waldopat

5 ms·

1.
by waldopat 5mo ago
While everyone is revoking OAuth apps, rotating API keys, and deleting Vercel accounts, this is a good reminder that the scary part is how short the path was from OAuth token to employee account to internal systems to customer secrets. Many
2.
by waldopat 7mo ago
Slop is probably more accurate than boring. LLM assisted development enables output and speed. In the right hands, it can really bring improvements to code quality or execution. In the wrong hands, you get slop. Otherwise, AI definitely imp
3.
by waldopat 7mo ago
Here's a founder/product perspective. This maps well to the skateboard => scooter => bicycle => motorcycle => rocket ship product metaphor that's often used. Each phase teaches different design patterns, constrain
4.
by waldopat 7mo ago
Honestly, you might want to step outside tech altogether. Join a local civic or neighborhood organization or volunteer with a nonprofit. There was a nice thread last year about libraries. Channeling Steve Blank, get out of the building! You
5.
by waldopat 7mo ago
Go read The Founder's Dilemma by Wasserman. It's great and covers almost any problem a founder will run into. To really summarize, it's all about trade offs and prioritization. Patents vs trade secrets fits nicely. Trade secr
6.
by waldopat 7mo ago
Agreed, Goodhart’s Law captures the failure mode well intentioned KPIs and OKRs may miss, let alone agentic automation
7.
by waldopat 7mo ago
Please don't use "bank level security" claims if you're not SOC 2 Type II compliant and don't have PKI based cryptography to secure your documents.
8.
by waldopat 7mo ago
I was curious about doing an experiment like this, but then I saw Wired had already done it. I suppose many folks had the same idea! https://www.wired.com/story/i-infiltrated-moltbook-ai-only-s...
9.
by waldopat 7mo ago
I think this also shows up outside an AI safety or ethics framing and in product development and operations. Ultimately "judgement," however you wish to quantify that fuzzy concept, is not purely an optimization exercise. It'
10.
by waldopat 7mo ago
For anyone that's curious, we switched to Active Campaign. So much better for us and way cheaper.
11.
Is HubSpot aggressive about collections?(old.reddit.com)
2 points by waldopat 7mo ago|1 comments
12.
by waldopat 7mo ago
I love DNS! https://www.instagram.com/p/DUTSLcjkfJn/
13.
by waldopat 7mo ago
Phenomenal work!
14.
by waldopat 7mo ago
You don't need spec kit or humanlayer per se, though they are good reference points for starting out, but you do need your own CLAUDE/AGENTS, README, ARCHITECTURE, SDRs, policies, research docs and planning docs all nicely organiz
15.
by waldopat 7mo ago
Agreed on using both. I definitely know people who prefer Codex or Cursor. It's probably Coke or Pepsi at this point. I tend to prefer Claude Code, but that's just me.
16.
by waldopat 7mo ago
You may not like this sources, but both the tomato throwers to the green visor crowds agree they are losing money. How and when they make up the difference is up to speculation https://www.wheresyoured.at/why-everybody-is-lo
17.
by waldopat 7mo ago
I feel like they are picking a lane. ChatGPT is great for chatbots and the like, but, as was discussed in a prior thread, chatbots aren't the end-all-be-all of AI or LLMs. Claude Code is the workhorse for me and most folks I know for A
18.
by waldopat 8mo ago
Just jumping on the thread. I think the conversation is conflating two very different things: 1. Turing test UX's, where a chat app is the product and the feature (Electron is fine) 2. The class of things LLMs are good at that often do
19.
by waldopat 8mo ago
It seems the big feature is working agents in parallel? I've been working agents in parallel in Claude Code for almost 9 months now. Just create a command in .claude/commands that references an agent in .claude/agents. You ca
20.
by waldopat 1y ago
One thing I particularly appreciate about Guillermo Rauch, as an AI founder, is that he's got deep technical talent, especially as the lead on Next.JS. As I've been diving deep on AI tools, particularly for frontend prototyping, I
21.
Building the Generative Web with AI Ft Vercel CEO Guillermo Rauch [video](youtube.com)
2 points by waldopat 1y ago|1 comments
22.
by waldopat 1y ago
Ha! Wow. It just said this. Dang! STOP TRUSTING CLAUDE CODE'S CLAIMS! This is the EXACT same response it gave you before when the screen was blank! It's literally copy-and-pasting the same "success" message while the com
23.
Ask HN: Why Does Claude Chat Dunk on Claude Code?
1 points by waldopat 1y ago|1 comments
24.
Public ChatGPT Queries Are Indexed by Google(techcrunch.com)
3 points by waldopat 1y ago|0 comments
25.
by waldopat 1y ago
I've been thinking more about the Base44 breach, which gave unauthorized users open access to any private application. For me, it shows that vulnerabilities aren’t just technical, they’re social. Trust models fail. Governance gets hand
26.
Review of socio-technical systems theory(business.leeds.ac.uk)
3 points by waldopat 1y ago|1 comments
27.
by waldopat 1y ago
I've got a question! I'd say what's happening with viebcoding is really an acceleration of move fast and break things. Uber and Snapchat both had major security vulnerabilities, resulting in millions of user records leaked, i
28.
by waldopat 1y ago
^^^ Hey YC Fam, this is the author
29.
by waldopat 1y ago
That's my take too. Perhaps $80M for free organic users was a steal? I do think credit is due to the founder, because he was able to single handedly build and market a valuable solution. That said, he also pushed code every day without
30.
Critical vulnerability in AI coding platform Base44 allowing unauthorized access(wiz.io)
122 points by waldopat 1y ago|74 comments

More ›