well that either sucks for them or it's pathetically petty, cause it is clearly positioned in a way and on a website to look like AI slop as best as it can
if I were a serious cartoon artist, I would complain for taking the piss
I'm looking at the generated PHP code they claim to be insecure and I can't see it. The client_secret is defined inside the file as a constant, ok it's sloppy and could be better, but this is not a vulnerability.
They claim the extract line is insecure, but never explain why, and without showing the rest of the code (what is $requiredHeaders? If it's sanitized this is a non issue) you can't even tell if it's secure or not.
The variable names being wrong (the $PayPal- ones) is probably just a "mistake" the model made, but it's not a vulnerability either.
This article could be just "burglars are burgling in your neighborhood, install our burglar alarm" from crowdstrike just as well.
> Do not use extract() on untrusted data, like user input (e.g. $_GET, $_FILES). If you do, make sure you use one of the non-overwriting flags values such as EXTR_SKIP and be aware that you should extract in the same order that's defined in variables_order within the php.ini.
Looks like calling it can shadow previously defined, unrelated variables?
Edit: On re-reading your comment, yes, if $requiredHeaders is previously sanitized then the code is technically safe. But it still presents as an insecure coding practice.
It does not, the protocol just defines the way the bits are exchanged.
It's the torrent sites that can deal with bad torrents and your hunch is correct, the only way to avoid malware is not downloading suspicious torrents (or to be precise, not executing the downloaded files, downloading the torrent is not harmful even if the file is).
What's the risk in giving someone a deepseek api key that is loaded with $5? Five dollars in deepseek tokens is enough for like a week of constant use.
Yeah I don’t see why the idea was thrown out so flimsily. Surely you can set up a sandbox possibly a wholly separate account from the corporate one and give that to the candidates
Same. I'm in the US and do not use Amazon at all. Life, and the products I buy, actually got much better. Amazon is overpriced and low quality. Pretty much everywhere else has better products, lower prices and free & fast shipping at this point (Walmart, Target, Home Depot, direct purchases, etc.). Pretty shocked at all the people defending Amazon here.
It depends on what you're buying. I've found plenty of items that are cheaper on Amazon with free shipping, than picking them up in store at Walmart. Which is just crazy.
Yeah, here in UK I have completely stopped using Amazon. Argos, John lewis and other retailers have good enough delivery and return policy. I don’t have to query about fake products when buying from them too!
If I want cheap stuff, I simply go to temu or other cheaper supermarket. Amazon does not add any value.
I'm in Germany, and I usually just find a good option outside Amazon, then look for the best deal, which is rarely Amazon. Thanks to express checkout (Google/Apple Pay or PayPal is almost always an option), it's pretty much zero hassle.
BUT, if I care more about getting something real fast than the quality, or if I don't want to pay 5 EUR for shipping (especially cheap stuff), I'm not aware of any competition Amazon has here. I use it quite a bit still, for these two use cases.
You gave me the idea to buy something I was thinking of ordering from Amazon (a Time Timer) and see how it compares. The timer I got is $24.95 on their site, 15% off welcome discount (-$3.74), +$10.00 shipping, and "orders ship within 3-5 business days." On Amazon they have the one I ordered for $19.95 list price minus 15% = $16.96 and I could have it within 1 hour for $9.99 (lol... I've never seen that option before) or tomorrow for free, although I do have Prime which is why that's an option. I do like to buy a lot of things directly from their original sellers or a specialized store (Loop earplugs, or speed cubes from TheCubicle, electronics from adafruit or jameco or digikey, etc...) but it shows you a big difference in service level.
Amazon delivers next day or the same day many of the items if you have Prime.
I tried many times to order something directly, and most of the time it’s the same price and longer shipping. So, for me in terms of convenience Amazon wins.
What if you want to buy simple Chinese plastic stuff (e.g. someone elsewhere mentioned zip ties)? The manufacturer is somewhere in China with a minimum order of 10,000, so no, you can't go to them. Amazon is often the cheapest source for this, cheaper than any local retail.
I prefer online retailers because there is a lot more choice there. I can't find an inflatable knee pillow in local stores. The supermarket close to me even stopped selling batteries.
This is true. Many "weird" purchases that used to be available from someone local are now impossible to get. Not sure about the supermarket not stocking batteries though... That's just insane.
I work at a grocery store that used to sell batteries. They stopped. If I had to guess, I'd say the number of batteries that were thrown away due to being past the date on them had a lot to do with it. Nobody ever bought them. Everything important is rechargeable these days, with the possible exception of remote controls (which shouldn't need replacement batteries at all: remember solar-powered calculators? Put that on a remote and just leave it face up to recharge when not in use)
You have a small shop that sells zip ties? The only place I would expect to find something like that is a big box store or a hardware store (which are all chains now).
Buying from a big box store still does support local jobs though
Like yeah, Walmart isn't really much better than Amazon in the grand scheme of things, but I would rather people be able to get stable employment at a Walmart store than have to fight it out as gig workers delivering for Amazon.
Honestly? AliExpress wins for this stuff. The shipping is always much more expensive than the actual items, so I batch purchase stuff like this. Funnily enough, sometimes, despite paying only one shipping cost, it arrives in multiple shipments.
I'm not sure about where you are from, but in Australia I've recently had just as reliable service, shipping costs and delivery times from individual brands as from Amazon.
Amazon used to be better, and they still have the logistics network to be better, but they've dropped the ball. If this downward trend hasn't hit you yet, it's only a matter of time.
Thousand of long-tail ecommerce sites focused on narrow markets; buying things directly from the supplier; using other large-scale marketplace e-commerce sites and aggregators like Walmert, Newegg, Rakuten, etc.
AFAIK, they are two completely disjoint sets of individuals. But could you clarify what that has to do with the goods and services offered by large publicly-traded firms that members of those families happened to be the original founders of?
I don’t understand the question. The reasonable alternative is to not use them and buy stuff elsewhere. There’s a million places to buy stuff. I haven’t ordered anything from Amazon in months.
How often do you buy stuff online? It’s not a factor for me. My last online purchase was water filters. Got them from Home Depot, easy peasy. Before that, I’m not sure, it’s been a few weeks at least.
In any case, there’s a big difference between “there’s no reasonable alternative” and “there are plenty of reasonable alternatives but I like Amazon more.”
At least 3-4 times a week, ranging from groceries to various household items, like water filters and what not.
I mean, different people have different behavioral patterns and preferences, if Amazon is not for you, it’s fine. It definitely works for me and saves me a lot of time.
More often than not. Why would I spend my valuable time at a big box store like Home Depot that might not even have what I need at that store? They are all functionally equivalent members of the oligarch class.
Home Depot has an online store. And almost ubiquitous free shipping without any subscription.
I didn’t order those from Amazon because their search sucks, I’d have to pay for shipping or find something else to bundle into the purchase, and I don’t trust them with anything that goes on or in my body. At least with Home Depot, if I end up in the hospital because their water filters poisoned me, I can point to their name on the label and sue them.
Yeah, I'm with you. I also have a very specific set of requirements, including only buying from companies headquartered in the Seattle area that have at least one 'o' in their name. That narrows it down to Amazon and Costco for general merchandise. But I'm also considering adding a criterion that the vendor's logo needs to include a swoosh or arrow of some kind, which would eliminate Costco, at which point I'll be stuck only with Amazon.
I know people are going to chime in and say "the fact that all of your personal criteria align maximally with the strengths of one particular vendor doesn't represent an uncompetitive market, but to the contrary, represents an extremely competitive market in which all of the participants are distinguishing themselves by maximizing the value they offer to different market segments with diverse preferences."
But as a presumptuous narcissist, my expectation is that everyone in the market should be optimizing their business practices to satisfy my preferences in particular, rather than limiting my options by trying to appeal to anyone other than me.
Just so we are all on the same page, capitalism is when:
.. the "means of production" (factories, employees, computers, tools, etc.) ..
.. are "privately owned" (as opposed to state owned) ..
.. for "profit" (so you do not have to live paycheck to paycheck).
This is a good idea, because otherwise the state would have a monopoly on everything by definition. Monopolies can form under capitalism, but that's where the state should take action. Remember when Standard Oil became a monopoly and was broken apart by the state under capitalism back in 1911? A failure of the state isn't a failure of capitalism, which is also why I can't understand people wanting communism, which would give the state a monopoly on everything, when what we are witnessing is already a failure of the state.
reply