goblin89

macOS sandboxing for native apps has a long way to go to catch up with iOS. As one example, any application can read from your clipboard at any time. Web apps are, I believe, much better sandboxed.

They are going to on all good systems for very valid reasons, and they are halfway there.

Are you saying native apps are less well sandboxed than web apps? Because that is exactly what I said. But they are getting there, and that is good.

Wow, and it is somewhere in this very thread that someone hinted that the maintainer of VCV is the one sort of rude.

There is no information publicly disclosed about how much money is generated, but the sponsorship button is there and that is the point.

It is not factual as it is clearly biased in ways I described. It is also outdated and factually incorrect in ways I described. Feel free to address those ways specifically.

I mean all consumer operating systems, and they are becoming better unless you stick to old and vulnerable versions.

Every mobile OS from Apple would show a popup if an app tried to access clipboard without your explicit pasting. Obviously, if you tapped “paste” then popup would be unnecessary since you would be approving your own action, not app’s action.

It is somewhat crazy that macOS doesn’t do that yet.

But the comment I replied to was talking in general terms. Yes, for some APIs native apps are for now more trusted than Web apps, depending on the OS, but the trend is that they are becoming less and less trusted.

Untrusted by default is a feature. No user would be able to protect themselves, unless perhaps they are a highly trained security expert always on alert, which is not a thing.

This is not the exciting early days of the interwebz where script kiddies run amok and it’s mostly for the geeks anymore, it’s where government-affiliated gangs are launching ransomware attacks on critical infrastructure in order to finance nuclear programs. Accessing arbitrary resources on your local machine is how that happens.

Web apps, given a modern browser, naturally have stricter sandboxing, but native apps are treated as untrusted on any modern OS, too. If I launch anything new, the dialog will have me confirm before it accesses anything other than its isolated app data directory.

Cardinal takes money via Github sponsorships. It appears that the original VCV Rack developer’s efforts are a money-maker for a few people…

Thanks, interesting. As a musician I suppose it’s not worth switching away from the original until I have an understanding of how Cardinal works “better”.

I have read that before.

Things like “Core only” vs. “Everything is internal” make perfect sense to me as a developer, but this doesn’t answer my question. In fact, “everything is internal” is a downside since no one really uses all modules.

It also appears outdated, since Rack 2 supports ARM (that’s how I use it).

It is also clearly disingenuous in quite a few places, such as by:

a) providing an uncritical generous excuse for every downside of its own (e.g., lack of multi-threaded engine), but never for VCV Rack’s (an opportunity to pay for an open-source project’s development so that it can sustain itself as a proper business is a feature that benefits both the project and OSS ecosystem as a whole), or

b) pointlessly comparing to VCV Rack Pro. I, like many, am not using any of the Pro features—just one of the amazing things about the base version of VCV Rack is its completeness, combined with generous licensing. The VCV Rack 2 I use is open-source, and is free (though I paid for Pro to support the project I don’t use any of the Pro features, I literally never needed them yet), and is supported (it receives updates regularly).

What technical issues are there with VCV Rack that are addressed by the forks (Cardinal, MiRack, etc.)?

I recently switched to VCV Rack 2 as my main creative tool, and it has been very stable and performant with frequent updates[0]. My experience led me to pay for Pro just to support this work (even though the free feature set is more than enough).

[0] My only beef, I suppose, is that those frequent updates can alter the sound in case of long-running projects; it never happened with the rack itself, but it did happen with some modules. That said, regular copies of the app and the plugins directory is a sufficient workaround for my purposes, it’s less than 50 MB after all.

I like the idea of Organic Maps in general, but using it in Hong Kong is awkward; not only because in many cases it uses Pinyin Mandarin place labels (which locals never use) but also because requires me to download 200+ MB of “China Guangdong”—a large but, critically, distinct in every de jure and de facto sense place beyond a border restriction with no free travel (considering in the case of, say, Kaliningrad, with the same situation and even smaller/sparser place, I would get a separate download). For me it raises questions about who exactly is behind the app and why should I trust its privacy promises.

Where to improvise is always up to the performer. Even a precise score can be reinterpreted creatively, it is nothing but a hint.

One you drive your patch from a random source, the notion of score goes mostly out of the window—you just have the patch and you adapt to what comes out in the live.

If CCP did not manage to create that image, developed countries would have much more difficulty funneling taxpayer money to PRC. It’s easy to lead if everyone else is behind, and it pays for itself (and for future coal plants, I suppose[0]).

[0] https://www.sciencedirect.com/science/article/pii/S030142152...

It’s easy to push for solar in Europe and the US if >80% of the panels are made in China, a country which not only benefits from increased sales of said panels but is also (hardly coincidentally) leading the planet by the number of new coal plants being built.

I don’t see why it has to follow the same rules as consumer Starlink, unless SpaceX wants to make an extra buck by making it a bundle.

Starshield uses its own purpose-built satellites with different capabilities compared to Starlink.

It sounds like SpaceX wanted to make Starshield & Starlink a bundle deal. To fulfill the DoD contract, they could only operate military Starshield and not consumer Srarlink. They even use different satellites as far as I know.

I would almost certainly be on a diet of some attractive but unchallenging fast food like teenage detective novels if I had that choice as a kid. Would my life actually have turned out better if I didn’t read the likes of Kafka, Dostoyevsky, Hesse, Garcia Marquez back then? Perhaps, but at the time I was enthralled and didn’t mind being able to choose among the books adults in my life had around (likely knowing I would end up reading some of them).

If SpaceX wants Starshield to operate in Taiwan, it would. If DoD wants it to, it means nothing unless they convince SpaceX, which apparently has a conflict of interest through its CEO’s other businesses, or force it legally.

I know someone who owns some land to build a house. I envy that person, who is definitely in a more secure position than myself.

I never got into reading web-native writing, though sometimes I wish I did. I also don’t piecemeal publishing, even though I know many classics were published that way initially. On the contrary, I like to read for as long as I want, finishing a book is always frustrating.

Agreed, LLMs are an issue and will probably reduce the amount of written content published in the open (or at all).

Your grandparents’ house must be huge. We never had a room just for books, not me, not my parents, not their parents. A family of 4 in 2 bedrooms, one living room. Shelves are not expensive and you’d be surprised, they can fit quite a lot of books. Over time some books were lent or given to libraries, others added.

Everyone seems to say children should go to libraries more.

At 9, I didn’t need to go to a library—we just had bunch of books at home. Books are cheap, especially second hand. Some of our books were in fact from a library (my mom went, but I never did), so those would rotate.

I suppose the fact that books were physical and I did not have something like TikTok on my phone when I was 9 helped me read whatever was lying around.

As adult I used Kindle for a while but got back to sourcing physical books, even though I have no permanent place and books are difficult to travel with.

If someone is looking for a Notepad++ equivalent on macOS, I can wholeheartedly recommend CotEditor. Native, too.

17.3, and not a zero-click exploit but a jailbreak tool.

As tourists, it is likely you didn’t have to get places on schedule. In regular life it becomes a bottleneck.

I believe the vulnerable (the non-infosec-experts) are not few but majority. It’s a spectrum, and I’m definitely on it. For example, I don’t know anything about the S-mode.