Search.chatgpt.com domain and SSL cert have been created

https://search.chatgpt.com

by daolf • 2 years ago

127 106 2 years ago

search.chatgpt.com

01HNNWZ0MV43FF2• 2 years ago

Tls, no?

cqqxo4zV46cp• 2 years ago

We all know what it means.

01HNNWZ0MV43FF2• 2 years ago

I know what "nucular" means too

yau8edq12i2• 2 years ago

There is no such thing as an "SSL certificate" or "TLS certificate". There are certificates, which are used in various protocols including SSL and TLS. You can use the same certificate for both. The name "SSL certificate" is just a shorthand indicating the intended purpose of the certificate, nothing more. As such there really is no point in being pedantic over SSL vs TLS.

paxys• 2 years ago

More accurately they are X.509 certificates.

teddyh• 2 years ago

X.509

justsomehnguy• 2 years ago

tty. World Wide Web.

grandpoobah• 2 years ago

Ooo exciting :)

rany_• 2 years ago

I know about things like https://crt.sh but how could you be notified about something like this? Is there some service that allows you to be alerted whenever a new certificate is generated for a domain?

w3ll_w3ll_w3ll• 2 years ago

There is this tool from Facebook.

"Certificate Transparencyis an open framework which helps log, audit and monitor publicly-trusted TLS certificates on the Internet. This tool lets you search for certificates issued for a given domain and subscribe to notifications from Facebook regarding new certificates and potential phishing attacks."

https://developers.facebook.com/tools/ct/search/

arccy• 2 years ago

crt.sh has rss feeds for any search result you throw at it, e.g.: https://crt.sh/atom?identity=chatgpt.com

most commercial offerings are about monitoring your own domain, e.g. from cloudflare, sslmate, etc.

lambdaxyzw2• 2 years ago

You can set up your own certificate transparency listener, and get notified of every certificate created, in realtime, assuming you can handle the load. In my company we do this to scan new domains for potential phishing domains, to take them down before they become active.

lifthrasiir• 2 years ago

And if you need a concrete tool, use something like Certstream [1].

[1] https://certstream.calidog.io/

bongodongobob• 2 years ago

Interesting. What exactly are you looking for? Domain names that are similar like Micr0sotf.com and such?

raincole• 2 years ago

Easy, just refresh Hackernews front page 24/7.

bakugo• 2 years ago

Cloudflare provides this as a feature, you can choose to get an email every time a certificate for your domain is generated.

jacekm• 2 years ago

There is free service called Certstream [0]. It does not provide notifications, you need to ingest the stream, look for the patterns of interest to you and handle notifications by yourself. But it's fairly easy and the service is commonly used by security teams.

[0] https://certstream.calidog.io/

lagniappe• 2 years ago

Sounds like they're building something like what Phind.com does

t00ny• 2 years ago

Or maybe something like Perplexity AI.

mritchie712• 2 years ago

ChatGPT already has browsing, it's just way slower than Perplexity. I'm impressed how quickly a Perplexity search runs and integrates the results into the LLMs response.

filleokus2• 2 years ago

I'm taking this opportunity to once again ask for the widespread adoption of the Name Constraints extension in x509, and subsequent roll-out of constrained intermediate CA certs signed by a publicly trusted root.

Would be so convenient to have an intermediate CA cert constrained to *.my-name.com to avoid situations like this. Being forced to either use a private PKI infrastructure or using wildcards to not leak host names is so annoying.

supriyo-biswas• 2 years ago

Let’s encrypt and similar ACME compliant services allow you to get wildcard certs through their DNS-01 challenge.

lxgr5• 2 years ago

A wildcard cert is an unnecessary risk, though.

Just because I trust a server to hold the cert for preview.example.com doesn’t mean I’d want it to be able to pose as prod.example.com, for example.

lxgr5• 2 years ago

This would be so great. It also just mirrors the DNS trust model nicely, which is what’s used for X.509 trust anyway by most CAs.

lambdaxyzw2• 2 years ago

The point of certificate transparency is to have a public audit log of every certificate issued. Even if you had your own CA, you would be obliged to report every certificate you issue to the CT. This is a feature, not a bug.

vbezhenar2• 2 years ago

Certificate Transparency needed to serve website owners and not some greater good. Knowing that someone issued wildcard is enough.

michaelt• 2 years ago

You can just buy a regular wildcard certificate for *.my-name.com

If your organisation is competent enough to handle an intermediate CA certificate safely, you're certainly competent to handle a wildcard cert safely which is a much easier task.

Sadly it's unlikely you'll ever see the Name Constraints extension adopted. All it takes is one model of 15 year old smart TV failing to respect it, and the CA/Browser Forum will consider it too dangerous to allow.

filleokus2• 2 years ago

While I principally agree, the neat thing with the intermediate CA is that it can be centralised and support ACME, which makes maintaining the certs so much easier.

In my current org we have hundreds of TLS termination "configuration points" (cdn's & cloud loadbalancers / networking appliances / k8s ingress controllers / raw VM's). We have standardised on ACME issued certs for almost everything. Using a wildcard certificate would force us back to manual cert updating procedures, or finicky scripts. Undoubtedly causing issues when certs become expired.

(Not to mention the trust boundaries. An org can be competent enough to handle an in-house CA securely, and simultaneously have a bunch of quasi-sloppy vendors for stuff like the visitor badge kiosk.)

But I sadly agree that it will probably never happen…

tru3_power• 2 years ago

As a red teamer I agree - I always found this ridiculous

seydor3• 2 years ago

Isn't that conflicting with their microsoft deal?

jsheard• 2 years ago

Unless this is the Microsoft deal, and they're using Bing as their indexing backend.

seydor3• 2 years ago

"chat gee pee tee search" is a terrible name. In comparison, bing is genius

spiderfarmer• 2 years ago

Probably uses Bing to an extend.

theGeatZhopa2• 2 years ago

Using azure bringing MS money. Even bing is not growing, the money comes in. If the search is good, it will explode and make MS buy more of hardware, making them the biggest cloud search. they can scale on it.

So the money will come in, that or that way.

lokicik• 2 years ago

Does this mean that the next gpt model could be online, like Gemini?

cynicalsecurity• 2 years ago

RIP Google. Yet another story of a company killed by "effective" management. The McKinsey school isn't so effective after all, is it.

unraveller3• 2 years ago

Can someone tell me how all that leet coding doesn't lead to their AI having better coding ability? More fizz buzz has been spilled on google whiteboards than in any other place on earth.

kolinko3• 2 years ago

Bad organization. So what if you hire good engineers if you make then do wrong tasks.

unraveller3• 2 years ago

Search chatgpt ah but you repeat yourself, we already use LLMs to replace this antiquated notion of loading webpage snippets and pointing me in 5 different directions.

I'd say "just chatgpt it"? is closer to being in the lexicon and this url just doesn't roll off the tongue

"here let me search.chatgpt that for you"

There I was hoping sama-gpt5-chatbot had some creativity chops for naming new things but they must have decided not to use it this time.

snapcaster• 2 years ago

In my experience LLMs are terrible at naming things, usually some combination of cringe and silly

shawabawa3• 2 years ago

>"here let me search.chatgpt that for you"

Why would you say it like that though? You don't set "let me google.com that for you"

In the same way you don't say "let me chat.openai it for you", likely search.chatgpt.com will just become the new default interface to chatgpt, and "to chatgpt" something will mean to look it up on search.chatgpt.com

asadotzler• 2 years ago

Today's chatGPT and today's (not OpenAI) web search are very different creatures and experiences. Are you saying that today's chatGPT experience will be abandoned and replaced with a web search experience? That seems terribly unlikely to me.

robofanatic• 2 years ago

So does that mean my chat will be publicly searchable?

bossyTeacher2• 2 years ago

They would be open themselves to a class action lawsuit and no one would use their LLMs so I doubt it

nlitened2• 2 years ago

I am not from the US, is a “class action lawsuit” supposed to be something scary? From the instances I’ve seen over the years, these lawsuits result mostly in tiny $22M fines and a slap on a wrist.

kolinko3• 2 years ago

bossyTeacher2• 2 years ago

what's the point of this post?

belter2• 2 years ago

Somebody has PUT options on Alphabet? :-)

surfingdino4• 2 years ago

It's a clever way of getting around the accusations of stealing content. They can say that they are scraping it to make it searchable, just like Google.

toxik• 2 years ago

It will be interesting to see what happens to copyright claims against ChatGPT. Google can just remove claimed content from its index, what will OpenAI do?

surfingdino4• 2 years ago

Use their legal and PR fund to fight back.

jmacd• 2 years ago

Altman has said explicitly on several podcasts that they are working on search and that it was something he is particularly excited about.

I am guessing that this falls under the "we will steamroll" clause of OpenAIs gradual move towards AGI.

maxdaten• 2 years ago

On the other side he said, the "next Copy of Google Search" would be boring. So let's see what they try to make differently

https://youtu.be/jvqFAi7vkBc?t=4681

unraveller3• 2 years ago

I can tell you that a piece of trillion dollar pie does not taste boring.

alexcanton2• 2 years ago

he did also say they weren't going to try and make their own chips in an Oxford interview. I think he is known for saying one thing while doing the other. Like the former board said, he isn't always candid.

siva7• 2 years ago

Imagine being an innocent developer trying to spin up some internal dev tooling and accidentally landing on the front page of HN to be misinterpreted as an attack against google which could affect both stock

belter2• 2 years ago

https://news.ycombinator.com/item?id=40234028

wouldbecouldbe• 2 years ago

Ah well I like your joke, but I know GPT is moving fast, but it would be unlikely and innocent dev can change DNS records of chatgpt.com

unglaublich• 2 years ago

Isn't that what DevOps is supposed to be?

tasuki2• 2 years ago

Only the guilty ones can?

skywhopper• 2 years ago

I hope they don't use this level of DNS to set up internal tooling.

beambot• 2 years ago

Sama & Lex Fridman literally talked about disrupting search in their latest podcast.

tim333• 2 years ago

This bit maybe https://www.youtube.com/watch?v=jvqFAi7vkBc&t=4655s

andrewstuart• 2 years ago

Most underwhelming product launch ever.

EZ-E• 2 years ago

Wasn't ChatGPT already doing searches for you when relevant? For example if you asked for recent news? I can't get it to do it again for some reason it will share month old publications right now.

kolinko3• 2 years ago

That was through bing. And bing uses similar algorithms to google for ranking. OpenAI can do way better.

ramshanker2• 2 years ago

Just today, I was having difficulty with printing in AutoDesk software. Copilot(Previw) was right there at the bottom, I opened it and asked for steps to solve the issue. It told, in steps, exactly what to do, which worked as instructed. Solving my issue. The original article from AutoDesk was also linked. My immediate thinking was search is doomed.

Compare this to what I would have to do with google. Open browser, type the query, guess which of the top 10 results are likely to answer the issue I was having. Click few link to open them in new tab. Read though it to see if the correct problem was being discussed. If not see another link in the top 10 list. Repeat.

I even thought where in that interface, Microsoft could place the future ads. It's totally in the realm.

EDIT: At this point, ChatGPT is basically old school "I am feeling lucky" on steroids.

kevindamm2• 2 years ago

Compare this to what I would have to do with google. Open browser, type the query, guess which of the top 10 results are likely to answer the issue I was having. Click few link to open them in new tab. Read though it to see if the correct problem was being discussed. If not see another link in the top 10 list. Repeat.

This is outdated. I repeated your experiment with Google query [how do I print from Autodesk] and the top result is the step by step instructions (not a link but the actual instructions, with a link to the source following). The second result is a link to Autodesk's own help docs for the print function. No ads above the fold.

But you make a point that people will keep assuming what they want to anticipate how the search will unfold, and I admit this is in part due to the enshittified commercial and news-related (and other) results, the bias is coming from somewhere, right? But I would encourage anyone to at least verify this assumption before posting it as fact.

ramshanker2• 2 years ago

Well, that was me trying to simplify the query for HN audiences. Let me recall the actual conversation.

Me: How to add missing monochrome.ctb file in autodesk dwg trueview?

[Upto this part google is same. Pointing to the same link, but not showing any steps though.]

Copilot: Here are the steps. Put them here in this folder......

Me: I put it there as suggested. Still didn't work. How to make tureview refer another folder location?

Copilot: Here are the steps.

Me: It worked thank you. [I really thanked it ;)]

theGeatZhopa2• 2 years ago

I do it the whole time with bing Copilot. Didn't visit Google to search for my daily questions like for several months. It feels so outdated to search for a proper result in old goog.

So actually, what Copilot does is to prefilter and condense results. If I like it and it seems legit, it's enough to get my answers. Sometimes I take up the source. Most of the times I reprompt Copilot to list me alternatives and find errors in them. That discloses erroneous things like contradictions enough.

But what's more useful is "how can I mix up two dictionaries with different keys one by one into a set."... 20 seconds later, I can read how and don't have to search SO for whole 20 minutes of reading.

But yes, it will impose the same changes as Google did. Before Google, you should know where you get the information needed or already have it in your hrad/learned. After Google, you don't have to. So everyone changed into stupid mode but being way more productive. So, I fear, that's the next wave of stupid:)

oleksiyav2• 2 years ago

A new search system is coming. At least I've already seen about 50 visits to my website from ChatGPT.

throwaway143829• 2 years ago

Why do you think this implies they are building a search service rather than just scraping your site for more training data?

oleksiyav2• 2 years ago

That's an assumption, as they could easily develop a search engine and incorporate the same advertising model used by Microsoft Bing.

I've noticed an interesting pattern: before releasing LLaMA 3, OpenAI provided access to ChatGPT 3.5 without requiring registration.

Meta might also follow this path with its own search engine. Did you know that you can now ask questions directly on Instagram and receive answers from Meta AI using LLaMA 3?

Why go elsewhere for information when you can easily find it in the app you use every day?

ChildOfChaos• 2 years ago

There is a rumour of an OpenAi event apparently next week, so likely what this is.

Some creators also seem to suggest they know what is going on, youtube mattvidpro hinted at it when talking about the gpt2-chatbot, he mentioned he knew something but couldn't talk about it or get sued.

alexcanton2• 2 years ago

is there a source for this outside 1 guy on twitter? If they were holding an event I would imagine invites would have gone out a while ago like their dev day..

mnk47• 2 years ago

FWIW, that one guy on twitter is spot on more often than not in his leaks and predictions.

Search.chatgpt.com domain and SSL cert have been created

Related Stories