Tens and hundreds of thousands of dollars for listing. But they make money from the trading and associated services they facilitate, hence the desire to have the largest most liquid stocks.
They vibe coded their system and it showed Adafruit something? Or showed some information with trivial prodding? Sounds like your average cross-tenant leak. Maybe showing more than intended or some caching issue. Many options some not really not fault of Adafruit.
Or someone found server.domain/path/subdirectory/resourceX and was like "shit, I was hoping to find resourceY but I can't find a link to it, I wonder if I just click in my address bar and change the X to a Y", and voila, resourceY is right there.
To some of us, this is elementary navigation. Like going up the stairs if the elevator is out. Often it's faster than waiting for the damn elevator, too.
To others, it's cybarrrr-criiiimeeee!!!!!!11111one
It has a name in the security industry, Insecure Direct Object Reference (IDOR) [1]. Somewhat related to Path Traversal [2]. Unfortunately CFAA is very broad and can be (mis)interpreted in wild ways.
Continental Airlines had an active frequent flyer community. A student emerged as a legendary figure (think "Hunger Games") after she noticed that Continental announcement URLs were numbered sequentially, and a not-yet-released announcement rather unfavorable to current elites was there for anyone to read. Quite the brew-ha-ha. Continental retreated.
She was nevertheless welcome at a frequent flyer event hosted by Continental in Houston, where she beat me at poker.
I don't know the details of the case, but what they worded there is a textbook unauthorized intrusion and a naïve teenager "the door was open" defense.
Mind you there can be nuances, but that quote is like saying "I took their stuff, but it was poking out of their pocket."
I think people have a heightened reaction to threats based on the CFAA for "the door was open" circumstances because that law is so widely known for being used in threats against folks who were trying to ethically report things and in overly-aggressive prosecutions.
Of course, we don't yet know the specifics of this particular case, but I'm willing to lean towards the people receiving legal letters threatening CFAA action until there's more information.
No, it's more like "the door was open" in the context of a storefront. A public website carries an implicit invitation to visit, otherwise web browsing would be illegal.
Or it could be completely innocent like they asked for a list of all adafruit designs, and flux.ai sent back a list of all designs including some private ones, because their filtering is broken.
Or in your pocket analogy , flux dropped their wallet on the ground and walked away, adafruit picked it up and yelled "hey bro you dropped this"
It is bit grey area. You are evaluating something. Do some basic checks. Actually end up seeing something you should not. You stop and tell them to fix it. They then silence you.
Now it is bit questionable should you check things like this during evaluation or not. Strict legal reading probably not. With reasonable customer relations you thank them and put it on top of the priority list. Unless they clearly enumerated everything they got their hands on or tried to run more real scans.
I don't really see anything that really matches their valuation. Yes there is some value in launching stuff in space. But it ain't not trillion.
And for starlink. There is some market. But if terrestrial options got their stuff together it is not that big either. Userbase is marginal. As they operate in areas that are not served by other options. And that market has real limit in size.
And significant part of those in opposition will jump the ship if they gain power. I think there is little hope for system to change unless there is total collapse and replacement.
Company itself really shouldn't. Everyone involved in management from board to executives do. Board operates behest of stock owners, executives operate behest of board. Such to keep their job they have to do what stock owners want. And stock owners either want dividends or growth in some term.
> Board operates behest of stock owners, executives operate behest of board
These are often both weak signals, though. They'll govern very high level decisions, but all the day to day is inside the company. Just as I want a return on the money in my bank account (as I was promised) investors want a return on their money too, and as you say, the executives and board should care about making sure the people who put money into the company are getting a decent deal out of the arrangement.
People have always way overstated the power and scope of “fiduciary duty.” It doesn’t mean you have to redline your company at all times to maximize every single penny in the short term at the expense of all other considerations. That’s just a cultural thing we do in the US by choice
How is that the smart move? It's exactly what OP stated as undesirable for index fund investors. The price discovery of the public markets hasn't taken place yet.
Also reminds me of the shield technology and laser weapons. Making them go boom when put together is a way to get rid of them and ensure certain kind of setting. Even if the whole thing is just weird if think about physics.
Also wondering on this whole review process with someone who wrote it with AI. Even if you comment and noted all issues. Do they have skills or willingness to correctly correct it all? And how many times would you need to keep the loop going for error free outcome? Is there even enough calendar time for that?
Seems like valid test data to include in all projects. It is up to those using the dependency to review it and ensure their own systems don't misuse it.
reply