rightos

I just want everything colored as to hide the maximum amount of crud that tends to build up. Usually black.

How's the multi-account and desktop notification support in it? I can't find a lot of details on what it does, but there's a mailpile-desktop package that seems potentially promising?

I'm still using Thunderbird, which is barely maintained for a decent standalone IMAP client - it's beginning to feel pretty ridiculous. I was having some search issues the other day and I looked at alternatives - the options were basically Outlook, Claws Mail which is ugly as sin, eM Client which is Windows only and Mailspring which actually looked pretty good... right up until it asked me to make an account for use with my own IMAP servers - no thanks.

I didn't think this was a big ask but I guess now that most people just use a single Gmail account the market for such things is dwindling. Here I sit with 7 accounts in Thunderbird. Maybe I'm just going to be stuck with eM Client or Outlook and using RDP to check my email. I'm willing to pay, someone please give me a decent cross platform alternative with a GUI, ideally a proper, non-electron one.

The TUI clients I've looked at all seem to suffer from some mix of:

- Poor mail notifications

- Poor multi-account support

- Single maintainer that could disappear at any time

- Archaic keybindings, or perhaps I'm just too lazy to learn them

- HTML mail is used widely now as most people use webmail and just doesn't map well to console applications

Overall when I want my mail client to "just work" I've found them to be piss poor compared to Thunderbird. Which is beginning to seem rather silly, but it's still my experience.

I don't know what to do. Maybe I should fork Mailspring, strip out the account garbage and just tolerate Electron, but that'd create a whole bunch of maintenance work I just can't take on right now.

WebRTC options are improving, check out

https://github.com/ant-media/Ant-Media-Server

I'm not sure why the 2 options being offered here seem to be either Airpod-style non-sealing hard plastic or full on over-ear cans. What about standard IEMs with better sealing silicon tips? Or the foam variants sold by Comply and similar? Wouldn't that better allow you to isolate external noise and listen at a lower volume than the separate cans? Especially for public transit use cases they'd seem to be better, unless I'm missing something?

You should also factor in diminished enjoyment - if you're worried about bothering your neighbor by turning up the volume and are just keeping it lower out of courtesy, well, that's not really an ideal scenario either, especially if you have to put up with barely hearing what you're listening to as a result.

Additionally, many of the products being suggested here are not really rated very well and would be hard to suggest to someone listening on even using cheap stuff like the Philips TX2. I don't understand how these can be recommended by any reasonable measure.

$30 https://www.innerfidelity.com/images/PhilipsTX2.pdf

A few suggestions from the article, $50 and $200+ https://www.rtings.com/headphones/1-2/graph#617/2085/463

Yeah, Google needs to make this move on Android. If they're just say "okay, if you want Android 10, you need to provide your drivers in this exact ABI way, no more custom software crap, we push the updates", that'd be awesome - basically, use the Windows model.

I believe the only reason they didn't do this out of the gate is because device manufacturers wouldn't have signed on for it. Android is establish enough at this point that it's not like many device manufacturers could really step back from it at this point.

Treble is a strong step in this direction - but they need to take it farther, open up customization APIs and drop the garbage manufacturers pump into devices. The way Treble is right now it only benefits power users who have their devices rooted - who could update without the manufacturers permission anyways.

I wonder if their only hesitation at this point is the mess they're making with ChromeOS and all their other garbage... I think the Android roof was the right one to bet on, massive numbers of users with primary devices running it, but I fear they've done significant damage with their other offerings.

Isn't iPad market is shrinking or staying the same? Not growing by much certainly. And the Surface line pretty much succeeds primarily on the more laptop style models as far as I've seen at least.

A tablet and dock is clumsy and a poor experience compared to a laptop in both hardware and software. I would never consider replacing a desktop OS with iOS or Android in their current states, I think Samsung did some work to improve multi-window support so perhaps that's worth a look, but I don't want a sloppy keyboard that folds randomly when I'm trying to type or I can't position comfortably on my lap on a car, bus or while sitting outside.

After owning a few older iPads and Nexus tablets, I haven't used them in years, instead preferring to do content consumption on my phone or TV and anything more on a full PC. Most people say they even prefer to do basic shit like shopping on PCs - easier to comparison shop, bigger screens, more capable machines and user interfaces. This situation isn't going to improve for tablets, they're trying to hit on a niche that's quite limited.

We also won't be able to specify the outcome precisely even if we somehow had a guaranteed outcome in mind.

Politicians will screw up the implementation, businesses will engineer around it and the alternative solution might ultimately come out to be a better one in practice than in theory.

Trying to define economics by simple equations which you expect to define policy is a lost cause.

I don't think you can come up with a quality test for economic scenarios in a truly scientific way, many monopolies dominate for very different reasons, many industries have very different mechanics, and worse, regulations are often implemented in vastly different ways and often won't come out the way you'd like them to even if you have a perfect scientific answer to a given problem.

You can't guarantee or even approximate a given input and output for a scenario like this.

Note that most of the research referenced there isn't properly controlled - it's sort of hard to control for something like that, you'd have to have a therapy that could offer something comparable without matching it, so comparing it's effectiveness to placebo seems in some ways quite apt.

It's not forgetting where they are, but forget why they are where they are - I've had this happening occasionally in a variety of forms.

Anyone have the known bad .exe.exe? I'd like to take a shot at analysis on it.

I seriously wonder if Fossil's model of keeping all issues in the clone isn't the way to go - set up a public "FossilHub" or some such thing if it doesn't already exist and then you get a local copy of everything, no worries about providers at all.

Essential died, I'd look at Android One devices like the Nokia 6 or Xiaomi Mi A1.

Wow, given this and the AI system it sounds way too much like Psycho-Pass. Pretty horrific indeed.

Why can't I ignore it? I have european customers but they chose to sign up with a business in a foreign jurisdiction where their laws don't apply. If it's a problem, the EU can feel free to block my sites, but I can't see how it's negligent to not comply with laws that don't apply in my country.

I don't comply with laws from many other jurisdictions either. Should I start applying censorship laws for China and Saudi Arabia too? Why should the EU be special?

How? I'm not in their country, their laws don't apply to me or my business in any way, shape or form. They could perhaps argue I do business there, but that still doesn't give them anything to press charges against. Best they could do is block my site as far as I can guess...

Is there some way they can fine me with me being in a country completely and totally unrelated to the EU?

I'm wondering this too actually, I run a small business, we collect only the bare minimum of information from our customers but we do have some European customers. I'm ignoring GDPR completely, is there any downside for me? Will they block customers from using my service? Will they sieze my European cloud servers? Or can I safely do nothing as I currently am because I don't reside or have a registered business in Europe?

I'm pretty sure that's incorrect at least today, it's possible to skip through the initial setup on a stock Android device without adding a Google account or accepting a ToS.

Didn't that Microsoft app not show YouTube ads? Seems like a pretty different scenario when you're ripping another company off.

You as an attacker would arguably have just as much trouble simply unlocking the device, you'd be left with the same amount of protection approximately. As long as you have disk encryption, the security margin would be about the same. A marginal improvement at best.

Yes, that's great for asymmetric stuff, but we're talking about TOTP, which uses a fixed symmetric key and a hashing algorithm. Unless you can run arbitrary code on the secure element, like you can with Intel and Qualcomm stuff it can't be done and even if it can be, it'd be a significant effort investment for what's probably a negligible secure it gain in practice. Still, I'd be pretty impressed if any apps did so.

Are iOS Authenticator apps actually calculating OTPs on the Secure Element? Is there a way to execute arbitrary code on it? If not, they have to pull the keys off to the main CPU where they're open to attack like anything else. Still secured as private app data, still mostly protected, but an attacker with a jailbreak could still dump them.

I know for a fact I can dump Google Authenticator keys from my Android device with root as I'm able to back it up and move it to another device. Theoretically on most Android devices even there's a secure enclave available that could do it, yet I haven't seen any apps use it.

Most of the benefit of OTPs really comes from approving on a secondary device rather than protecting the keys to an absolute degree though, so this is probably of little concern to most users. In fact it may provide a convenience benefit, I like being able to backup and move my keys, without that I probably wouldn't use 2FA at all.

I don't think theres much value in "something you have" so much as there's value in "approving this authentication via another device". Adding an additional device to compromise running an entirely different platform makes attacks much more difficult, even if we're talking about a poorly secured Windows machine and outdated Android phone. Enough to make you effectively invulnerable to almost all non-targeted attacks which will only breach one side or the other.

Correct me if I'm wrong as I don't have any recent experience with them, but don't iOS devices expose an authentication interface even without unlocked interaction from the user?

Apple's own guide doesn't seem to indicate any form of interaction is needed to enable that interface. That interface is what's attacked by devices like GreyKey if I'm not mistaken. Android devices when not manually unlocked and toggled present no such interface.

On Android no such pairing system exists (except for USB debugging), you have to explicitly allow it every time you want to mount the device and no device shows up whatsoever, the USB data connection is disabled until after you pick a choice other than charging. You must unlock the phone and explicitly enabled the connection, I'd argue that's still better than the iOS implementation where an authentication interface is still available for 7 days even when locked.

On Android no data connection is made, when a connection on the data pins is detected one is offered, but as far as I can tell no device is even detected by the OS until after picking a mode, nothing to attack.

Let me know if I'm missing something, but I get no change in Device Manager/dmesg when plugging my phone in, indicating no data connection to me. It would appear the entire data connection is disabled until a mode is picked.

Android has literally had this feature for ages. By default plugging your device in puts it in "charging only" mode and you have to tap a notification and explicitly select MTP or PTP mode before it even attempts to talk to the computer.