412 karma · joined May 13, 2016
Selling default placement & promotion is a very different beast from "Dell only allows Dell-approved software on Dell computers". We can all agree the latter would have been terrible in many ways.
> If 3P app developers want to access Apple's customers on a platform developed by Apple, then they should expect to play by Apple's rules...
Strongly disagree. Customers and developers should be free to transact using their own devices as they please, without Apple involved. Apple is very welcome to offer services for money - access to the app store, support services, and promotion etc all make perfect sense.
The end result of everybody on the path from the user to the developer adding rules & taking a cut is a world that blocks digital innovation entirely and completely hamstrings the software industry.
All of that would be future product development, but I suspect this addition is for exactly that reason: so they can begin to prepare the ground for later development, not because they're going to immediately roll this out tomorrow.
Still, very neat, agreed. Almost certainly the best you can do without having some kind of backend proxy running on either the server or the user's own machine.
Last I saw, that's not really true - you get asked for BT access in general, but then you have to directly select the device you want the site to connect to once scanning happens (site can specify basic filters to limit devices shown, but little else). Sites can't see what devices are available until you actively select the device from the browser UI, and can't just show you a 'click to give full access to BT with everything'.
For example, dropping the last octet (turning 123.4.5.6 into 123.4.5.0) means you can usually still do useful IP things (where in the world do our users come from, very roughly) while making it impossible to track unique users, or to definitively recognize real individuals.
I've seen one octet masking used as standard, probably just because it's easy, but you could do any other similar change you like, optimising for more or less anonymity/granularity as required.
That coves these kinds of cases reasonably imo: you can invite somebody, and then that person can later request access when that's necessary. That sends you a notification, and they're granted access if you don't object within a preconfigured time window.
Obviously there's some trust required and/or a sufficiently long window, but it's one of the better solutions I've seen.
EDIT: https://docs.google.com/spreadsheets/u/0/d/1cpUKkoT1MUn8_xM4... has a list of the big ones, looks like https://mastodon.social/mastodon is top at 800k.
> I figured there was less than 100K people even on Mastodon
https://mastodon.fediverse.observer/stats says currently 2 million active monthly users, 9 million registered. That's just for Mastodon, so add another couple of million for the rest of the Fediverse.
I do think this example is a bit long and hard to read though. Most I've seen for projects tend to be much simpler: "I promise that this is really my work, that I have legal rights to share it, and I give the project this code to use as they see fit with no warranty etc". For example: https://github.com/TryGhost/Ghost/blob/main/.github/CONTRIBU.... And CLA Assistant is great for this if you're using Github, it's super quick & easy.
Of course it doesn't matter if you're building a small library yourself, but as soon as there's a real business associated anywhere, it's helpful to have contributions clearly documented, and to have clear control over the licensing of code within your projects.
The X1 generally worked, but there were always occasional teething issues & manual fiddling required. The Framework meanwhile works flawlessly, has official support and detailed setup guides for many major distros, and I've seen their customer service personally help debug & fix Linux issues in their forums (resulting in far more useful answers when googling questions, so far). It's in another league.
That doesn't mean Duolingo isn't useful, it's definitely helpful, even if you're living in a full immersion environment, but the map is not the territory. If you really want to learn to talk to people, you have to talk to real people. It is a completely different thing to just learning all the words and grammar, far more than I realised before seriously getting into languages.
> Locally-delivered resources such as those with http://127.0.0.1 URLs, http://localhost and http://*.localhost URLs (e.g. http://dev.whatever.localhost/), and file:// URLs are also considered to have been delivered securely.
You'd need to find a set of integrations that all fundamentally revolve around a similar data model though (chat, or task trackers, or whatever), you're not going to be able to sync anything to anything.
Monaco is the editor from VS Code, extracted and officially supported as a standalone component to use elsewhere. Internally I think the extraction work is pretty complicated, and the setup isn't effortless, but the resulting user experience is excellent imo (much like VS code itself). This all looks great!