Hacker Newsnew | past | comments | ask | show | jobs | submit | highphive's commentslogin

They can mitigate it, if the user refuses to oauth into something that asks for too much scope. Most users just click "accept" (this claim based on no data at all).


> at least one Vercel employee signed up for the AI Office Suite using their Vercel enterprise account and granted “Allow All” permissions. Vercel’s internal OAuth configurations appear to have allowed this action to grant these broad permissions in Vercel’s enterprise Google Workspace.

https://context.ai/security-update


So it's not so much a problem with OAuth itself, but with the way it was implemented here?


For folks interested, Obsidian also has a free sync option that just uses your cloud drive, you just have to set it up yourself.

It's pretty simple. Just get Google Drive Desktop to mount your Google Drive to your filesystem, then point obsidian to work within that mounted directory.


I ended up just paying the $4/mo for syncing my personal vault, mostly to support the project but also because it's nice to not have to think about it.

At work, we just have what we call "brain" repos where we all just dump notes and commit straight to the main branch. They are just collections of markdown files that we use Obsidian to view/edit.


There's also obsidian livesync which is really great. A bit overcomplex but when you get the hang of it it works great. You can even see yourself typing from another connected client. Very impressive.


Google Drive Desktop will only help if you're on macOS or Windows. I know it's technically possible to mount GDrive on Linux but it's neither pretty nor user-friendly.


You can also use Dropbox.


People always warn that this setup can corrupt your stuff, which I understand you definitely wouldn't want to try to share Git via Google Drive.


Obsidian shows a warning about this. But the only issue it's pointing out is that mixing Obsidian's built-in sync with something that syncs your files is likely to cause problems. Otherwise it's a perfectly safe and normal way to sync.


That's a good point, you could surely model full chess in a single dimension, it would just be that each pieces' movement rules would be more confusing

E.g. a pawn can move exactly 8 squares towards its opponents end (16 on its first move if no piece occupies 8 squares away), but can only capture 7 or 9 squares forward (with some extra modulo math to prevent wrapping)


Yeah and it'd be even worse if you want to flatten out the piece colors and types into the 1D array.


The question isn't really what's better practice, the question is whether the code follows the prompt. The first example does not.


I think a lot of people/companies are integrating workflows like that, it's just separate from the point of agent pair coding.

The interesting thing here is agents working together to be better at a single task. Not agents integrated in a workflow. There's a lot of opportunity in "if this then that" scenarios that has nothing to do with two agents communicating on one single element of a problem, it's just Agent detect -> agent solve (-> Agent review? Agent deploy? Etc.)


I used to work for a company whose primary product was a web server that companies could buy and run for use purely internally. Our pages involved a lot of data entry that could be lost, so that sort of pop-up can be handy in that situation as well.

Of course a better solution wouldve been a program which doesnt so easily let you lose data in the first place, but this software was long past that.


It's pretty cynical to call that knowledge useless. It's learning to do a thing you want to know how to do. That has use to you and often those around you. As for hard engineering problems, just because they're more complex doesn't make the knowledge less available. There's a massive amount of engineering knowledge free online, it only takes the initiative to go out and use it to learn it. The curriculum of many entire university degrees is now available for free online in a way its never been before.


Awesome idea at a pretty reasonable price. Regarding the video... they might want to invest in some acting lessons haha.


Yeah we are so bad at acting :)

We even knocked over our camera while filming the shot referencing the BitBucket "Spooning" video: https://dl.dropboxusercontent.com/u/338114/gifs/by_me/kickst... reference: http://www.youtube.com/watch?v=dYBjVTMUQY0


I liked the video. I hate it when people take themselves too seriously.

Good luck to the team.


For me, it popped open an email to them in outlook. Not exactly what I was expecting or what I wanted.. I couldn't figure out how to make my own graph...


Howdy,

If you'd like to play with hGraph check out a tool we made during development.

http://hscoremixer.org/

We created this tool for physicians to give us feedback on the engine that drives hGraph. You can define what is considered "healthy" and rank each metric's importance in your overall health.

Put in your numbers and see how healthy you are.

Eric


What's the logic behind the alcohol part in this? Mine goes red when I change it from 4 drinks a week to 1... surely the latter is healthier? :)

Great design by the way!


Also fun is happiness, if you're too happy you're in the red!


Yes, some of these are a bit unreasonable in the tool. ... but we really want you to drink! ;)


I assume the ranges are entirely pulled out of thin air? Or do you really assume anybody who exercises less than 20 hours a week is unhealthy?


lol 14 stone is considered underweight on this...


"Out of interest, what kind of open source solution do you envisage when you say that "DLNA will die an instant and painful death the moment a truly open solution is adopted"? Would it involve hardware, or something installed on the TV, or something else entirely?"

Did you click the link? This is an example of a truly open solution, and it involves hardware.


Did you click the link? This is an example of a truly open solution, and it involves hardware.

And it wouldn't lead to me replacing my DLNA-based setup, hence my question.

I also question your description of "truly open," although that's me being a bit Stallman, granted.


Isn't Miracast the open solution that is open and supported by many?


Miracast isn't "open" - devices require certification, and the Miracast and Wi-Fi Direct specifications cost $200 each. It's also supported by relatively few devices right now (since, you know, certification), and I seem to recall there are some compatibility issues between manufacturer implementations.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: