HN user
One of the strategies that changed my sleep quality for the better is to stop taking coffee after 9 AM; after learning that caffeine has a half-life of around 6-7 hours[0], but a quarter-life of around 12 hours. If you have a cup of coffee at noon, a quarter of that caffeine can still be circulating around your brain at midnight.
Slightly related, but I use age[0] for most of my non-automated file encryption tasks; and one of the neat features it has is the ability to encrypt to a GitHub user's pubkey[1].
[0] https://github.com/FiloSottile/age
[1] https://github.com/FiloSottile/age#encrypting-to-a-github-us...
I imagine when the branding is complete we'll get the following gem:
<meta property="og:title" content="Meta">
<meta property="og:site_name" content="Meta">
<meta property="og:url" content="https://meta.com">
However, I do get the feeling that Meta will aim to eventually become a household proprietary name and thereby water-down what can be considered one of the broadest, most abstract terms we're all familiar with.
In terms of traffic, my website received about ~24,000 visits in the span of about 3-4 weeks, with the majority of the views (~16,000) occurring in the first week, but the effect continued for quite some time after due to back-linking, social media sharing, and whatnot.
For reference, my site averaged less than 50 visits per month in total before my blog post hit the front page (in April 2021).
Only in the last month as of writing this comment (October 2021) have the numbers trickled down gradually from the hundreds to the tens.
In terms of performance, I have a static site (built with Jekyll, hosted on Netlify, BunnyCDN for media, and proxied through Cloudflare) so the traffic spike didn't affect the site at all. Not even a little bit.
Thank you, I've been made aware of this and have amended the post to clarify that it's ineffective w.r.t. FLoC; for the technical reason that you mentioned.
Bootstrap and Jekyll for all of my personal sites and side projects; with HTMX and/or vanilla JavaScript when needed. Same stack as well for clients who need static sites.
For other clients (that need a CMS) it's WordPress.
It’s worth noting that HTTP itself has unparalleled performance for the Web due to the protocol itself (and web servers that deliver it) being optimized over the years to support compression, transfer encoding, encapsulation, etc.
Gemini also transmits a mimetype that’s text-based (text/gemini) but it runs on port 1965 — as opposed to the usual 443 (HTTPS) or 80 (HTTP) that Web browsers usually connect to by default. Gemini therefore needs customized “browsers” that will read the protocol and parse the data that’s received from a Gemini server, however there are Web Proxies that do this as well [0].
In that sense, it’s an alternative to the Web inasmuch as it’s an alternative to HTTP; but (importantly) without any maturity, performance, or scalability whatsoever.
Now to be fair, Gemini doesn't claim to replace HTTP in any way; being a niche, small-web technology.
But in my opinion it's pretty pointless since it uses a strict subset of the HTTP spec which makes it feature-delimited by design.
Using HTML sans CSS/JS will give you a similar yet better experience.
Meanwhile, temporary exceptions will be granted to dedicated banking and digital wallet apps so that they can “obtain broad visibility into installed apps solely for security based purposes.”
I'm sorry but why does a banking app need to see a list of system-wide packages? And for what security-purpose? If all apps were tightly sandboxed in the first place then this wouldn't be a problem that requires edge-case solutions.
Either way, based on the same quoted paragraph, my prediction is that Facebook will now roll out a dedicated wallet app; along with regular wallet functionality it will gleefully take advantage of this exact loophole.
This is amazingly useful. I've always had to settle for a tradeoffs between widths and alternates when choosing a terminal/IDE font; I've just created the perfect combination that fits my readability needs.
Storing the configuration in URL query strings is also a nice touch. Thank you for making this.
Great article, thank you for sharing.
I use Flatpak extensively and I fully agree with you and the author of the response that there is a need to balance practicality vs. idealism when it comes to (fully auditable) FlatPak apps, as well as FlatHub's overall approach and continual work within the desktop Linux ecosystem.
What's more, the fact that an entire domain was devoted to what could have been a blog post gives credence to the responder's notion that this is FUD which, while valid for discussion, is most certainly not beneficial to the FOSS community writ large.
Either way, from the article you linked TIL about Flatseal[0] so I'll be taking that for a spin!
This is a really cool concept.
I'm not a fan of Tailwind's approach if I'm being honest, and while at first glance they look similar, from a practical standpoint Turbo is something I can actually see myself using to create landing pages and design systems without having to conform to Tailwind's insane naming scheme. The conditional styling also looks very intuitive.
To that end I appreciate the Turbo vs Tailwind page, and I'll definitely take this for a spin at some point (not having to explicitly exclude Sass or remove unused styles seems like a refreshing way to handle performance).
The in-browser compiler is also something I've never seen before, and from what I'm understanding that makes it extremely portable; no package manager necessary.
Tangential, but I saw a film sometime back called "The Lighthouse" starring Willem Dafoe[0] that was beautifully shot in monochrome; and exuded age-old themes of isolation, loneliness, and eventual paranoia.
I can only speak from personal experience, but I've removed fog almost entirely by removing sugar and carbohydrates from my diet (Ketogenic), and doing intermittent fasting (IF).
My energy levels are always elevated, I sleep better, and the clarity of thought that comes with a Keto + IF combination is something I only wish I had known about when I was younger.
Whilst I'm speaking anecdotally, the benefits are grounded in science and is something that anyone can try. Once you get over the initial "keto adaptation" period the rewards will be well worth the effort.
Also, intermittent fasting (and even just removing sugar) is something that can be done separately if you're not a fan of low/zero carb lifestyles.
Listen to someone reading a dishwashing manual.
I must be the odd one out but I'm sorry, I found this track both fascinating and hilarious!
Very eloquently read by the way.
I think both Moxie and Signal have to be more open to criticism instead of hiding behind either a CoC or a reactive/elitist mindset.
They can't eat their cake and have it. If they advise vulnerable groups to use their technology, then they're morally obligated to explore and mitigate any and all issues brought to the table.
Signal has lots of funding, so getting "insulted" is not an option — in my view that only applies to FOSS maintainers who work for free.
These hackers are clearly are a misguided bunch. CDPR is the only major studio that doesn't enforce copy protection on their games. The CEO spoke about this multiple times and that's gotten them a lot of goodwill in the gaming community.
The fact that some gamers and these hackers are angry that "a software company isn't immune to software bugs" is a testament to a) their lack of maturity and b) a sign of the times.
I hope CDPR pulls through and gets past this.
This only applies to browsing where the user's cache is present, yes?
At least in Firefox 85.0.1 Desktop and 85.1.1 Android (when I tested) clearing the cache also nukes the favicons as well.
Also, I get different hashes when I test on demo.supercookie.me after clearing my cache on mobile, and also across Private windows on desktop.
The statement "[...] even in the browser's incognito mode and is not cleared by flushing the cache, closing the browser [...]" is misleading, at least where Firefox[0] is concerned.
[0] https://blog.mozilla.org/security/2021/01/26/supercookie-pro...
Not that I'm aware of but it would be a fascinating (albeit fictional) deep dive if I ever came across some anecdotes of that.
By "similar idea from a different age" I'm assuming you're speaking of Terence McKenna's Timewave Zero?
Never heard of TempleOS before, but God speaking through the machine isn't quite a novel theme I guess (referencing Ghost in the Machine[0]). I reckon at some point Machine Learning will resemble the fabled Artificial General Intelligence, and that subsequent emergent property could in turn be conflated with God by some stretch of the imagination or context — if it uses a TRNG vs a PRNG well then we'll have something on our hands :)
I think naturally occurring psychotropic substances should not be illegal, i.e. don't criminalize plants or nature itself. Plants that contain psilocin and psilocybin, DMT, THC, ibogaine, mescaline, and any other natural compounds should not be illegal.
However, man-made drugs that are chemically derived such as cocaine, heroin, methamphetamine, fentanyl, etc. should most certainly be kept on the illegal list.
Why the personal distinction? Because the natural "drugs" are not addictive, they are psychosomatically harmless, they have been found to be extensively therapeutic, and it's nigh impossible to surpass the LD50 and induce a lethal overdose. On the other hand, man-made drugs destroy the body, the mind, have lead to an ongoing opioid crisis, and can easily lead to death.
Just my $0.02
I have some contacts that use Signal, and others Telegram, and so I end up using both apps on a day to day basis.
Signal is secure by default yes, but their UX/UI is very lacking outside of "basic" communication, which ends up being the use case for me.
Messaging that's media-heavy or involving stickers, GIFs, multi-accounts, links (Instant View is amazing), or file sharing is better achieved in Telegram, in my experience.
In some ways they both support different security postures, with Telegram being more flexible with opt-in E2E so the user can take advantage of the cloud features, while Signal foregoes these bells and whistles for a most-secure-by-default approach.
It seems to me thats it could be interpreted as a choice vs. opinion, but I wouldn't go that far.
For me, Telegram is akin to org-mode; the Saved Messages personal cloud is where I store all my links and files that I need to share between my desktop and mobile devices, and I make use of private Groups to further aggregate links and ideas, not to mention groups and chats where bots for things like Integromat, IFTTT, UpDown.io, etc. provide me with information. Telegram's native applications really make a difference here, they are a cut above the rest compared to today's messaging offerings, in my opinion.
Hence my messaging and contents to some extent is governed by which app I use, but I don't ask my Signal contacts to use Telegram because if we're both chatting on Signal, we know why. Vice-versa, I don't ask Telegram contacts to use Signal because in general those chats are with my SO and friends who need overall security that's feature-rich but not bulletproof 24/7.
That being said, I appreciate the article clearing up the technical differences for a wider non-technical audience, I do have a feeling however that when users experience both apps they'll make a decision to use them based on UX/UI more than anything else (skewing towards security or features as they personally see fit).
Worth noting that unlike the cells of the human body, cancer cells are unable to utilize ketones as an energy source[0][1], hence the benefits of a ketogenic diet.
A ketogenic diet can also be ideally coupled with intermittent fasting[2] in order to engage/enhance autophagy within the body.
[0] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5842847/
Those who support censorship of any kind are unwittingly helping to give birth to the proverbial dystopian overlords that determine how wealth, information, and dopamine are distributed.
Overreaction creates opportunity for actors that seek to tighten social control.
Take from that what you will, but I for one strongly believe that bad ideas can only be fought by better ideas — not by silencing of any ideas, and certainly not by silence itself. Bad ideas fester in darkness, but will wither in the light.
Just my $0.02
Separation of concerns is of the utmost importance in my experience.
Domains, DNS, App/Web Hosting, Email (Domain and Transactional), File Storage, Version Control, Backups, Secrets Storage, Directory Services, Zero-Trust/VPN, etc. should be on different providers (or different accounts if an overlapping provider), whether the services are third-party or self-hosted or a mixture of both.
This is perceptible to some degree, but in my opinion a highly practical way of applying this technology is to intentionally lower/shift the quality on the fly just a bit so as to "blend" the layer boundaries where the stitching happens.
That way the doctoring isn't apparent, you still benefit from the massive bandwidth savings (which I consider most important anyway), and it appears more believable in the real-world context of variable bitrates.
I'm from the Caribbean and I can attest to this. We're always baffled at the neuroticism of America's obsession with identity politics and tribalism, especially as it relates to race and culture.
In my country for example we have six distinct races/ethnicities, from indigenous to post-colonial. When either has a celebration or period of cultural remembrance, we openly dress, cook, and celebrate in the same manner. The concept of "cultural appropriation" is nothing but hubris in our minds.
Perhaps we're more fundamentally bonded due to our shared "fragmented" heritage, as V.S. Naipaul frequently expounded upon. Perhaps we're just not victims of inept ideological monoliths that are perpetrated by a radical left and radical right as it is in the US (along with the forced illusion of binary if not zero-sum choices).
Either way, we understand that racism is inescapable in some small measure but we try our best not to elevate it above reason and certainly not above national unity (or pride for that matter). Caribbean people are both welcoming of foreign cultures and curious in our exploration of the same. We wouldn't, couldn't, have it any other way.
I run my own WireGuard VPN on AWS Lightsail simply because [a] I don't want my local ISP knowing my browsing habits, and [b] using a clean, consistent US IP address is suitable for my work and other accounts.
I also use DoH via NextDNS, which is tunneled through the VPN as well for backwards compatibility.
The above setup keeps me secure and covers 99.9% of my use cases. If for some reason I need actual anonymity (which is the rare 0.1%) I'll then use Mullvad.
If OTOH someone's threat model requires anonymity 99.9% of the time, then I hope they'll also be adept at jumping through a few more hoops than simply trusting some $3 VPN provider that sponsors YouTube videos — IMHO of course.
I'm close to the 100 domain mark with Namecheap, and it's the registrar I use and recommend for both clients and myself. The UX, prices, and grace-periods are second to none.
I've seen this happen multiple times to people I know.
Always check for individual domains via the whois command, and if you need to do searches across a few TLDs use https://njal.la
The word cybernetics comes from the greek κυβερνήτης (kybernḗtēs) which means a pilot, governor, someone who steers.
TIL: Where Kubernetes got its name from.