maybevain

The full title (”Age verification for social media – the beginning of the end for a free internet?”) was too long to submit as is, hence the slight editorialization.

Interestingly there seems to be a few quirks for twitter.com, but none for x.com. I assume that'll lead to some regressions?

Recent? Unless you mean the notification, sending yourself a message has been possible for a long time. Just to make sure I know what I'm talking about I checked the conversation history with myself and the earliest messages are from 2016.

And yet I still can not get any of the more "advanced" features (like predictive text) for my native language keyboard.

It's been, what, at least five years(?) since predictive text was launched. I never expected to be the first to be supported, but starting to feel a bit ridiculous when some languages with a few tens of percents more speakers have had support from nearly the start.

Meanwhile third party keyboards have had support for ages. I'd rather use the stock keyboard, but can't bear it in its current state.

It is not, and doesn't even try to be, a Reddit replacement, but https://tildes.net has impressed me with its quality of discussion. More akin to HN, but with a subreddit-like system to facilitate a wider range of topics than is usually found here.

As a metal music listener with fond memories of Guitar Hero, I’ve enjoyed Ragnarock a ton.

You play as the drummer on a viking boat, hitting the notes (similar to GH) to the tune of power metal. Nice workout, especially if you really get into it and start exaggerating your movements.

The trailer gives a better impression than I can.

Not sure what your source for ”doesn’t support 3rd party software” is, so it’s unclear what that actually means, but there are numerous examples on Andreas’ YouTube channel about porting software to Serenity, e.g. Diablo [1].

Maybe the text you read refers to the OS itself and all first party software being written without external dependencies?

[1] https://m.youtube.com/watch?v=ZOzZ8R4gphE

I scanned the last couple months of their blog posts and could not find anything to support that claim. The docs or pricing page don’t seem to indicate anything like that either.

The only related thing I found was that free accounts are limited to one user that can trigger deploys in private repos, while anyone can trigger deploys in public repos (assuming I understood the announcement correctly).

I think the origin might be ”[ter]minal file [e]xplorer”, though the author might correct me here.

”Tere” is also, perhaps unsurprisingly, used in Finnish.

I think that is meant to be parsed as: Just like you can't check if the fridge light is on without opening the door (which of course turns it on), it's hard to know if a system is resilient to failure without having one. It just might be that there hasn't been a situation that would cause a failure.

Some Minecraft mods add items that force the game to keep certain chunks loaded. From the casual "Can't you just" I assume the parent meant those. It is however also possible, but much more complicated, to force the game to keep chunks loaded in Vanilla Minecraft. [0]

[0] https://www.youtube.com/watch?v=dx5Wd28AKxQ (the video is a couple years old so the current implementation might be different, but I think the basic principles are still the same).

Aside, but for those like me who can't help but wonder: EBT (I believe) stands for electronic benefit transfer, apparently an electronic payment method issued by welfare departments in the USA.

The Battle of B-R was surpassed recently by the Battle of M2-XFE, the largest (by ISK value destroyed) battle of the ongoing world war. While B-R saw a total of ~80 Titans die, in M2 each side lost more than that.

Interesting summary from the developers: https://www.eveonline.com/news/view/the-massacre-of-m2-xfe

At a quick glance it seems like some React component is constantly re-rending.

Quick glance in this case: took a couple second snapshot on the Performance tab and saw a lot of React related calls.

I tested it with my native language (both the text on the website and the browser UI). The autofill interface did not show up.

Then again Finnish has anyway been a second class citizen when it comes to iOS features.

I tested it with the ”Welcome back” equivalent in Finnish, German, French and Chinese. None of those languages caused the autofill interface to show up.

Safari is in Finnish on my phone, and I used the phrase ”Tervetuloa takaisin” to test. For the other languages I used whatever Google Translate suggested.

Seems like their Content Security Policy should block those from executing as "unsafe-inline" is not allowed.

It seems they are fetching the comments from the Hacker News Algolia index. Curiously they seem to un-sanitize the comment content before inserting it to the page DOM as one of the sibling comments proves.

The Algolia index contains the comments encoded as HTML entities, so they should be safe to insert as is, but seems like the page is first converting it back to HTML, which causes the script and span tags to render as HTML instead of text like here on HN.

I believe the commenter meant that only the build server should be able to write to the build artifact repository, so ”write access from the build server” would be correct.

The local part (i.e. "username") of an email is restricted to a limited set of valid characters.

https://www.jochentopf.com/email/chars.html

Personal preferences aside, the original article [0] on the Netflix and Facebook domains gives context which is no less charming, at least on ethical grounds.

Quoting the relevant part: "They're welcome to have them back anytime they want."

[0] https://tinyprojects.dev/posts/i_bought_netflix_dot_soy

The site does not lie when it claims cranking the creativity slider to the max can lead to messy and weird results...

https://thisanimedoesnotexist.ai/results/psi-2.0/seed37303.p...

I reproduced it to happen with just the animated glow behind the todo list. Zooming in and then out to this animation throws my 14.2 XS Max to the lock screen.

https://codepen.io/maybevain/pen/mdrpPEg

The difference there is that the pausable SVG is embedded on the page as an object element. There is Javascript inside the SVG document that is enabling the replay to be pausable.

Github readmes however only allow embedding SVGs as images, and Javascript won't work in that case.

EDIT: added a missing word

There's also the added benefit of being able to list the github.io domain on the Public Suffix List [1], which means that no cookies can be set for the top level domain, only the *.github.io subdomains. This prevents the platform users from accidentally revealing their cookies to every other app under the top level domain.

EDIT: to ellaborate for the interested, the Public Suffix List is used by browser vendors to decide what part of the URL is considered the TLD for display and cookie security purposes (and I imagine others).

[1] https://publicsuffix.org/

I wanted comments on my blog/website (maybe more as an academic exercise than on the expectation that someone would actually comment) but wanted to keep it as low-maintenance and dependency free as possible. As the site is build with a static site generator (Zola), it would need to be an SSG friendly system.

The code is already hosted on Github, so I created a separate repo for the comments where each post would get an issue. Zola will pull all the comments on each issue on built time and embed them on the respective blog pages. A webhook on the repo will trigger a built when a new comment is made.

Can't say this system is battle tested yet, as there's been nary a comment posted, save for the couple test ones by me...

I really enjoyed Zola as well. It's sufficiently simple that the learning curve is really gentle but has just enough features to cover all my needs for a static site.

Coupling it with Tailwind for styling meant that developing the theme was really smooth (slowest part of changing a template was waiting for the browser to refresh, i.e. < 1s).

I assume I was hit by an automod of some kind, as the first thing I did after creating this account was to post a comment with a link (elsewhere in this thread and relevant). Maybe a heuristic to catch bots?

Did not notice being dead myself before reading your comment, so I assume someone vouched for me.

Most likely your browser is caching the image. Open dev tools and disable cache in the network tab. (If you are viewing this on a desktop browser.)

I was wondering the same. Seems like returning a no-cache value for the Cache-Control header prevents the Camo service from caching the image [0].

My browser did however cache the latest image (which is why I thought the system was not working for a second), and I'm not sure how to get around that.

[0] https://docs.github.com/en/github/authenticating-to-github/a...

EDIT: I see. The no-cache causes the Camo service to refetch the image every time it is requested, but it still applies a 4 hour cache time to the response to the browser so it is anyway cached on the client side.