frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Ask HN: Are people aware OpenAI Dots intercept SSL?

4•Benjamin_Dobell•2h ago
I've already cancelled my OpenAI subscription due to all their recent shenanigans. But before my month ends I thought I'd see what this Dot thing is all about.

First thing I did was install Firefox to test out a project of mine (wouldn't work in Chrome). It failed to connect:

> The cloud proxy uses an OpenAI certificate authority that the operating system already trusts, but the fresh Firefox profile doesn’t. The game’s connection verifies successfully against that existing authority.

> May I add that same cloud certificate authority to this isolated Firefox test profile? Certificate validation stays enabled, but Firefox would then trust certificates issued by the cloud proxy.

Wait. What? No. Of course not.

Aren't Dots ostensibly designed for personal use? Accessing your email and the like. With this thing intercepting web traffic, I imagine almost everyone using these things are in violation of all sorts of policies and agreements.

Comments

Benjamin_Dobell•1h ago
Probably worth noting, yes, I'm aware if you're running atop their cloud infrastructure, OpenAI already technically have access to whatever they like. How would you feel about VPS providers enforcing this same policy?

Yes, I'm also aware that if your data goes to their models for processing, you're of course already sending them your private data too. However, you may have noticed, Codex and the like actually go to pretty great lengths NOT to upload things like secrets to the model. This is the polar opposite approach.

Isn't the idea of having a cloud computer meant to be that it's more than just a model? It provides compute, so it can run scripts locally to filter data etc.

Ask HN: Are tab completion models dead?

3•sandruso•52m ago•1 comments

Ask HN: Are people aware OpenAI Dots intercept SSL?

4•Benjamin_Dobell•2h ago•1 comments

Ask HN: If the models are so good, why doesn't OpenAI just start 100 companies?

654•ex-aws-dude•2d ago•738 comments

Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry

735•petecooper•3d ago•266 comments

Is AI just another get rich quick scheme?

12•jqpabc123•21h ago•20 comments

Ask HN: Kimi Code hit its 5-hour limit after $1.37 of API usage

3•waximabbax•19h ago•1 comments

Median product "lifespan" has fallen from ~4y down to ~1.5y

86•stanislavb•2d ago•32 comments

Flow-state induction via raw mouse input (a working biohacking protocol)

5•rejabusafint•1d ago•0 comments

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming

304•petecooper•4d ago•62 comments

Game trips modem/router breaker

4•simpaticoder•18h ago•2 comments

Took apart Claude Code, then turned it into a free course on harness engineering

4•pauliusztin•1d ago•0 comments

Tell HN: Steamcmd doesn't work on Apple Silicon

5•stdc105•1d ago•6 comments

Ask HN: How do people self host email and maintain deliverability?

7•smithbob•1d ago•6 comments

Ask HN: What router will remain secure during the vulnpocalypse?

7•nonfunctional•1d ago•3 comments

Tell HN: Claude CLI doesn't exit anymore, not even with CTRL-C

8•cromka•1d ago•1 comments

GitHub now uses a generic avatar instead of "Identicons" for new profiles

12•winkelmann•2d ago•3 comments

Ask HN: Apple rejected my dev account enrollment with no reason, what do I do?

5•Mutinix•1d ago•2 comments

Ask HN: How can you retrain in a field requiring expensive equipment?

14•masterchief166•3d ago•11 comments

Ask HN: Which AI Security tool do you use and why for your repositories?

5•BehanPrW•2d ago•1 comments

Ask HN: What do you think about lightweight default games on Linux distros?

4•abakh•2d ago•0 comments

Ask HN: Am I the only dev who, with the advent if AI, want to work in a forest?

15•aledevv•3d ago•20 comments

Toyota Releases Video of Wheelchair-Alternative Mobility Concepts in Action

14•Mobius01•3d ago•5 comments

Ask HN: How has your company adapted interviews in the AI world?

10•parthdesai•3d ago•7 comments

Ask HN: Are we giving away our civilization?

17•bigwheels•3d ago•6 comments

Ask HN: How does your help desk verify someone before resetting MFA?

9•ovudus•3d ago•1 comments

Ask HN: Have the PHP vulnerabilities been exploited?

6•crisnoble•2d ago•2 comments

Biggest pet peeve of FPGA toolchains

4•vWijdaan•2d ago•3 comments

Open-source, cross-harness memory for AI agents

18•shakshukan•3d ago•14 comments

Run iOS on Android Phones

6•spicygum•3d ago•0 comments

Ask HN: Does anyone else just want to disconnect from everything?

18•lualover•4d ago•23 comments