“ the priority of sales and profits has resulted in the sacrifice of the main quality measure of their main and only product”

What do you mean exactly here What do you think LastPass could have done to prevent this specific issue?

Bitwarden doesn't redirect you to a third party if you visit their support page:

https://bitwarden.com/help/

But LastPass does (Salesforce CNAME):

https://support.lastpass.com/s/?language=en_US

So this couldn't have happened to bitwarden, you own the reputation loss if any of your suppliers get owned. Though it really doesn't matter anymore for LastPass they leaked their customers vaults before, I have no idea how they can still be in business.

Did they need to give them all of this?

customer names, phone numbers, email addresses, physical addresses, support case data, sales-related data.

Generally yes, if you want to use a Customer Relationship Management system like Salesforce. Customer names, contact information, and info about what they bought from you is table stakes data for CRM is it not?

If you are selling B2B or high ticket items, sure. But these are customers of a security product. It's as silly as running the names of mcdonalds customers through an AI to find hidden sales insights

Not installing the infected package of course.

It's worth noting that this is not 'their marketing provider' what they do is load 30 different providers for some reason, to maximize the reach of their data sharing and advertising network. Well, their network reached too far and touched an infected node.

You have no idea what Klue is

Not supply the information to any other company.

“every single direction change I suggest, codex is all: "that's a great idea, and we should totally go that [very different] direction", try as I might to get it to act like more of a peer.“

That’s not the model, that’s a personality setting you can change in the codex config file.

Set it to Pragmatic, and ask it (not command it) about your new direction in planning mode.

It will tell you if your idea is not good for the given project. It’s an excellent peer.

Do you plan supporting the web version of Excel?

I’m a heavy Excel user and would love to try this, but I’m on Linux, so I can use only the online version of Excel.

you can try it in the web version, download the manifest file form his website. Than go in the webversion to add in -> my add ins -> upload and upload the manifest file. Only downside is that it will disappear after a week or so.

I might do once I get local to a good spot. Should in theory be fine on web... but haven't tested/tried

Works surprisingly well, even the connection to local host to use my codex sub, would have not thoughts thats possible ;) Really cool work!

why not use a vm/wine for a native experience (though, tbf, native excel is kind of hot garbage these days compared to older versions...)

If they had wanted a moat for this part of their offering, they wouldn’t have open-sourced it.

This is not their offering, this is a tool to raise interest.

You are right.

At the same time, everything you ever posted online has already been scraped by hundreds (maybe thousands) of entities and distributed/sold to countless other entities. The only difference is that OP shared his project here.

It was true until GPT-5. That model hugely improved Codex, so it being comparable with CC is a recent thing.

Of course there's an XKCD about this: https://xkcd.com/538/

and that NASA did not spend millions on this. https://www.reuters.com/article/fact-check/nasa-did-not-spen...

This is completely offtopic, but I would bet it was a government-funded museum. A reasonable institution would have worked with you to find an acceptable compromise, something much easier to implement with a small sacrifice of aesthetics.

Anyway, great work, and thank you for taking the time to share it!

Really? I would much less expect a government museum to be particular about aesthetics. Privately run museums/collections/exhibitions on the other hand tend to have very finicky owners -- after all, they're putting up their own money to achieve their vision, and so of course they tend to not want to compromise on how it might look.

"mostly profit someone else who did nothing but write you a check"

There is quite a bit of work involved in reaching the point where you write a check for a Series A round. Also, the better VCs spend significant time with their portfolio companies.