bfred_it

I remember reading of Babel maintainers releasing betas and asking for feedback but not many helped; most just came to complain after the release.

Webpack 4 has been in beta for a while but not enough people tested it on real projects, evidently.

That sounds like an attack on westerners. Obviously westerners develop ideas for westerners first; That’s what they understand and that’s what they need. The lack of solutions for the billions of users of a writing system should not be the fault of the people who don’t use it. Sure they can do better, but they don’t deserve that tone.

Hasn't that always been the case? Powerful people always wanted more power, throughout history. Now nuclear essentially makes it impossible to go to war with powerful countries, so we're stuck with bullies doing whatever they want. If the bullies are smart enough, they won't attack other powerful (i.e. nuclear) countries.

I noticed last winter in Seoul. I could barely use my iPhone 6S Plus outside. I had to regularly walk in stores and blow on its back to warm it up. Super annoying when it turned off at the peak of a mountain and I couldn't turn it on until I was half-way down.

It doesn't tell you why it turns off either, I thought the battery was dead when it started regularly turning off around 20-40%

Definitely: tag yourself in photos that aren't you. Eventually Facebook will think that's you.

They warned me that they activated it, so it wasn't silent, it was just opt-out (not that it's particularly better, but let's use non-clickbait terms)

That makes me wonder... what if non-luxury water was legally fixed to a set price per liter?

url(attr(...)) isn't supported by any browser yet, AFAIK

Hang out with people and hear their problems. Usually these are not as clear as "I wish I had a way to access my home PC files from work" but more like "damn, I left by USB card at home!" (hinting at Dropbox)

What do you mean by "Instagram does block javascript"? What JS does it block?

The extension is just a way to inject this demo into any site, but extensions that you install can run JavaScript in any site they're allowed to, so this "hack" isn't necessary in that case.

In short: this works when the SERVER returns a page with pre-entered information.

This is common when returning to a form you previously filled, like an address for, but it's very, very rare for this to happen to a password field. Like, why would a server send you a password field with your real password pre-entered?

Every other type of data is fair game... given that the attacker can inject CSS into your pages.

No it does not. CSS selectors do not apply to input content and `[value]` selectors apply to attributes, which are not updated by just typing in it.

This is not a CSS keylogger if you need to update the attributes with the input value via JS.

Edit: this apparently works on React sites because React seems to update the `value` attribute as well. Maybe that should be fixed as it’s unnecessary.

If this is wget, my bicycle is a car.

This isn't "Wget in 50 lines of C code", just `wget --help` page is 192 lines.

Relevant self-plug: I co-wrote an extension that does this between browsers and several text editors, it’s called GhostText

https://github.com/GhostText/GhostText

> While it is expected that the runtime error would float up and terminate the program

This will supposedly happen in a future version of node. [1]

[1]: https://nodejs.org/dist/latest-v8.x/docs/api/deprecations.ht...

I think, but could be completely wrong, that browsers can reject a pushed resource at the start. Since the "connection" cost for each resource is minimal, this wouldn't be too much of a problem. Someone confirm or deny this.

Things like this make wary of moving to Windows. Most OS X apps didn't take long to become retina-ready.

VLC is one of the most common Windows software and it still took until 2018 for it to work correctly.

You trust browser vendors pretty hard already since you're routing ALL of your information through them.

> probably be able to compromise the ENTIRE web

I don't buy it. HTTPS reduces what you can do, not increase it. At most it can give a false sense of security but that's about it.

Zero benefit, except the benefits described in the first paragraph of every HTTPS article.

Anyone can inject content and scripts into your HTTP pages.

Migrating isn't always easy, but it can always be done.

Some extensions like Google Inbox for Chrome will inject a single `iframe` that points to a `chrome-extension://` page, so while the page might notice the element, it can't access its content.

I think you could use the Shadow DOM in closed mode to prevent any information from leaking. [1]

[1]: https://blog.revillweb.com/open-vs-closed-shadow-dom-9f3d742...

Yes, after you enable Developer mode: https://i.imgur.com/Uehu1As.gif

Does this have to be an extension with `<all_urls>` permission? Can it be a bookmarklet that will just open the full-fledged HN in a new tab?

Really? I was actually surprised of how well Google translates Italian in most cases (I'm Italian).

Most of the times, I encounter major translation issues when the original sentence is barely intelligible in the original language. Other times there's a small mistake which could be understood by context in the original language but it's completely lost once translated — like it happens when you try to translate jokes and puns or when you miss a comma.

People generally don't write correctly, so Google needs a lot of luck to understand that "Let's eat grandma!" doesn't actually translate to "Mangiamo la nonna"

---

I translated this whole comment for the sake of it and the result is extremely good. Not completely natural but well beyond understandable.

> Collecting data has never been about making better products.

I’d argue that Google Maps is a much better product BECAUSE it collects a whole lot of information from its users. The most visible one is the traffic information, you literally cannot provide that information world wide without collecting data from your users (unless you want to burn all your money on installing sensors on every street corner in the world)

> Big company does product placement in movies and TV shows.

Saved you a click. Not much else you didn't already know.

Probably because AWS is still more efficient/reliable than building/maintaining your own.

What you say already happens for MVNOs and it works: https://en.wikipedia.org/wiki/Mobile_virtual_network_operato...

For me the App Store is one of the worst apps on iOS. Just look at how many complain about its poor search results. I just skip them and use Google to search for iOS apps.

There are ways to gauge interest without asking. The classic "getting 70% closer and letting the other person kiss" is one way.

I'm not saying people should be able to kiss someone out of the blue, but if it feels like the other person is interested (for example if they reciprocated your flirting) then I don't see the issue with trying.

I did ask for a kiss more than once when I was socially inept; it killed the mood every time. Never again. The same people I asked came around later and I had meaningful relationships with them. So don't tell me "attitude like yours"

Edit: I should add that different people have different ways to see it, I get that. For example some women might like being asked if they want to split the bill, seeing it as a sign of respect, others might not like it at all. So one has to decide case by case.

Do you really want to ask someone if they want to kiss? What are we becoming?

How close are we "Please sign this contract to initiate physical contact"?