mimsee

Time to cash in?

Apparently they deleted the Github Actions account as it shows up as ghost in PR comments.

it's apple maps bad

But you can change the commit date from cli when committing? Github just shows the commit metadata, right?

If you're referring to Google Safe Browsing lists, all major browsers check agains the same list. I've managed to get mine listed there and immediately banned on all major browsers.

Aren't most Show HN's plugs to whatever they're presenting?

I didn't know you could SEND mail with Hide My Email feature, but apparently this is a feature directly in the Mail app. Tapping the From in the mail compose screen opens a dropdown of possible addresses to use or create a new one with Hide My Email.

So perhaps a better solution was to teach them to setup their own git repo in a cheap or free uni server.

And then lose access after graduating. Great idea!

IMO there isn't a cookie nightmare but rather a tracking nightmare. I'm not fully up-to-date on if there is a separate EU directive on cookies on the internet specifically, but the GDPR is the _General_ Data Protection Regulation. Meaning that if I go and collect your info on pen and paper, I must then ask your permission on how I process and share that data, especially if sharing that data is not necessary to complete the main transaction but is somehow done auxiliary to the main purpose. (e.g. I buy a pillow online, my info is used to target ads for me.)

GDPR itself doesn't require consent for functional cookies. For example, Apple.com does not have a cookie consent box _at all_.

On tracking specifically, I feel there are at least two levels. One that happens in-browser by third party companies. These are your classic advertisements. The other is more first-party backend-heavy. These would be your local grocery store using your purchase history linked to your membership card and using that data to create analytics and targeted ads etc.

So creating a browser setting would likely not toggle all tracking away, just the ones that are "annoying" while browsing.

"According to Wikipedia..." aargh Wikipedia is not the source!

If I wanted to achieve the same result, that is to serve assets of others from my own domain, I'd just create a custom endpoint like /api/user-avatar/:userId and an action proxies the actual image from google, maybe keep a cached copy for some time to not have to redownload the image on every request.

Apple also built a custom video element for web they use for their events. See the Apple Events page[0] and click "Watch the event". It also seems to dim the video when mousing over. I kinda like the design, but the animations seem a tad bit slow.

[0] https://www.apple.com/apple-events/

Wouldn't deprioritizing interfere with regular web traffic these days, given that close to one third of non-bot traffic reported by Cloudflare is over UDP with HTTP/3[0]?

[0] https://radar.cloudflare.com/adoption-and-usage?dateRange=52...

The costs were already studied in 2023 and were deemed cost ineffective[0]. The report contained three main strategies (VE1, VE2, VE3) with A & B plans for the first two. Costs would be in the range of 10-15+ billion with 15-20+ years allocated for construction time[1, p. 47].

[0] https://valtioneuvosto.fi/en/-/1410829/report-shows-that-cha...

[1] https://api.hankeikkuna.fi/asiakirjat/697c1f25-332b-40ed-9d6...

If this reminder app to take meds can't access this API, how can HomeAssistant's iOS app access it where, I the user, can base the trigger for a critical notification on virtually anything?

So if AI research is dual-use tech, would an AI researcher be dual-use human, and get travel restricted because of weapons export controls. Dude is a weapon!

Are IP addresses considered PII or not? I remember there being multiple conflicting conclusions on that

So all Google services would disappear from the App Store because it could be argued that it provides tremendous value for Google to have their services there? The $100 USD /year fee, even if withdrawn, would trigger it, since it's a contract, right?

Mine was a horse f*cking another horse. Reminder to not browse HN while at work. Closed the site pretty fast after that.

Isn't it part of the Apple way to release expensive and weird products at times to keep Apple in the minds of people as a luxury brand. Things like $400 wheels for Mac Pro or the $1000 stand for the external display.

I can see AVP as being half luxury and half tech-demo/devkit for a more budget friendly device.

After this, who would trust his second try?

brick all WP installations using ACF on a WP Engine host

That tactic would work, if WP Engine had access to the update server hosted at wordpress.org.

As far as I've understood, the copyleftness of the Wordpress's GPL tainting themes and plugins is or at least has been controversial (I'm not in the WP community, but have read stuff regarding this drama). Wordpress itself uses React and other non-GPL licensed software in the core that yes, may be GPL-compatible but doesn't enforce everything to be GPL'd. When it comes to themes and plugins, I'd consider that userspace, akin to installing Spotify on Ubuntu doesn't make Spotify suddenly GPL'd.

Yeah and would passkeys themselves prevent the session from expiring? Notion et al can still have short lived sessions on their client apps.

1Password supports Passkeys, not sure for others. But it's one click on the login page and you're in.

I wonder where they've set the bar in terms of security. Are the phones 99% manufactured in China, but ship two pieces, screw them together and call it 'Made in EU'. Are the phones shipped in some tamper evident bags or have anti-interdiction like Librem 5[0]? Have they build any advanced security features for the phone, or is it mainly for ticking a box in some compliance 'yes yes, a local made phone'.

[0] https://puri.sm/posts/anti-interdiction-on-the-librem-5-usa/

According to the directive:

"In so far as they are capable of being recharged by means of wired charging at voltages higher than 5 Volts, currents higher than 3 Amperes or powers higher than 15 Watts, the categories or classes of radio equipment referred to in point 1 of this Part shall:

3.1. incorporate the USB Power Delivery, as described in the standard EN IEC 62680-1-2:2021 “Universal serial bus interfaces for data and power – Part 1-2: Common components – USB Power Delivery specification”;

3.2. ensure that any additional charging protocol allows for the full functionality of the USB Power Delivery referred to in point 3.1, irrespective of the charging device used."

Kysely is Finnish for query. Given that the author is Finnish it makes sense

Alive and well: https://www.nokianfootwear.com/

You can use the security-key variants of ssh keys. Those would be ecdsa-sk, ed25519-sk and others[0]. This does require a newer OpenSSH version to work. GitHub has added support for these keys back in 2021.

[0] https://news.ycombinator.com/item?id=22324074

[1] https://github.blog/2021-05-10-security-keys-supported-ssh-g...