Eh, not really. Google failed to launch first out of internal political dysfunction and then made a crash effort to launch something to counter the first ChatGPT release.
I highly doubt that the concerns of internal political commissars were holding up this particular openai release.
Because most places never needed kubernetes but used it to put their technical debt on a credit line. So what do you do when they try to collect? Well you just take out another loan to pay off the first one.
Oh there's more luck required than that. You have to get lucky many times to win at a 10x stock.
- You have to be lucky enough to find it when it's cheap.
- You have to be lucky enough to hold on to it even if it loses money
- You have to be lucky enough to not sell it when it's at only 5x and hold off for the top
- you have to be lucky enough to have bought enough initially that the return is meaningful to you
These are the thoughts that made me clean up how I invest and stop thinking I'll get lucky at some point just rolling the dice. It's way more luck required than just buying in early.
The 4th point (bought enough that the return is meaningful) is the killer one. There’s always “that guy” that brags about buying TSLA or NVDA in 2015 and having 100x his money. Then it turns out he only bought like $500 worth. Sure, $50K isn’t nothing, but it’s not going to be meaningful to the retirement of someone making tech worker wages.
Of course, the reason he didn’t buy more was because he knew it was a lottery ticket and putting most of his money in the S&P500 in his 401k was obviously more prudent.
What's to stop me from installing custom certs and MITM your login session proxying the info. Or an extension to harvest the data after you login. I'm pretty sure if I have root it's game over one way or another. The surface is massive.
At that point you've done something much more invasive and detectable than exporting a .env file and you've walked away with a very short lived token. There's always "something more an attacker can do", I'll stand by the view that requiring further authentication to perform interactive actions and pushes is worthwhile.
I think this thread is missing that coding is a pretty small part of running a tech company. I have no concerns about my job security even if it could write all the code, which it can't.
