fosefx

Just like with "golang", "FStar" is the query if choice. But don't think you'll find much, if the documentation is in the same state as it was two years ago.

Aside: What makes Gitlab "AI-powered"?

They were replaced by AI

Tangent: Instagram managed to lock me out of their service for a week or so a couple of days ago. My browser was signed in into my account, but I have not used it for like a month.

Got logged out. I log back in (using 2FA btw). "Please give us your phone number so we can verify it's you" I enter my phone number. I don't really get the point of this because they did not have my number before, so what are they actually verifying here? Anyway, I trust Facebook with my phone number lol. I get a code, I enter it. "Your account activity is suspicious and we will limit your account for a bit" That was it. No redirect, no link to click, nothing. So I go back to instagram[.]com and have to do the same thing again?

Well maybe my browser is on a block list now or sth. So I go to my phone (where I was signed in). And the App is broken completely, looks like the session was invalidated.

I log out, log back in, do 2FA, enter the code again. Same result.

I checked back in a couple of days ago and it seems like I have access again.

It is unfathomable how this can happen. How can the front gate to your multi billion service just not work to the point where you DOS yourself?

Also this account has 0 images, and just a couple of followers, so there is literally nothing to protect.

In moments like these you really start to notice the missing communication channels to the big tech companies. Is there any other industry that has zero customer support?

Can not recommend the podcast series "Rabbit Hole" (2020) from the NYT enough.

https://www.nytimes.com/2020/04/22/podcasts/rabbit-hole-prol...

Why?

What is cheaper? Investing into proper security for years and years without seeing anything or paying fines to regulators once you got breached?

My guess it's the latter :/

Cool. Now build bus stops, so I don't need one.

Well an extension can also just send your session tokens home. In the end it's software running on your computer, but people unfortunately often times underestimate the power of add-ons (read the permissions screen folks!). Mozilla requires a manual code review before allowing add-ons into the store because of this afaik.

In my example there was direct user interaction (clicking a context menu) but the service worker (background script) has no API to interact with the clipboard at all.

I guess my point is not that it's an easy thing to fix, but the fact that it looks like nobody at Google has thought about this before forcing everybody to migrate is concerning.

My use case: A background script, sorry, Service Worker registers a Context Menu Entry. When the user clicks on it it fetches some stuff an copies a link to clipboard.

Using MV3 as it is this is not possible.

As someone in the thread said, it is not really feasible to try to find all ways that user interaction can trigger code that requires clipboard access. If that is the route Google want to go down it will take years of people reporting new ways the system does not work until it is usable imo.

I came across this because I wanted to port an addon over to MV3. It simply used navigator.clipboard.writeText(). That by itself only works as a reaction to a user interaction (so not in bg scripts), unless you declare the "writeClipboard" permission in the manifest.

I don't know if there is a readClipboard permission as well.

Interesting reply: https://twitter.com/M1ch13Lt/status/1562537209659817987/phot...

https://www.bbc.com/news/world-latin-america-57398274

Wait what? How does that work?

I think that's because the rt server does not respond to ICMP. I use 1.1.1.1 and can access rt.com just fine (also German Vodafone customer here)

Link to the talk: https://www.youtube.com/watch?v=MlIKV5qAf2I (43 min)

His website states he is affiliated with popflash.site, which you probably have heard of.

https://searchhut.org/search?q=js+service+worker

List of accidents and incidents involving commercial aircraft

English translation: https://www.gesetze-im-internet.de/englisch_stgb/englisch_st...

Most notable: "The pregnant woman does not incur the penalty specified in section 218 if the termination was performed by a physician after counselling (section 219) and no more than 22 weeks have elapsed since conception"

Tobacco ads are generally banned on Radio, TV, Print and the Web with some exceptions. Outdoor advertising is still very much allowed, Germany is the only EU country that allows this.

Btw manufacturers (not the merchants though) are still allowed to hand out free cigarettes.

Not to be confused with d-fischer's twitch.js which is now called twurple

https://github.com/twurple/twurple https://twurple.js.org/ https://d-fischer.github.io/twitch/

Is there sth like a status page for submarine cables?

It's easy to ask for Snowden to be more vocal against the Russian government when you are not a) in Russia, b) treated as a terrorist by your country and c) in the constant fear of Russia dropping their support for you. The man just became a father, cut him some slack, he lost everything once.

For us this means taking what Snowden has to say about the Russian government with a bucket of salt.

100% singlethreaded

You can (and should) use Web Workers[1], those run off the UI thread, but also don't have access to the DOM.

[1] https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers...

It does not really matter what your stance on that topic is. If your co-workers don't what to be called a certain way, just respect that. E.g. I don't want to be called by my full first name but rather a short version of it. If you deliberately disrespect my request that is simply hostile.

If I understood their paper[1] correctly you can just use a popular phone number that a person walking by is likely to have in their contacts, like an emergency line number.

My mobile telco's SIM comes with a couple of contacts on it like their customer support line. I don't know anything about AirDrop, but I assume this will work.

[1] https://www.usenix.org/conference/usenixsecurity21/presentat...

I think the real standard is the amount of people that care about it.

Take the same example of a singer.

v1: "I'm an aspiring singer."

"So far I've played at home & family gatherings..." (<- not real)

v2: "I'm an aspiring singer."

"I have 10 million monthly listeners on Spotify" (<- real)

By that standard, web3 is not 'real'. Not enough people care.

Don't get me wrong, those that care seem to *really* care, but I do not see a future were people will give up the social concept of ownership (which seems like the only thing any web3 project is revolving around) and let some racing computers make that decision for them.

And let's be honest here, even if I'm completely wrong about this, this technology is not even close to being worth to the amount of money thrown at it right now.

https://www.statista.com/chart/15195/wind-turbines-are-not-k...

The Search For D. B. Cooper https://www.youtube.com/watch?v=CbUjuwhQPKs

The project is kept modular. There are renderers for web [1] and native [2]. The project's ECOSYSTEM.md [3] is addressing this in more detail.

[1] https://github.com/hecrj/iced/tree/master/web [2] https://github.com/hecrj/iced/tree/master/wgpu [3] https://github.com/hecrj/iced/blob/master/ECOSYSTEM.md