... nobody covered, which is worse, because it changes a line of code a lot of us shipped this year without thinking about it. If your product has a "paste a URL" box, a link unfurler, an enrichment step, a competitor-monitoring job, or anything that fetches a page and hands it to a model, this is about you. What was actually measured. The paper is "Indirect Prompt Injection in the Wild" by Khodayari, Zhang, Acharya and Pellegrino, out of CISPA ... ... unstudied rather than settled - I'd genuinely like to be corrected on that. The part I'd worry about more in your shoes isn't the rate, it's the second half of my own argument. A summariser complying

... from people who come from Product Hunt: "What should I post about so that my thread is approve / featured?" "I want to be more visible, so I need to contribute. About what?" Apart from the fact that posts should comply with the community guidelines, I don't have an exact answer. But I can share where I come up with topics: I react to the latest events (I follow TechCrunch, Social Media Today, Hacker News, Twitter) I discuss ...

... Mailchimp, Hubspot, Constant Contact, Omnisend, Brevo, Active Campaign, etc Comment from Anastasiia(@alieksia): @ismaelyws Not exactly, we have clients from different countries: mostly North America, UK, Australia, EU, but we are EU-based company and it's easier to comply with EU regulations when the providers are also registered in EU. And although WorkOS is registered in US, it's compliant with GDPR, CCPA, HIPAA and other regulations. Comment from Hans Desjarlais(@ismaelyws): @alieksia  Interesting stack. I never heard ...

... cloud, you're trusting a third party you usually know almost nothing about. Who actually has access to your data on their servers? What happens if a government somewhere issues a request the provider is legally required to comply with, possibly under a gag order you'd never even hear about? How seriously does that provider actually take your privacy versus

... appeal and verification process will matters as much as the scanning itself. Comment from Maxwell Dean(@maxwell_dean): This space often focuses on detection , but the real pain is usually in verification accuracy and how quickly false positives vs real infringement get resolved. Curious how you're planning to balance automation with human review in edge cases where context really matters. Comment from Faisal Javaid(@faisaljavaid): Some queries, what will be mechanism if there is a report of stolen data ... ... approve > take-down Comment from Muhammad Ali(@muhammadaliy): @faisal_2420010  we will immediately proceed with take-down request from the infringing website. We expect most takedowns to be between 5-7 days as long as they comply

... what I m most concerned about. For analytics I split it between PII and others. Others are tracked in different platforms, including google analytics. PII on the other hand is only tracked and stored in European servers that comply with GDPR Comment from Justin Seyvecou(@justin_seyvecou): @diego_2r87  I m intentionally avoiding collecting anything that could identify users. The only things I track are a few anonymous interactions that help me understand whether the website is actually useful ... ... concept before installing anything. Right now I only track events like demo activations or download button clicks, without attaching personal information to them. Unfortunately Google's script collects it's own information via cookies, and to comply

... video tool). I obviously wasn't impersonating them we are in completely unrelated categories. But the bot didn't care. I filed an appeal. Nothing. Opened a support ticket. Nothing. Just a void. I had no choice but to comply. I rebranded to "Sprint Run" and updated all the metadata. The moment the update went live, my ASO rankings collapsed. Every keyword I d built up over six months vanished. My daily new user acquisition dropped by 99% down ...

... newsletters I follow there is this quote. What do you think about it? Chatbots comply with the user s wish to solve the problem on their own, even when this is impossible and may make matters worse. Chatbots, in fact, are not built to help, but to please. If you feel flattered when your LLM tells you how smart your question was (I certainly do), you are not alone: a pre-print from 2025 found that all major LLMs were ...

... They d name the habit that undermines everything. They d tell you which "open door" feels like a wall. Do they act from respect, or comply from fear ...

... people have been rejected. Usually, the reason was that the launch wasn t significant, for example, a similar or identical product had already been launched many times, so it no longer had that wow effect, or it didn t comply with the platform s rules. Comment from Nick Launches(@nicklaunches): Did anyone ever had any negative experience and their launch was rejected? Comment from Gaurav Thapa(@gauravthapa): Any idea how to submit a request? Comment from Manu Goel(@manu_goel2 ...

... shouldn't the LLM be waiting for the user's consent to act? Comment from Adam Martelletti(@adam_martelletti): @gabe  I haven t dug through ToS, but I d expect the standard CSAM-reporting requirement plus the usual comply with law or protect safety clause. Full-blown auto-snitching would kill user trust and the bottom line. I doubt any are doing it. I'd say the bigger danger is malware (or a state-run AI service ...

... they might miss one or get it wrong. They worry that the agent will go off topic, access apps or generally do things they shouldn't. Even worse for regulated industries, you need to produce evidence of how you comply with different laws. Humans leave a natural audit trail of SOPs they follow, tasks they complete etc. so you can easily work with an auditor but what do you do when it's AI doing the work? At Portia ...

... replies (i.e. locations) Intent disambiguation : Understanding and refining what users are trying to say when they use different terms and ensuring we address what they mean. Error handling and moderation : We need (and use) safeguards to ensure our responses comply with policy and platform guidelines, while still directly addressing the user's query in a helpful way. Third party model (and API) changes : since we are working with OpenAI, we have to make sure we are up to date with ...

... scenarios such as emergencies or financial troubles. Victims receive distressing phone calls from scammers impersonating loved ones, urgently requesting immediate transfers of money, cryptocurrency, or personal details. Believing they're helping a real family member or friend, victims quickly comply only realizing too late they've fallen victim to an impostor scam. How to Protect Yourself: Always verify urgent requests independently call the person directly at a known number before transferring money or sharing sensitive details. Use real-time fraud ... ... gaining your emotional attachment. Once trust is established, they casually mention "incredible crypto investment opportunities," claiming massive returns they've personally earned. Victims deposit crypto into fraudulent platforms recommended by the scammer, or send crypto directly to scammers wallets. Alternatively

... everyone I think directly caused this: VATMOSS General Data Protection Regulation (GDPR) Digital Services Act (DSA) Digital Markets Act (DMA) ePrivacy Regulation The AI Act ...and many more Which all had good intentions, but made it very difficult to comply as a small or medium business owner. Sure if you're a billion dollar corporation, you can hire bookkeepers and lawyers to comply

... things forward and involving us in the process. I talked about this in a podcast just yesterday. I truly think key here will be to have a process and UX/UI that is super simple to set up, run and comply as an EU-Inc company. I'd use Estonia's E-gov as a blueprint for how to build this, and not try to involve too many other novel technologies to begin with. Make it just work and the rest ...

... recently received a request to sign a Data Processing Agreement (DPA) to allow my Chrome extension to be used within a US organization. By signing the DPA, among other things, I commit to complying with certain US laws. However, I'm based in France, and I'm concerned that I cannot make such a commitment since I am unfamiliar with those legal requirements. Has anyone navigated similar situations? I'm afraid that to ensure I don't face any legal ...