1,059 karma · joined August 31, 2014
I can't write well. Let someone say it who can: (Ursula Le Guin, 5min) https://www.youtube.com/watch?v=s2v7RDyo7os&t=337
As a separate device, it should be offline always IMO, and perhaps the size of a passkey. Or one of those banking devices with a display that show an authenticated text saying what you are confirming.
Never mind the technical challenge to allow doing anything with the DOM but disallow reading the forms. Like, prevent the forms leaking its text when you do funny things like testing character width via line breaking or font changes.
The question unnerves Neo and suddenly he feels his phone vibrate as it unexpectedly reboots. The standing Agents snicker.
Last month I had 250k failed password attempts. If I had a "weak" password of 6 random letters (I don't), and all 250k had guessed a valid username (only 23 managed that), that would give... uh, one expected success every 70 years?
That sounds risky actually. So don't expose a "root" user with a 6-letter password. Add two more letters and it is 40k years. Or use a strong password and forget about those random attempts.
I just did a quick test: local search for a specific law term. Kagi, Google and DDG all found the roughly same relevant sites in the top five. Each has a different top result. Google's and DDG's are a private law company. Kagi's first is an official government site. (With a suspicious non-government domain, so I had to check, but yes it's prominently linked from the main government site.)
(Edit: I'm back to report the results. There was either no change in the water level, or a change below my measurement tolerance ;)
(Edit2: Here is a more serious take of that experiment: https://skepticalscience.com/Sea-level-rise-due-to-floating-...)
Same problem: the best-case outcome is that we never hear anything interesting from that rocket ever again. But it should be a lot cheaper.
It's a bit more visual, but still gets quite math-y enough for my taste.
I'm not using that one yet, but I very much like their idea to highlight infrequent sources. If I hand-added the feeds, I feel they should by default have at least an equal chance of me noticing a post in them, without clicking through all the feeds.
I also like the idea of subscribing to everything and then privately filtering the for special-interest keywords. I'm not doing that currently, but I subscribe via RSS to some searches or tags. E.g. here via hnapp.com, or on StackOverflow you can subscribe to tags, or the RSS feed of low-traffic subreddits.
In medicine, the primary goal is to help, rather than understanding why something works exactly. Sure, understanding is an important goal too, it's just much harder to achieve than being able to help. And less important than knowing that your treatment will work, without any major side-effects, for the kind of patient in front of you.
I suddenly understand why it makes sense to integrity-check a payload that is already protected by all three of TLS, TCP checksum and CRC.
I think working on out-of-the-box experience is not very attractive for volunteer contributors, so I guess the situation won't change unless we find a way to sponsor that work.
So it is for advertising. You don't need to draw a clear line for every case before you can make a law.
I like how it turned out with email advertising, actually: spam is defined to be whatever people put into their spam folder.