HN user

_phaq

2,327 karma
Posts0
Comments22
View on HN
No posts found.

You'll have to nudge the F-Droid maintainers for that. They grab the source code and compile it themselves. The app developer isn't really involved, they just provide the source code and ideally ensure that it can be easily built by others.

Though you may want to give them a week or two before you go nudge them. They might build it on their own when they find time for it.

Yeah, and with FOSS this is all the more important. No one is going to play your game, if it's not fun. Few people are going to play your game, while it's not yet in some tangible way better than DF.

And if people don't play your game, they're not going to contribute to it.

Actually consented, as in understood the implications and freely decided that Google should have this data, probably none. That would take a lot of generosity, especially to pay that team of lawyers and technical experts, so that you have any chance of actually understanding the implications.

Unwillingly consented, that's the vast majority of Chrome Sync users. Unless you enable the end-to-end-encryption (for which they require a second passphrase, so probably less than 0.1% actually use that), they will use your data for ad profiling etc.. Yes, that is on page 1312 of the Chrome Sync privacy statement. (They're only required to write it into there, if they do it, so it is quite certain that they didn't just want the bad PR for nothing.)

Is consent required? Assuming they actually do collect this data from their Chrome Sync data or through similar personally identifiable ways, consent would be required in many jurisdictions, especially the EU.

However, if they cared enough, it would be possible for them to collect this particular data point without personal identification. You could for example create a UUID per installation that's only associated with this one data point. Or you could have a time-based solution where each Chrome instance goes out to "vote" for their default search engine e.g. every 4 weeks. If you then look at the statistics on a weekly basis, you can just take these values times 4 to even roughly correct numbers. It's certainly going to be representative enough, you don't need every browser instance to have their vote in every week's statistic.

I'm really enjoying Dungeon Crawl: Stone Soup at the moment. Especially as a game for when I don't actually have time.

It takes like two seconds to go from desktop to in-game, continuing your previous run, and saving your progress + closing is just as quick, so I often just launch the game when I have to wait a minute for something to finish.

It's also really good at keeping up tension. It rarely feels too easy, if it does and you start playing careless, that's when it gets you. It also rarely feels too hard, it's almost always your fault when you lose.

And it has a few mechanics to cut out the boring parts, like auto-explore which explores the dungeon until it finds an item, enemy or something else of interest. Or auto-combat which automatically walks up to enemies in sight and whacks them, however is entirely stupid at it, so it's only suitable for encounters where you see no risk of dying.

And it has a crapton of content, and is really good at combining this content to form all kinds of interesting situations.

https://crawl.develz.org/

They used to be owned by Evidon Inc., later renamed to Ghostery Inc., which was a classic ad company (sold data gathered from the opt-in GhostRank feature to help other ad companies figure out how to not have their ads blocked).

Nowadays, the Ghostery extension is owned by Cliqz GmbH, which is still an ad company, but they specialize in privacy-conscious ads (mainly ad personalization based on evaluating browser history locally), have a privacy policy that has no holes as far as I can tell, have all of their client-side code open-sourced and they are even minority-owned by Mozilla, so Mozilla can at least check over what they're doing and would probably give up ownership should Cliqz infringe on privacy (even if you think Mozilla itself is the devil, they would still likely do that for PR reasons).

So, I do think it is nowadays fine to use Ghostery. I still don't quite understand why it's so popular, there's tons of other tools for the same purpose (for example Disconnect, Privacy Badger, Firefox's built-in Tracking Protection), but yeah.

It seems wilfully destructive to remove something that is depended on by so many without making sure there's a replacement in place first.

Could cut straight to the GNOME logo after that sentence. This is sort of what they do, yeah. And they do have their niche with that, which is big enterprise-y, centrally administered systems.

If the user doesn't need to administer things themselves, then not exposing ways of administration in the GUI means less ways for the user to hurt themselves. Or rather to do something not so smart and then need tech support to fix it. Can't accidently hide your panel, if you actually cannot hide your panel at all.

I have no problem with one of the many desktop environments specializing in that, but the Linux desktop is mainly controlled by companies who then develop and set GNOME as default on their distros, which are also used by people who do need to administer their PC.

Ubuntu and Fedora have GNOME as default. Debian, too, which doesn't really have an opinion, but it's what they've always used and it's stable. Arch and Gentoo don't have an opinion at all, for obvious reasons.

openSUSE is still holding against, but SUSE uses GNOME in SLED, too, and has been spreading a sort of "We like all desktop environments in *SUSE-land"-mentality, which makes me feel like they're wanting to swap out KDE here, too, at some point.

But yeah, if you haven't yet, do yourself and the Linux desktop a favor and give KDE a fair try. Or pretty much anything else than GNOME.

I'm not saying it's impossible for you to like GNOME better, but there's so many desktop environments out there that are developed from users for users, which are actually objectively better than GNOME in so many categories. Even the most lightweight of desktop environments like LXDE/LXQt often have more features than GNOME.

And KDE is what you get when you take this feature per resource usage ratio of these lightweight environments and then multiply it by the resources that a modern system can easily provide. If you ever wanted to have all of the features and options that a desktop OS could have, KDE comes far too close to that. It's the flagship experience for power users (not the type that only ever wants to see a terminal).

Externally "testing" a filesystem isn't exactly easy either. If an error occurs, there's not gonna be an exception thrown that you can send off to telemetry.

If you're lucky, your customer notices that files are missing, understands that it has to be a bug in the operating system and maybe even has a rough idea what they were doing that caused the bug to occur, then calls up support and your first-level support is competent enough to direct the problem to the filesystem people and then it's still going to require a lot of luck for that department to reproduce the problem and to actually find out what in the code is causing it.

It is personality focused, and sexual appeal is going to be part of it.

Well, exactly that is debateable. Sexual appeal is often coupled with a completely flat or acted personality. And if they have somewhat of a personality, then usually the stream is constantly interrupted by them reading out donations or whatnot.

And this discussion is not just about the rest of Twitch. Some people would actually like to use the IRL section to find streamers whose personality they like. Having the top-viewed streams there being focused on sexual appeal generally makes it harder to find actual personality streamers. It also means that actual personality streamers often avoid IRL.

But then they don't avoid it completely either. Some artists now stream in IRL instead of Creative. The section Music has been pretty much dead since the introduction of IRL, because people making music now pretty much either choose between Creative or IRL, leaving Music for completely personality-devoid streams of pre-recorded music.

Well, most design people also have side projects, be it a Tumblr page or an endless supply of drawings that they just do to improve their drawing skills.

But that's different from helping an (OSS) application look good. For that, you have to make tons of mockups, iterate again and again, until you have something that looks good and consistent across the entire application. Ideally, you'd also want at least one other person to bounce ideas back and forth, and have an opinion about what you're doing.

This is real work, which requires a lot of commitment upfront. The equivalent of requiring a programmer to lay out the entire architecture before they write a single line of code. That's also something that mainly happens in a corporate environment, whereas for hobby projects it tends to lead to frustration.

Do you need a VPN? 9 years ago

When evaluating a VPN service for trustworthiness, I always look at what their webpage loads in terms of tracking scripts.

Basically, if you offer me the service to protect my IP address and don't even have the decency to let me inform myself about your offering without handing over my IP address to Google et al., then I'm not using your service.

Unfortunately, VPN providers collectively don't seem to be aware of this presentation layer, so it's neigh impossible to find one which doesn't violate privacy here.

So far, I've found exactly two: azirevpn.com and airvpn.org

They load in Piwik, which I'm okay with.

These two providers also check a lot of other boxes for me, but yeah, it's still just two providers after hours of research, so if anyone knows any other VPN providers with privacy-respecting webpages, please do tell.

The fear is that this makes it far too easy to use DRM for webpage owners. Previously, you had to pull in a slow-ass Flash-plugin or similar, which was very much known to bring all kinds of security issues.

Now you just say "DRM this" and it does it, and you have the security issues whether you use DRM or not.

As a result, webpage owners might start DRMing things that were previously just not worth DRMing. Like images, text.

If you want to cite a news article in the future, you might have to type it off by hand instead of copy-pasting the part.

Also, just like DRM has done before, it's going to make content inaccessible for those who want to view that content at a later point with different technology, except that this time around it's not just going to be Netflix, it's going to be a good portion of the web.

So, yes, DRM has been part of the web for a long time, but how big that part is, is going to dramatically change.

Ellipsis will take up less space from Firefox 53 onwards: https://blog.nightly.mozilla.org/2016/12/20/these-weeks-in-f...

As for the CSS-file, you have to create a folder called "chrome" in your profile folder and then in that folder create a file "userChrome.css".

In that file, you have to have the following line at the top of everything else: "@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xu...");"

From that point onwards, I'd just search on userstyles.org. In the advanced search, select "App" from the first dropdown, then it'll show you pretty much only Firefox-styles.

If you found something that suites your taste, you can click the "Show CSS"-link and copy-paste that into userChrome.css. Just make sure that you don't have the @namespace-line twice.

This for example sets the minimal tab-width rather low: https://userstyles.org/styles/53019/firefox-5-minimal-browse...

You can also find userstyles that for example hide the close-button until you hover over the tab or merge the close-button with the favicon.

It's not purely a C++ vs. Java thing.

Minecraft was simply never intended to be this big of a game. It was initially designed to be really just a game where you place blocks on other blocks. The Survival-mode, fighting against monsters etc., that was all gradually glued onto an architecture which wasn't intended for it.

One example that I happen to know, is that they never intended to have all these effects like smoke, water drops, the swirls from drinking a potion. All of this was pretty much just a hack for the longest time with no real place for it in the architecture. Eventually they fixed that and added it to the architecture, and could improve effects-performance massively with that, but there's probably still loads of things like that in the game.

Another big part of this is that Minecraft generates and loads its map in 2-dimensional chunks, or pillars if you will. So, when you move through the world, it always has to load in and keep loaded the entire height of the map, no matter if you're scraping along the clouds or if you're deep underground. If you're traveling into new terrain, it has to generate the entire height all at once, as well.

Minetest instead uses 3-dimensional chunks, i.e. cubes, and can just load/generate those freely how it needs them. So, if you're standing on a mountain and look down, it loads all visible chunks, but can just leave out those which are underground. Or if you're underground yourself, it can leave out really pretty much just all chunks altogether, except for the few which are directly around you.

This also has the effect that Minetest-maps can be unlimited in height, whereas Minecraft-maps need to be limited (currently 256 blocks; it started out at 128 blocks), as otherwise Minecraft would really just need infinite RAM and never get done with generating the map.

It doesn't have as big of a modding ecosystem as Minecraft, simply because it doesn't have even a fraction of the community, but apart from size, I don't think I would agree on its modding ecosystem being less amazing.

Minetest has for one a stable modding API, meaning that mods generally don't break left and right with each release. If you find a mod, chances are that it's going to work, even if it hasn't been maintained for a while. The whole game content itself is also built using this modding API, meaning that there's nothing stopping you from making mod-content, which has just as high quality as the built-in content. Or you can write your own game completely from scratch. Or you can create mods which have then again other mods as dependencies.

Minetest also has what's probably best described as "Modpack as a Service". When you connect to a server, your client downloads the mods that the server has installed and applies them. This means that you can play on a modded server without making any changes to your client. You can just connect to random servers to take a look at the different mods that exist, without any hassle whatsoever.

This also works in singleplayer, i.e. you can play with different sets of mods on different maps, again without hassle. You just use the built-in mod manager to enable the mods that you want on a per-map basis.

Right, but at this point, German privacy laws are pretty horrible, too, and getting worse as we speak. The BND (German intelligence agency) also works closely with the NSA, and considering what's publicly known, it wouldn't surprise me, if the two exchange essentially all data behind closed doors.

Reader View being too narrow should get a fix in either the next release or the one after that, i.e. the fix is in Developer Edition, maybe already in Beta (I didn't check there), and a small change like that usually goes through Developer Edition and Beta in one release cycle each.

Basically, they now have a setting for that in the toolbox to the left, so you can decide yourself how narrow or wide you want it. They also added a setting for the line height, so even though you didn't complain about that with Reader View, you can now change that, too, if you should ever need it.

1) I didn't say that they are there for no reason, rather that there is no reason why there can't be a simple switch which turns everything off in an easily accessible way, or heck even having everything off by default. And no, Microsoft needs telemetry is not a reason when we're talking about user-friendliness/respect.

2) No, but you can get away from malicious defaults. Believe it or not, but there's OSs out there where the defaults are an actual recommendation from actual people. And again, same fallacy. Just because every OS has bugs, doesn't mean that it's ok for one OS to suddenly have more of them for no reason, or in this case more severe bugs, as with user-respecting defaults only the most hardcore Microsoft-fanboys would complain that their computer suddenly stopped sending telemetry to Microsoft.

3) Because we don't know the extent of the damage that this does. We don't know what is being sent, what is being stored, how long it's being stored. Could be that even the most privacy-friendly setting can still report you to the NSA and get you on some list. Could be that people have already disappeared, because they were on such a list at the NSA, without anyone knowing about it. The same stuff was going on for a good while at the Stasi before people noticed, and the Stasi was a bad joke in comparison to the NSA.

You can switch for whatever reasons you want though. Are you actually a Windows user who is considering a switch?

No, I already switched with the Windows 10 + new ToS launch in expectation of something like this going down, although I also just got extremely lucky, as it wasn't my only reason at the time. This actually going down, though, certainly has cemented that decision. Why do you ask?

Here's a fun game for the family: Search for "cheesecake" in your search engine of choice and then count how many links you have to check before you find a webpage which does not connect to one of: Google, CloudFlare, Akamai, Amazon, Facebook, Twitter

For me, it was 34 links. And that 34th link was the Wikipedia-article for cheesecake...