10,766 karma · joined March 1, 2009
[ my public key: https://keybase.io/floatingatoll; my proof: https://keybase.io/floatingatoll/sigs/GUvyKD9s8uaWo_slfFKKYdqV-G4X-WUy9hPtZwyDUXU ]
7 months ago, 624 comments were posted in a discussion about Amazon returns neither being painless nor simple. My favorite is this write up noting that returns are only processed if your predicted future revenue exceeds the return requested: https://news.ycombinator.com/item?id=27333273
But in general, Amazon won’t honor their purchase protection policy for high value items without extensive argument and delaying tactics, which puts shoppers at risk for precisely the purchased that most need protection.
Buying from a “fulfilled by Amazon” trusted vendor won’t necessarily help either, because Amazon also bins all products with a given UPC into a single bucket, no matter who the seller is.
https://www.theverge.com/22878885/verizon-att-t-mobile-apple...
§ 12.1 Color space for interpolation https://www.w3.org/TR/css-color-4/#interpolation-space
It’s absolutely speculative to consider http3 a viable replacement for ”a VPN”, as many consider Private Relay to be^, but that’s not due to any technical limitation. We could benchmark Squid-over-http3 versus Wireguard VPN in various latency and packet loss scenarios today (if implemented), and get productive and interesting results. We could do the same with varnish / nginx versus openvpn / pptpd. Whether or not it supports CONNECT is worth noting, but is no obstacle for “let’s assume that everything is HTTP”, as appears widely applicable to both Apple’s services to their customers, and a significant majority of consumer VPN traffic, today.
Have those benchmarks been performed yet? Are we all doing it wrong by using wireguard et al. to Mullvad et al. for 99% HTTP traffic and we just don’t realize it yet? I look forward someday to finding out the answer :)
ps. iOS carrier APIs and functionality are NDA’d so I don’t have any other information or useful examples to offer, as my experience with carriers as their customer is very limited. Perhaps others will know; apologies.
^ I haven’t seen an FP yet titled “If it can’t carry SSH traffic, it’s not a VPN”, but certainly there’ll be one someday. I can’t predict when, though, anymore than I can guess when someone else will realize to seriously ask, supported by benchmarks and encapsulation overhead charts, “Should tcp be deprecated in favor of http?”. (I have no opinion on what the correct answers are at this time.)
https://tmo.report/2022/01/t-mobile-blocking-icloud-private-...
Does your carrier implement this? If not, will you switch carriers? It’s unclear what degree of importance you assign to your expectation, as it could be anything from “for the tasks I care about” to “in every possibly way without exception”. (For me: It’s not important eniugh to switch carriers on its own, though it’s certainly a factor if I have greater reasons.)
It seems safe to assume that Apple doesn't like user APN traffic being tracked any more than the rest of their traffic, and so I would imagine this is essentially the roadmap for all Apple Services provided to their users over the next few years.
It's also possible the Beta is just to see what happens when they make the traffic visible and possible to block, and having seen the carriers tending towards "block anything that inhibits tracking", they might simply target Private Relay 2.0 as "HTTP3 over 443/udp to http3.apple.com" and have that be an N-way reflector point for all customer-provided Apple services, including Private Relay and the rest as different channels over that multipath HTTP3 layer. They chose to implement Private Relay in a way that could be detected, and are measuring how neutrality-hating carriers respond. Assuming it's their final answer is not a bet I'd take.
Tech is known for shooting the moon, but if we can stand up opinionated examples of "minimum viable bargains", maybe that would help everyone grasp what's being proposed, and contrast the MVB with their local union's offerings.
They may be teenagers, but they're not wrong to attend to the minutiae; whether for selfish or for social reasons, that awareness may be all that is keeping them and their loved ones alive. It is cruel and unjust and wrong that they alone are attending to the minutiae of masking, but here in the United States our social support systems often require them to bear that responsibility, as the adults responsible for them often do not.
> Plaid CTO here. We’ve worked closely w/ FIs to move towards standards like OAuth & App2App to remove the use of credentials. A vast majority of our traffic is already going through these APIs today and we're working with more and more banks to enable OAuth.
Plaid is contracted by Venmo (and many others) to provide a bank-agnostic API to Venmo, and either uses credentials or token-based or app-based methods depending on how competent the bank is. Apparently Simon's bank only offers the credentials method.
https://news.ycombinator.com/item?id=29801119
Another way to look at this is, “are there any consumer-serviceable parts within the compartment?” and “are there instantly-fatal wires/terminals within the compartment?”. The pair of answers “no” and “yes” for the Mercedes demand a wholly different approach to risk management and safety design than a gas engine, whose pair of answers are “yes” and “no”.
EV high-voltage are not consumer-serviceable, as a regular consumer cannot be expected to understand high-voltage safety practices. Yes, some consumers know how to service them, but the necessary safety practices that are generally commonly understood for gas engines are not commonly understood for electric engines, and are regulated differently as a result.