superlupo

Really? Unbelievable!

Do you have more sources on that please? Thanks.

And how many of them are donating to or sponsoring the cURL project?

I have been a developer and nerd since 25 years, and I always expected that Apple also patches some previous versions. E.g. around a week ago they released both iOS 17.2.1 and iOS 16.7.4: https://support.apple.com/en-us/HT201222

So why should I assume that latest iOS 16 isn't completely patched? I think it's a shame to say at least that Apple has no public policy of how which OS versions are supported and which are not, it's just guesswork. Whereas I definitely know how long Microsoft supports Windows versions, e.g. Windows 10 until October 14th, 2025: https://learn.microsoft.com/en-us/lifecycle/products/windows...

I can only recommend to give Firefox another go, if you don't use it by default. It really has improved the last years, it also had made much progress in privacy features, and doesn't want to kill ad-blocker like Google wants. Also, Firefox on Android finally started supporting extensions.

Another thing: Because no other browser engines are allowed to be installed on iOS, those numbers should be subtracted from the total.

... which of course won't happen because the port can only be digits, and changing the URL spec would affect the whole world

Reading, not even trying to understand that list makes my brain explode.

I would place a bet that this will not be fixed in the first stable release. I can't remember that Apple once didn't release the release candidate.

I've basically given up reporting bugs with Apple as they just seem to be ignored and either never fixed, or fixed some years later when the corresponding component is completely rewritten.

I basically resent filing bugs with companies that have enough money to do proper testing, I don't want to work for them for free, especially if there is no answer, or a 1st-level answer who hasn't even tried the filed repro case. However, I am happily reporting bugs with open source projects.

But you still get security fixes for Windows 10 for years to come

Isn't that quite the same as running

  debootstrap focal ./ubuntu-rootfs http://archive.ubuntu.com/ubuntu/
  systemd-nspawn -D ./ubuntu-rootfs

?

You've basically reinvented REST

IAB will try to do everything to go pre-GDPR, where it could track users across the whole web. Without explicit consent, forwarding an ID like e-mail address is illegal, of course.

In the early days of video streaming services, I thought Netflix would become something like Spotify, where I could eventually watch everything.

Spotify, Apple Music, Google Music and all the other offers basically have the same repertoire, minus some specials. You will mostly be happy with choosing a single one. That is what I also would to like have for movies and series. Why is it different with visual media?

I think that's a shame. Some of my contacts only have WhatsApp, and I am definitely not gonna install that Spyware. So to those, I am still sending pictures by MMS.

Yes, there are some peaks with 10-20000 per sec.

Clickhouse seems very suitable as database. Does anybody know open source analytics tools that use it? Two parts would be needed: the client javascript tracker which injects into the database, and a GUI for reports.

Slightly off-topic: Does anyone have recommendations for self-hosted open source analytics that can handle a large volume site (think 500.000.000 impressions per month)? I can't imagine systems with MySQL/PostgreSQL as database can handle this.

Instead the machine ID should be hashed with a cryptographic, keyed hash function, using a fixed, application-specific key.

Reading https://cs.chromium.org/chromium/src/chrome/browser/policy/b..., I do not not see it being hashed with a key, just unkeyed sha1.

I hate it because I always have to solve lots of storefront or traffic sign images as I have disabled third party cookies because I do not want to be tracked by Google all over the web.

I've had third party cookies disabled since > 5 years and never had a real problem. I'm not convinced that such a complicated solution is necessary.

Why not use TextSecure/Signal? It's now available on iOS and Android, is open source and encrypted by default.

I've tried Telegram, but only 1-on-1-chats could be encrypted, and also only optional.

I got eye cancer after one second from the broken de-interlacing, but thanks nonetheless.

If you are not relying on edge case behaviour of Function.prototype.bind, including the polyfill here should be enough: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...

Recently, I have developed a small page where I wanted not to use jQuery on purpose and code against the DOM APIs instead. For IE8 compatibility I have used [1] (so I could use addEventListener and DOMContentLoaded for example), and also shims for ES5 [2] (e.g. Array.prototype.forEach) and classList [3]. While I did not run in any troubles, I don't think it is worth the effort, alone just because jQuery has a much nicer and shorter API (cp. ".on()" vs. ".addEventListener()").

But I still support the case that not every plugin/library developer should depend on jQuery by default, even if it is not necessary.

[1] https://github.com/WebReflection/ie8 [2] https://github.com/es-shims/es5-shim [3] https://github.com/eligrey/classList.js