BoppreH

Most fire hydrants are never used either, but we don't consider them wasted.

In your opinion, what chance of QC would warrant PQC migration? Would you be ok with a 20% chance of everyone being caught unprepared? 30%? 50%?

Keep in mind the impact is "hackers can take control of almost all online infrastructure and forge almost any document".

basically anything that isn’t typing characters has had/still has unaddressed bugs.

Oh, that's buggy too. I just tried Claude Code on win10 powershell, and the first typed character goes in the wrong spot and can't be backspaced.

It is by far the the least reliable program on my machine, and every time I have to interact with it I feel like walking in eggshells.

You can't really do this.

"We've agreed with Apple to use their emoji glyphs on Android by default regardless of font, unless overriden by the user. We understand users might prefer the current designs, and we are proud of the work our team has done, but we believe that consistent communication is more important, and individual users can always enable the override to get the old look back."

Everyone could choose to use the same emoji font across platforms or apps, but they don't.

Yeah, that's the problem. We can't rely on every user going out of the way to drive adoption, it has to be done centrally.

Having read the article, I still don't understand the point of 3D modeling emoji. Even the user interviews didn't mention it, and problems like "what the back of a smiling face looks like" sound entirely self-inflicted.

I was hoping they had standardized how emoji look across platforms. There are still significant differences between Android and iOS, for example. They recognize how subtle emoji interpretation is, so the only reasonable conclusion is that sender and receiver should see the same pixels.

The other requirements are also pretty vague and give Apple full discretion to remove browsers they don't like:

https://developer.apple.com/support/alternative-browser-engi...

Use memory-safe programming languages, or features that improve memory safety within other languages, within the alternative web browser engine at a minimum for all code that processes web content;

Adopt the latest security mitigations (for example, Pointer Authentication Codes) that remove classes of vulnerabilities or make it much harder to develop an exploit chain;

These allow Apple to take a security-maximalist approach and block alternative browsers that don't include the most performance-killing mitigations possible.

I don't think these points are bad per-se, but within the context of malicious compliance that Apple has already displayed, I'd be scared to invest money on alternative browser for iOS.

Note that this is for the "aviation plan" which already requires six-digits equipment.

Generally true, but don't forget that some people are disabled and absolutely need the electric functions. "Escalator temporarily stairs" is funny until your foot is in a cast.

Same goes for those seemingly-useless, single-purpose kitchen devices. You're just probably not in the target audience.

because people in my business are very active in sending the whole history in EACH mail,

Unfortunately that quoted history is not easily navigable and doesn't include attachments.

there is a setting with the server-confg, which defines what is to be done with send mail

I looked into it, but it unfortunately only applies to future messages sent. Typing this I just realized that I could maybe move my existing sent messages into the uber-folder, I'll give that a try.

Which one do you use? I'm really curious if there's an alternative workflow that is just as good as GMail-view, or people just learn to accept the limitations.

I had seen both of these. The add-on implementation is too complicated and affects too many systems (contacts, attachments, etc) that change frequently, so it had many subtle bugs and unimplemented features: https://github.com/thunderbird-conversations/thunderbird-con...

As for the Message List Pane, maybe that's something I missed, I'll take another look.

I had tried this, but the grouping only happened among messages of each folder. And Sent is a separate folder, so it doesn't get included.

Or did I miss something? Do you see your replies in the threaded view?

I tried Thunderbird recently, and was baffled that there seemed to be no way to see received emails grouped with my responses to them (aka threading or conversations). Even grouping incoming emails that have the same subject seemed like an experimental feature.

Surely I'm missing something? How are people using it? If someone replies to you "I think there was a problem with your attachment", do you search for your sent email?

It's just a syllable of the whole name, which is a German surname in a certain old dialect. And its pronunciation has been mangled after 150 in a country that can't pronounce it properly, so it's a mess all around.

"Sh" to "s" is simple enough. Sounds horrible to my ears, but maybe not to someone named Stavros ;). I've also been told that the double-p of Boppre looks alien in Greek.

And the "hu" syllable (like the sound an owl makes) was a genuine challenge. I think we went with χού. And now that my name is in the system, that's forever with this spelling, I guess.

In my experience, every compound given name is made of very traditional names (with some specific combos like Roberto Antonio and Maria Eduarda being especially popular), so it has always been clear where the given name stops.

Though I wouldn't completely rule out a name being ambiguous, either because the family name is strangely casual, or because the parents made a bold choice.

I'm obliged to mention Falsehoods Programmer Believe About Names: https://www.kalzumeus.com/2010/06/17/falsehoods-programmers-... . As someone who also has two family names, I always dread questions for my "last name".

What's also fun are alphabet differences. Try to interact with the Greek government and they might ask you to spell your name using only their characters. An interesting challenge when your name contains sounds that don't exist in the local language (sh, hu).

Dropped a folder with a small HTML project, and after 20 seconds got "Something went wrong. An unexpected error occurred. Please try again or contact support.".

Note how the error has zero information.

Looking in the network tab, a POST request to /upload returned 403 and an HTML page starting with "Sorry, you have been blocked", and to "email the site owner to let them know you were blocked".

I'm very tired of this adversarial approach to software coupled with vague errors.

EDIT: it was the file './git/hooks/fsmonitor-watchman.sample' created by default on git init. Maybe because it's Perl. Worse-than-useless "please try again" and "you've been blocked" for committing the sin of uploading a folder that's a git repository. Sigh...

Be careful with new image formats because they also have to be supported by the rest of the user's workflow. The browser might display it, but if it cannot be added to the photos app, or it's not understood by their image editor, or cannot be shared on their preferred chat app, then that's a fail.

WebP is especially hated for this among non-techies (31.8k upvotes, 1 month ago): https://www.reddit.com/r/mildlyinfuriating/comments/1trpuvr/...

It could have been as simple as "noise infusion" being interpreted as "adding fake data". Especially if you don't trust the people adding the noise.

Wouldn't be the first administrative action taken at a keyword-level of understanding.

This could have also been how the administration got convinced by someone with deeper understanding and specific goals.

This is actually useful for smartphones. Sometimes smartphone malware is capable of infecting a device but not persisting, so reboots clean it back up.

At least if you trust the NSA's advice: https://s3.documentcloud.org/documents/21018353/nsa-mobile-d...

The situation on the ground is unchanged - the amount of labor being generated per person has not really changed, but the overall pie has grown massively around us.

My understanding is that "fixed" costs like rent and groceries have gone up and taken more of people's budgets, while wages failed to catch up with this inflation.

If that's the case, it's markedly different from "situation on the ground is unchanged". I don't know how the overall pie is doing, but it has not grown enough to compensate for the labor share drops shown in the article. The slice on my plate is certainly lighter.

So when Google bans someone, that person also loses access to all services that require digital ID, forever?

I remember when a Youtuber asked live viewers to "vote" by typing emojis, and a whole bunch of viewers got their Google accounts banned for spamming[1]. Google is also famously averse to user support (understandable given the scale of their free services), so individual remedy is unlikely.

I can already see the new ransomware: "pay us or we'll send spam from your gmail and you'll lose your digital ID".

[1] https://www.engadget.com/2019-11-10-youtube-reinstates-banne...

Rockets famously take exponential amounts of fuel to reach higher speeds. I'm a layman, but my guess is that this comes from the exhaust speed being fixed. Orbital speed is higher than exhaust speed, so from a frame at rest the rocket leaves behind a bunch of propellant moving in the same direction as it went. That's wasted energy.

Back-of-napkin calculation says that if you managed to perfectly match exhaust speed with current speed, leaving all the expelled propellant stationary, it would only take quadratic amounts of fuels to reach higher speeds. Like the kinetic energy equation predicts.

I also found it surprisingly easy, starting from my triple "olden, party, music" (calculated years ago for state space coverage and memorability). Followed by "fight", then either "shark, brash" or "brash, shark".

Maybe it's harder if you're a careful player that doesn't waste the first three words.

Good point, maybe that could be done. But that's not what TFA is about, so you're not vindicated yet.

Videos are inherently large. There are better compression algorithms than what phone cameras generate by default, but video reencoding is slow, and the results still too large for "covert data channels".

Normal players would have noticed the bandwidth and CPU usage, and volunteers have already agreed to data sharing, so there's no point in keeping secrets. Same as claims that the Facebook app listens to people talk: someone would have caught it by now.

Also, AR capture was never very popular, mostly a gimmick for new players. The game was already a battery and power hog even without it.

it compiles photogrammetry by placing pokemons at areas and angles with low image coverage

But that's not what happened. The data came from very explicit scanning tasks centered about pokestops, not the AR pokemon capture. I used it once or twice to test it out, and it was a drawn out process where it asks you to slowly orbit the pokestop while filming, then permission to upload the (huge) files. You even had to activate a special "volunteer" account flag to even see these tasks.

From TFA:

Since 2021, Pokémon Go has asked players to record short videos of real-world locations, called Pokéstops, to earn extra in-game items. Scanning all the buildings, streets, and trees in a 360-degree sweep was optional, and Niantic asked separately for permission to keep the footage. Granting it meant agreeing to extra terms.

I'm sure they used GPS data from the players too, but I still hold that it's unlikely the AR pokemon capture yielded any data to them.

Oh, that's clever. It's not just hiding the payload in the Exif, it's hiding the fact that the payload came from the network at all, by reading it from the browser cache (presumably after embedding the image into a page the user visited).

So you have a package that doesn't include (directly) malicious code or make network calls, yet it can still run malicious code from the network. This is much better than simple obfuscation because you can vary the payload, like a command-and-control server.

You're right that shareholder mindset cannot fix this problem, but that's what policy and agreements are for. And leaders can be convinced that AI is a direct risk to their own citizens too. If everyone else agrees to stop, you have less reason to continue when this action is putting yourself at risk.

And note how your argument can also be used against any non-prolifreration agreements, which are demonstrably possible.

In 2023 there was an open letter titled "Pause Giant AI Experiments", signed by almost all the big names on the West. I'd say the public opinion only got worse since then.