai
10.
by selinkocalar 11mo ago
Garbage collection improvements are always welcome. We've had some .NET services where GC pauses were causing noticeable latency spikes under load. I think the regional GC approach is potentially promising if it’s for applications with
11.
by selinkocalar 11mo ago
We've experimented with different formats for feeding data to LLMs and markdown tables usually work pretty well. JSON is more structured but harder for the model to parse visually. CSV works okay but you lose a lot of context about wha
12.
by selinkocalar 11mo ago
This is a real concern. We use AI for a lot of our development work now and I've noticed people will be less likely to dig deep into problems before asking Claude. The trick is using AI to handle the grunt work while still maintaining
13.
by selinkocalar 11mo ago
Context management is one of those things that seems simple until you actually build with it. We've run into issues where Claude loses important context halfway through complex tasks. Love the idea of being able to mark parts of the co
14.
by selinkocalar 11mo ago
The concept makes sense but the execution is always where these things fall apart. Most people don't want to manage their own data infrastructure. The bigger issue is interoperability. Your personal data store is only useful if apps ac
15.
by selinkocalar 1y ago
Omg this is so annoying. The number of sites that break basic browser functionality for no good reason drives me crazy. I think its bc they use JavaScript to prevent 'content theft' but it just makes the site harder to use. Like i
16.
by selinkocalar 1y ago
Wonder how they're handling attribution and false positives. Threat intel quality can vary so wildly between sources.
17.
by selinkocalar 1y ago
The sandboxing benefits are real, especially for multi-tenant environments where you can't trust user code. Performance is still going to be hit-or-miss depending on the workload.
18.
by selinkocalar 1y ago
Truly. Most companies are still treating it as a box to check, while figuring out basic data hygiene. Real value is gonna comee from automating specific workflows
19.
by selinkocalar 1y ago
Ok but what if you don’t have a smartphone ?
20.
by selinkocalar 1y ago
The migration costs are probably huge though. Retraining users and converting all the existing documents is going to take years.
21.
by selinkocalar 1y ago
Hmm curious how it handles commands that could be destructive. Like AI suggesting 'rm -rf' commands seems risky without good guardrails.
22.
by selinkocalar 1y ago
2M devices is a maaaaassive attack surface. This is why zero trust networking makes sense. You can't assume the network layer is secure when the infrastructure itself is compromised.
23.
by selinkocalar 1y ago
We've definitely fallen into the trap of performative code reviews where everyone feels obligated to find something to comment on Quickly learned the best code reviews are focused on logic and architecture, not formatting. But it'
24.
by selinkocalar 1y ago
Congrats!
25.
by selinkocalar 1y ago
Real-time usage monitoring for AI APIs makes sense. We've had issues where OpenAI goes down and it takes us way too long to notice because the failures aren't obvious. The cost tracking piece is probably more valuable though. AI A
26.
by selinkocalar 1y ago
We've tried to automate similar processes and always end up needing human review because websites are inconsistent and messy.
27.
by selinkocalar 1y ago
Email infrastructure is one of those things that seems simple until you actually try to do it.
28.
by selinkocalar 1y ago
This is going to break so many things. End-to-end encryption either works or it doesn't. There's no middle ground where you can scan messages but keep them 'private.' Compliance overhead alone will kill a bunch of smalle
29.
by selinkocalar 1y ago
Labor agreements in tech are soooo difficult to monitor. How do you collectively bargain around stock options, or remote work policies, or the pace of AI automation? The traditional labor playbook doesn't really apply here.
30.
by selinkocalar 1y ago
This is exactly why App Tracking Transparency was never going to work. Apple gave users a consent dialog but didn't actually prevent the data collection - they just made it slightly more annoying. Device fingerprinting, session replay,

More ›