Looks like in Chrome on mobile you can set it per site, but you need to dig into accessibility for that. I don't see a way to do that in FF, so you would have to set the default which would effect all sites.
This kinda makes me think about the transition from writing machine code by hand to using a compiler. Did people feel similar at the time that they didn't understand the machine code that the compiler was writing for them?
It seems wild to me that Twitch doesn't sanitize the messages on their backend. I'm sure that they sanitize them on their own UI. But considering how many people also consume messages via their API, they should also sanitize for them, defense in depth and all.
Yeah, I don't like it when languages use too many symbols for things. It's a hard line as I don't like languages where everything is a keyword (e.g. begin end vs { }), but not enough keywords and it's hard to learn and remember the language.
It's crazy to me that there's no screenshots on the blog post. And when you click through to download it there's a bunch of aspirational pictures, but only one short clip showing what it actually looks like. Why? Is it too hard to show a screenshot?
As a non Python dev this seems like very surprising behavior for a system library to be modified by just having a file with a specific name in the same folder.
Except that's a very different threat than with Credit cards. Sure Google could do that, but Europe could even just make their own android fork if they wanted and that would be far easier than replacing the whole credit card system.
And I doubt they would even need to fork Android, they could side load, or just make their own app store and require it to be installed on phones sold in the EU.