discreditable

I run into a similar issue at work. I deploy ad-blockers on all student and staff machines. This makes our users invisible in Google Analytics. Supposedly our top browser is Mobile Safari.

It sounds like they learned password security from Runescape.

I don't think cheating in multiplayer games is comparable. Doing so harms the experience of other players.

I don't block Wikipedia. I looked at some wire traffic and I can see the SNI header as normal in Firefox 67 and Chrome 72. I found a about:config flag to enable esni, toggled it, restarted the browser, and I still see the SNI. Using Cloudflare's ESNI checker it says my browser isn't using it.

Ignoring ESNI will probably work fine for a good length of time. If pornhub implements it or something I'd probably have to revisit. Or, since I control the clients I might disable it in their browsers.

If enough people bark up the filter vendor's tree I'm sure they'll add a checkbox to drop esni traffic. They added one for QUIC recently.

The filter looks at the SNI header during the TLS handshake. If it doesn't like the host it will reset the connection.

I've seen it coming for a while. I'll have to decide which is the lesser evil: blocking QUIC/HTTP3 or using MITM.

Working in a school I block QUIC traffic so my web filter can (attempt to) keep kids off porn. Such filtering is required by law for schools. I haven't found a passive filter that handles QUIC. I don't want to install invasive client software or MITM connections.

Nice referral links

Tried it, annoying because it forgets I have YouTube Premium and starts showing me ads. Now I just turn history off forever.

Pretty much any credit card mines your purchases. PayPal isn't special in this regard.

> I would love it if a publication profiled a few spammers. I suspect they're very different from how most people imagine them.

You might like Spam Nation: https://amzn.com/dp/B00L5QGBL0/

Yes, I imagine a lot of .NET devs don't realize their apps are TLSv1.0 only. I've worked with one vendor who was surprised when I told them.

Fun thing about Invoke-WebRequest is that it uses TLS1.0 by default and doesn't understand anything newer unless you enter an incantation beforehand:

[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12

I had YouTube Premium to avoid ads. Since the adpocalypse, more creators are adding sponsored content to their videos. So now I've got ads even though I'm paying.

That gamespeed issue in Fallout 4 was super annoying on my newer computer. Dialog animations went too fast and made talking quite jarring.

Sounds like a good way to get your Google account banned.

A paid account is just as vulnerable to password theft as a free one.

Chocolatey is very handy but has a few warts. It can't tell if the underlying app has self-updated. When Chrome autoupdates after choco install, the next time you run a choco upgrade, it will unnecessarily upgrade Chrome again.

I've never used smooth scrolling in any browser (Firefox, Chrome, IE) that didn't feel laggy. It's the first thing I turn off anymore.

This data would be greatly enhanced if the number of charge cycles was also logged. From the graph it looks like that battery is deeply cycled frequently. That's hell on batteries.

At my org (a school) we used to disallow charging our students' laptops in class. We did that for about three years. During that time, it was not uncommon for a battery to fail in the first year, with most failing after two. Since we started allowing charging, most batteries stay above failure threshold the students' whole four years here. My hypothesis has been that students charging opportunistically avoid the deep discharge cycles that are very bad for batteries.

Non-shitty devices will behave well, but shitty ones won't. That's the problem.

I block fonts with uBlock and see this all the time. Usually the icons are pointless and I don't miss them. In bad cases I'll toggle fonts on and reload the page.

I've heard that too. I think I have some of the China batteries. I haven't really been able to tell the difference. They still last 2x as long as the crappy bulk hardware store batteries I used to buy.

I don't mind it at all. I've been relatively impressed with the price to quality ratio and I usually seek the Amazon label brand where I can and the price is right—just like any other store brand.

- It started with batteries, which are awesome for the price

- I bought a throwaway comforter + sheets to use for couch-sharing with the dog and they're my favorite set now. Better than my Ikea set which cost 2x as much.

I could go on but for random items the Amazon brand is often pretty decent.

This reminds me of an ongoing issue with our org's website. The devs are using an ancient jquery for an image gallery widget. The gallery doesn't respond to mouse clicks on any of our PCs because that jquery version sees touch support and expects you to use only that. All of our devices have touch screens.

Same here with Red Faction: Guerrilla, and the Re-mars-tered edition.

I had a similar experience. I've shared it before but I'll copy it here:

I've stopped leaving Amazon reviews. Recently I was bored and went through a few bits of network equipment and PC hardware I purchased and reviewed a few of them. 3/6 of the reviews were rejected for being against community guidelines with no reason provided. Even after reading the guidelines it's not clear why they were rejected. I put in effort to describe why something got its rating from me. For example, I discussed the strengths/weaknesses the network equipment. From now on I might leave a star rating, but I'm not wasting time to get a review accepted. I'll leave that to the shills.

From the article:

> By offering applications access to libcurl's own URL parser, we hope to tighten a problematic vulnerable area for applications where the URL parser library would believe one thing and libcurl another. This could and has sometimes lead to security problems. (See for example Exploiting URL Parser in Trending Programming Languages! by Orange Tsai)

My Python is only marginally better than my Ruby (not great). Even so, developing my own theme was easy following their docs.

Looking at their blog[1] they seem to do releases very infrequently. 3.5 was released 2014-11-20. 3.6 was released 2015-06-15. 3.7 was released 2016-12-12. It seems like each release is about a year and a half apart. By that cycle we're about due for one.

1. https://blog.getpelican.com/category/news.html

I love Pelican. It was relatively easy for me to migrate from Octopress (which seems pretty much dead at this point). With pelican it was pretty easy for me to write by own extremely lightweight theme: https://brashear.me/blog/2017/07/30/migration-from-octopress...