Daily Edition · Page 2

THE DAILY INDEX

Technology, AI, software, security, crypto and business

PROGRAMMING, DESIGN & DATA SCIENCE

TLDR

YOUR API SHOULDN'T REDIRECT HTTP TO HTTPS

The common practice of redirecting API calls from HTTP to HTTPS should be reconsidered. Many programmatic API clients don't keep browser-like state of things like HSTS headers they have seen. The usability-security tradeoff argument doesn't apply as APIs are mostly consumed by other software. HTTP interfaces should be disabled entirely or return clear error responses for unencrypted requests. API credentials sent over unencrypted connections should be considered compromised and revoked.

EX-OPENAI BOARD MEMBER REVEALS WHAT LED TO SAM ALTMAN'S BRIEF OUSTING

Former OpenAI board member Helen Toner revealed new details about what led to CEO Sam Altman's ousting in November in a recent interview. The board had apparently learned about ChatGPT's release on Twitter. Toner says that Altman had lied to the board multiple times. Altman was reportedly withholding information and misrepresenting things that were happening in the company for years. His lies made it difficult for the board to make decisions, leading them to think that he wasn't the right person to lead the company to AGI.

TLDR IndexPage 2