This is perhaps the most basic way of sandboxing hostile JS that can be explained in about 2 paragraphs. I thought they did something clever to stop crypto miners or potential chrome bugs that allow escaping the sandbox. Disappointing
If you’re not running PGP commands yourself to encrypt and read your messages, it’s not secure.
Also no OS integrated system that does this for you automatically / conveniently has ever existed that was widely adopted because that application would have the ability to read all of your private communication, and impossible to install on an uncracked phone.
Still it would take literally minutes to vibe code an app that sits in front of a WhatsApp client and automatically handles these things. Maybe the future is just to write it yourself (not the security) so you can trust it and it’s convenient.
No one gets paid to not introduce inefficiencies, so this actually incentivizes sloppiness. You would need to introduce a post mortem process where the engineers who shipped the problem had to talk about what produced it and why in order to discourage it or something
This is awesome and very much needed. Sending massive get requests always felt like shit and support for body parsing of GET was all over the place. I hope it will be adopted quickly.
Very telling they only use one AI provider here as the models are getting much better at detecting this nonsense and avoiding it.
Additionally this is obviously AI generated and nothing new since 2024 when we all collectively understood that prompt injection is a thing. Would like to see a bit more real effort in a post than just a few million tokens spent.
I think this is the kind of thing that can be entirely replaced by vibe coding now. It takes a few minutes for AI to make a dashboard like this and then it can be custom made to the users liking. It’s hard for me to see any value here above what currently exists.
I think this kind of overly dramatic writing makes me struggle to respect the arguments in the piece. Like the blog writer has this style like they’re documenting the collapse of humanity or something when really it’s just a massive cloud company taking some direction that may be suboptimal. I understand this tone can be helpful to drive effective change but I think it should be reserved for situations where people are actually suffering as opposed to when extremely well paid people engineers are laid off.
Preaching to the HN choir - great for upvotes but does anyone read anything new in this? Feels like I’ve seen the same article about this every month and I don’t think business people care.
I do wish they updated this to 2026 google! I don’t think it would be nearly as interesting though since they do get rid of most red tape but since everything is enterprise scale, it’s never easy.
I recommend the glove 80 for split ortholinear mechanical keyboards. It’s got plenty of of keys for coding. Also you can mount it to camera tripods and actually use it when tilted which really improves ergonomic factor.
I really want this era of AI generated writing that reads so poorly to end. Or at least society should be ashamed of publishing this content.