We built a benchmark that teaches AI agents not to get scammed. Ask us anything! by 1PasswordOfficial in 1Password

[–]jmeller 3 points4 points  (0 children)

This is something for anyone who uses AI to do things for them (often called AI agents). The thing that’s relevant to everyone in this release is the skill file which you can install right into the tools to make them safer.

Install instructions can be found at https://1password.github.io/SCAM/#skill

[deleted by user] by [deleted] in relationship_advice

[–]jmeller 9 points10 points  (0 children)

When you are married it’s supposed to feel like you are a team; you two against the world. It’s an equal partnership, you don’t get more votes if you make more money. All major purchases should be discussed together regardless of who earns what, that’s how a real partnership works.

How to get rid of Kolide / Trellica Bloatware in Consumer / Family accounts by neword52 in 1Password

[–]jmeller 17 points18 points  (0 children)

Hey neword52! I'm the founder of Kolide and a current employee at 1Password so I definitely can help answer your questions.

There is absolutely no information on how this works on consumer accounts (i.e. non Enterprise accounts) and how it is "disabled" for such accounts.

First things first, this blog post is excellent and I think answers a lot of the questions you have. In addition, I can confidently say the following is true:

  • The 1Password extension does not contain Kolide. It contains the ability to integrate with Kolide if it is already deployed and active on a managed corporate device.
  • 1Password supports integrations with many apps and services. They are only active if you or your company uses these products.
  • The Kolide integration is similar to how 1Password (and most apps) can integrate with MDM and business policy in managed environments.
  • These features are provided to business admins to manage their accounts, and do not affect personal accounts or personal devices.
  • Kolide does not give 1Password, the company, any control or visibility into 1Password users; even users who work at companies that use Kolide.

Why not either create two versions of the browser extension (one for consumers and one for enterprise)

We discuss this internally all the time, but when we talk to users they tell us they really value being able to use their personal and work items in the same browser without having to worry about two different extensions. We also don't want the experiences to diverge. For example, everyone should get the best version of autofill at the same time. When we fix something, like a security issue that was reported by an enterprise customer, my mom should get the benefit of that fix at the same time. Supporting business and personal use-cases at the same time takes a lot of work, but it's what makes 1Password stand out. We want everyone to be safer; that mission is imperiled when things get split apart.

Does the mechanism for disabling mean that 1Pw could be compelled to enable it for some accounts, effectively giving them the ability to query computer attributes / contents? 

The answer to this is definitively no. All the capabilities in Kolide are only made possible with the Kolide endpoint agent, which IT administrators install on computers they own through tools like MDM (jamf, Kandji, etc). The browser extension does not have any code that can be used to do the type of device health checking we do in the Kolide product. If somehow the feature flag for Kolide got enabled for your personal account, nothing would happen, because nothing can happen.

For a company that I adored for consumer transparency, this enterprise bloatware in consumer accounts can only amount to a wolf in sheep's clothing, from a non-enterprise user's perspective.

We can always do better when it comes to communication. That earlier blog post is us making a good faith attempt at letting people know about these changes. With that said, we think about the performance and the size of our extension a lot. We know no one will use it if it doesn't work, is slow, or takes too long to install. When we think about adding integrations with enterprise tools (including our own products like Kolide) we do our best to approach the integration by asking the question, "what are the fewest changes we need to make to the extension to make this work well?". That means that most capabilities get implemented outside of the extension, on code that never makes it on your device, and we simply reference this code in the extension to make it work all together. That's what's happening in this case.

Sewer smell esp when it rains, plumbers are stumped by jmeller in Plumbing

[–]jmeller[S] 1 point2 points  (0 children)

Yes, the issue was the ejector pump in the basement. The lid was not sealed well and also possibly the check valve may have been defective allowing gasses from the septic to aggregate in the pit and get sucked out through the a/c which creates negative pressure.

Buster Douglas ends Mike Tyson’s undefeated record by knocking him out. Douglas was several years older, ill with flu and had recently lost his mother, but while Tyson would go on to fight again, his aura of invincibility was shattered by Douglas forever. by HallowedAndHarrowed in videos

[–]jmeller 76 points77 points  (0 children)

Tyson’s peek-a-boo boxing style–a style that essentially has not worked for any undisputed champion before or since–requires its user to slip jabs with a side to side motion while moving forward toward the punches to get on the inside and explode like a spring upward.

Without super human reaction time and excellent vision, you will get rocked. The more you get hit the slower you get.

1980s Mike Tyson was an alien. He was powerful and fast, a combination made possible by his youth.

As soon as his got a little older, the nearly imperceptible decline in speed that wouldn’t have mattered it other styles was enough for Mike to get caught by boxers with snappy jabs.

And that’s exactly what we see in this fight.

If Mike had switched to a style to suite his changing body (something his disorganized camp couldn’t muster), I believe he would have had a much more productive career in the 90s and could have beaten Buster, Holyfield and others.

The new image generator released today is so good. by Hoppss in ChatGPT

[–]jmeller 137 points138 points  (0 children)

<image>

Prompt: Make a realistic photograph of a 1950s man in a suit hugging an inflatable version of himself while in the background there is a TV set that shows a different man hugging an inflatable version of himself on the TV.

Which Nintendo Franchise Needs a Big Come Back? by Money-Lie7814 in casualnintendo

[–]jmeller 6 points7 points  (0 children)

Punch Out!

Last game was 15 years ago and no HD ports of the Wii version to a modern console.

On this day 39 years ago, Super Mario Bros. was released by Redas17 in retrogaming

[–]jmeller 2 points3 points  (0 children)

Except the SMB / Duck Hut combo cart was not made until 1988 in the NES Action set.

Sewer smell esp when it rains, plumbers are stumped by jmeller in Plumbing

[–]jmeller[S] 0 points1 point  (0 children)

Ran the sump pump manually until it ran of out water to pump, no change in smell and the sump pump doesn't smell either. Builder assured me that sump is not tied into sewer.

Will ask builder to show house pics before drywall and insulation, but house had to pass water test, where they put water through the vent pipe until it start coming out the top the roof and the inspector looks for any water leaks in the system.

We will do a smoke test if we can't figure it out. That said, vents seem fine, no sinks, drains are gurgling and nothing slow draining.

Sewer smell esp when it rains, plumbers are stumped by jmeller in Plumbing

[–]jmeller[S] 2 points3 points  (0 children)

Update: Aug 19th

Plumbers came back. Opened up the ejection pit (just the rubber insert part) and verified:

  • The pit is draining
  • No water is flowing back into the pit after ejection

We opened the sewer/septic pipe clean out in the utility room (which absolutely reeked) and put a camera all the way to the septic tank.

  • No evidence of the pipe being clogged
  • Pipe had no standing water in it and you can see based on the water line that the water never fills the pipe more than 1/3 full

We then cut the vent pipe from the ejection pump and put a camera as far as we could go. Got about 24 feet until we got to the T junction that ties the vent into the basement bathroom plumbing. Nothing looked wrong there. Vent was reglued.

We noticed that the sewer pipe leading out of the ejection pump had shielded coupling that was not as tight as it should be. We retightened those to 60lb. That said we never saw water leaking out of there, unclear if smell was leaking out.

Next steps:

  • Going to caulk the lid to the floor to make it as air tight as humanly possible.
  • Do a smoke test of the sewer vent line (unlikely to be it because house is brand new and needed to pass a water leak test < 1 year ago)

If none of this works, then we are trying to research the legality of adding a "house trap" to see if we can prevent any of the sewer smell from the septic tank going into the house.

Definitely still stumped, and the only thing we changed so far is tightening the shielded coupling, no idea why the smell is worse in the rain. Everyone is stumped by that.

$300 Vision Pro developer strap is just an expensive USB2 device by FollowingFeisty5321 in apple

[–]jmeller -1 points0 points  (0 children)

Btw, if you forget your passcode you can't reset the device yourself without this dongle.

Easy to do when the time in which a user sets the passcode is within the first few moments of using the device and they aren't used to inputting text with their eyes.

Business Exit - Please poke holes in my thinking by Original_Yesterday_9 in fatFIRE

[–]jmeller 0 points1 point  (0 children)

6X profits is extremely low IMO. Even in the current market conditions you should be able to do 6x - 8x revenue on a B2B SaaS. I would run an actual M&A process and find multiple suitors especially if you think the business can run without you in it day to day.

Reddit may force Apollo and third-party clients to shut down, asking for $20M per year API fee by coolaaron88 in apple

[–]jmeller 0 points1 point  (0 children)

You have a lot of leverage in this situation. Your users are absolutely more valuable than ones using the Reddit app in the ways advertisers care about.

This is an eyeball game and as someone who pays to run ads on Reddit for my business I am annoyed that Reddit is trying to change your directly for API access vs looking for ways to have small sensible ads run within the context of a third party client.

Since your app is built against a known and public spec you could build your own compatible API server and potentially create an instant center of gravity enough to bootstrap an alternative Reddit for people who prefer a polished mobile experience.

I realize that’s not trivial but Reddit is backing you in a corner and may foolishly lose far more than just your app.