Fair enough. Never trust client-submitted browser form, but always trust LLM-submitted form.

I think it will be longer than 12 months, if ever.

> To join the S&P 500, a company must demonstrate positive GAAP net income in both its most recent quarter and the sum of the trailing four consecutive quarters

Same here. I was so upset about the prospect of my index funds / retirement savings being force fed 100X revenues investments in large size that I emailed my Representative and both Senators. And to add to the irony, I used ChatGPT to help me write these letters.

If only! Many people have limited options for investing based on their employer's allowed plans that match 401k contributions

They’re usually mutual funds managed by a brokerage or a company like Vanguard. Those funds often will have different management strategies than S&P 500.

If it's not in a tax sheltered account that can generate a large tax bill.

> In 2016, scientists published two studies regarding human embryos developing for thirteen days within an ecto-uterine environment.

> […]

> A 14-day rule prevents human embryos from being kept in artificial wombs longer than 14 days; this rule has been codified into law in twelve countries.

https://en.wikipedia.org/wiki/Artificial_womb

Seems like the answer is no, then.

Even if you use a common subdomain, anecdotally I get orders of magnitude less bot traffic than not using a wildcard cert.

Please someone make a Roku remote with a physical keyboard.

On my rokus, I am able to use my phone as a remote via the roku app. This includes typing on mobile via my phone's keyboard. Makes logging into things much easier.

AppleTV is like that too. It's nice being able to use the password manager on my phone rather than have try to enter some long complicated password a letter at a time.

You can probably do it with a keyboard paired to a server/RPi that emits the keystrokes to the Roku ECP API, if having that second device is acceptable.

This might be possible now. I think the better option is having a hardware device that acts a bridge between a bluetooth keyboard and the Roku.

Rokus have a rest api that accept all the navigation and text inputs you'd do with the remote.

in high margin businesses, customer acquisition is everything.

If your product becomes commoditized, it’s no longer a high margin business

> If your product becomes commoditized

Depends on the product - whether protein bars, salty chips, cellular service, or IPhone or something else. If your product has a flavor, it’s never going to get commoditized. Coke still tastes better than Pepsi.

This is the power of a brand. Kirkland and some private label products are literally the same as the competitor products and yet are perceived differently. Even in your Pepsi vs Coke example, Pepsi routinely wins in blind taste tests but there are more "Coke people".

It will be interesting to see if the LLM companies can establish their own "brand" and how they will do that. LLM voice is a thing but not sure if it's a good thing people will use to hang their self identity on. Distillation of models and constant training also make this complicated. Claude code is winning on harness and ux right now but it seems precarious and also easy to commoditize. I think elon tried to add branding to his chatbot pretty intelligently by being iconically crude/evil/"anti woke" since it's both highly visible and less likely to be copied.

We live in fascinating times!

You can have a high accounting margin and a product with price equal to economic marginal cost—externalities, cost of capital, barriers to entry… DRAM is a commodity but has (currently) a high margin.

And Google acquired you in 1998 with search.

fair enough, but what's the actual point of 2FA if it's so easy to override?

the alternative is people losing their accounts and people aren't willing to allow that. i do think that apple does this a little better where they try everything to contact you in every way they know and it takes a week to get access. at a minimum to change your email it should require a week of waiting to see if the user can access the original mail to the hand off.

In some cases, checkbox-compliance with customer requirements.

Personally it seems mostly about prizing the phone number out of my cold clammy hands.

I recently tried to access my google account on a new browser install. Google did not believe my login/password was sufficient, and insisted on me surrendering my phone number:

> To help keep your account safe, Google wants to make sure it’s really you trying to sign in [...]

> Enter a phone number to get a text message with a verification code.

I have never given my phone number to Google for that account (I have a separate account on my Android phone).

So how on earth this will "make sure it's really you" I have no idea.

I am unable to access Google from my new browser install so am stuck with using my old one for anything which requires a Google login.

I guess at some point I'll try and resolve it by adding a recovery email or something, but.. my inclination is to throw Google and the account in the trash right now.

I deleted my Google account but I’m pretty sure you can configure a Passkey on the device that lets you log in, and have that passkey in a password manager you’ve logged into on the new device and that will be considered good enough.

Setting aside my opinion that it’s asinine to upload passkeys to the cloud :)

I agree, but even this use case isn't the most wasteful. The interwebs says Agentic consumes 50% of token use, but I'd hazard this number is north of 90% for many shops. My cynical view of Agentic is its sole purpose is to make "number go up".

Look at me! I'm the smartest guy. I've wasted 10M tokens! No one has wasted more!

I bet they'll ultimately reverse course on this, or the there will be a bun / zig fork becomes the de facto bun. Despite what the influencers say, I'm convinced you cannot vibe code a conversion this big. It will need a ton of human intervention. And for brand narrative reasons, Anthropic won't commit to such a path.

It depends on how thorough the test infrastructure is I think. Something like curl with its immaculate tests could probably get autonomously ported if you threw infinite tokens at it because you have deterministically defined what finished looks like. But I think you are likely right in this case.