kup0

Let's include HDMI while we're at it

Any plans to introduce the ability to control/limit bandwidth (per-app)? Something like that would be a great feature to have in an open-source tool.

In general, when tech-related companies have problems like this (with potentially severe consequences), I think a post-mortem should be a minimum expectation. I just feel like the way this post frames the issue is almost like it doesn't matter that much to them. "Oops, it was just a bug, for some accounts, we think. All fixed!" just doesn't sit well with me (maybe that's a me problem...)

I would want some follow-up answers, to questions like:

- Why would a bug trigger alerts that are as severe as "someone else tried to use your unique not-used-elsewhere master password"? I understand bugs, even severe ones, happen- but can I trust that your alerts aren't going to cry wolf on my account going forward?

- Why did you originally conclude it was credential stuffing/reuse, when there are a number of people that got the alert that clearly stated they had never used their master password anywhere else? Are you monitoring user reports / social platforms / etc to respond to and address these situations?

- When you say "some" were triggered in error- does this mean some of the attempts were legitimate, or were they all due to a bug? Do you even know the answer to this question? If there are legitimate attempts on non-reused-password accounts, it appears master passwords are leaking/being captured/etc in some other way and that deserves further investigation

I just want more than a sentence or two surrounded by 10+ paragraphs of "this happened because of how good we are at keeping you safe"

They're a relatively well-known company, currently owned by LogMeIn, though that seems like it will be changing. It's definitely not some solo person's side project or anything. They're one of the most well-known names (whether good or bad) in the password manager category.

While they have had security trouble in the past- they're big enough that it's not surprising at all to me that many people, including those on HN, are their customers.

I would also not be surprised if they lose a chunk of tech-savvy customers over this- as they should.

I think one thing that really got to me is that the post is by the VP of Engineering, which for some reason gave me an expectation of a detailed explanation of the problem, only to find none

The post sounds like it was actually written by either legal or marketing instead

Posts like this are so frustrating. It's a whole lot of words to say nothing. There's a small mention of the alerts being triggered by a bug/error, but it is surrounded hundreds of words of deflection/spin.

Additionally, it is bothersome that absolutely zero detail on this error is given.

Given the incredible gravity of the situation (potential of having one's entire password vault compromised), I expect a better response than this

I think it's a reasonable response for atheists that were raised in these systems to have this strong negative reaction to that prior belief system.

This "hate", however, is not directed toward an entity this atheist thinks exists. The type of atheist you describe hates the concept of "god" that their prior belief system constructed.

When one comes out of a system that one feels they were duped by for 20+ years (in my case), sure, I retain a powerful, strong, negative reaction to that system and its concept of god.

It does not mean that my disbelief in this god is equivalent to some kind of "religiousness" and to suggest that I think is incredibly naive

Why does it feel like it is inevitable that standardization/licensing organizations in tech will always eventually turn into a user-hostile mess?

USB, HDMI, what can we screw up next?

Is it incompetence? Malice? I'd really like to see an in-depth investigation of this phenomenon

I'm not actually saying that I agree that it hurts the creator, just listing the reasons that I don't bother blocking them. I am not necessarily against the idea of sponsorblock- I hate all advertising in general (and even despite this I still fall for ads I do see and check products out...maybe that makes me hate them even more) it's just that in-video ads are the kind of ads I am least inclined to go out of my way to remove or skip.

And, I can't tell you what the difference is- it seems it would be the same- but sponsor spots in audio-only podcasts bother me more than ones in videos. Maybe it's the length. The majority of the content I watch keeps sponsor stuff short- but the podcasts I listen to make a 5-10 minute infomercial out of them, so I do skip them more often in podcasts

As far as whether I think there's any harm to creators from skipping sponsored spots, it's possible that whatever statistics/analysis creators have access to on the platform might inform what they're able to tell their sponsors as far as views/etc. - but I don't know to what extent that goes

I think that's ideal, but will never happen, because aside from creators making money, YouTube wants to make money, and they won't make anything on ads built into the video

I don't know, I look at it almost exactly in the opposite way. I used to block Youtube ads with uBlock and now use Youtube Premium, and ads that are baked into videos by creators themselves don't bother me.

The ads that are baked into the video don't have tracking code because they're just part of the video file, they aren't an extra javascript burden, often the sound/transition is far better and not so jarring-- really they're IMHO the least "bad" form of ads- better than the alternatives in almost every way- and often these ads are more relevant to the content and probably support the creator well.

I would much rather have a creator do sponsor spots in their video content than ever get served a javascript ad from some ad company.

As long as it's not web-based, I still have an interest. I completely lost all desire to touch any "web code"

But if we're talking locally running python or controlling hardware via microcontrollers, or things like that- I'm not well-versed in any of it, but it still grabs my interest, and the little I have done, even just small learning projects, has been fulfilling.

If it requires anything web-based, then it drains me of all happiness.

On desktop, it's still Firefox as #1 for me, Edge as #2, and everything else is extremely distant 3rd, except things I might test out to see if they have a use for me.

I know the idea of "gaming browser" is instantly cringeworthy, but I actually like some things in Opera GX. Having a built-in bandwidth limiter is awesome when I'm downloading large files and don't want them to completely take over my bandwidth. There are some good ideas in lots of lesser-used browsers, like this, but I never see these features bubble up to the big ones like FF/Edge.

Ad-blocking (and browser capability which supports content blocking) is a high priority for me (no I will not debate this on moral/ethical grounds- I refuse to see ads, end of story).

So, Chrome's manifest v3 among other poor choices by Google mean I will 100% stay away from Chrome- and I only use Chrome-based browsers when I absolutely must.

That said, I don't think these days I use anything that requires Chrome/Edge (thankfully). So I pretty much can avoid them completely.

Yes I also ran into the legacy extension issue. The site was confusing as hell, and it seemed purposely so

Maybe it was a timing thing, but I strictly remember it being different than how you describe here

The only way I even know a standalone option existed at the time that I moved to 1PW was because of reviews/comments on other sites that then led me to support pages that said "oh yeah, if you still want that version, smirk smirk, then use this special link"

The problem is even the best examples of Electron apps aren't great and use far more resources than a native counterpart would.

VS Code is an example of Electron being "used well". I still find myself using other apps because they're more responsive. That tells me that Electron is inherently making the app experience worse, despite being used well

I understand the 'why' of electron, I am just not happy with the results at all.

Though maybe the world is better if that barrier of entry isn't lowered, I'm not sure what's better- a shitty app available everywhere or a good app available only on a couple of platforms...

I am a 1PW subscription user and am happy with the product (however, seeing they are moving to Electron means that is very subject to change...)

but

Saying that "customers voted with their wallet" and chose subscriptions is disingenous

Ever since they've had subscriptions they've made the standalone license page extremely difficult to find on their site. They really didn't give regular users a "choice"- they dark-patterned them into thinking subscriptions were the only option

As forthcoming / down-to-earth as these posts from the company seem- they are full of spin. Their impossible-to-find standalone license page is a topic they seem to be avoiding.

Edit to add this small addendum: It just really bothers me on an emotional level to constantly run into this juxtaposition as a user of software/hardware: liking a product but being extremely disappointed in the company offering it.

The state of the web is far from ideal and there is no end in sight

I've just accepted at this point that the train has been off the rails for a long time and will never reach them again

Web dev is a path I got off of early, and I'm glad I did, despite going to college for it, I would not want to be part of what it has become

I have searched and been given links to numerous studies in the past, none of which seem to contradict anything I've said- but that's all I will say in reply- your first sentence is enough for me to know this will not be a fruitful exchange worth continuing.

I was once emotionally involved in glyphosate discussion and I understand people will have a visceral response to someone questioning the anti-glyphosate hype - I used to be part of that hype. (Monsanto was involved in Agent Orange production for f's sake, so this is anything but a defense of the company or its practices in general, or a defense of Bayer or its acquisition.)

So I've tried to approach the topic purely without an emotional run to a particular viewpoint without considering the current state of evidence, I'm just hoping more can do the same.

That, and I am taking into consideration other posts here which are going more into detail about other things to think about concerning glyphosate exposure that may not have occurred to me- I appreciate that level of conversation, not your unnecessary condescension.

This is one of those controversial topics that really tends to go off the rails because of all the Monsanto history and polarizing beliefs concerning the substance. Also, notably, this is only being pulled from the market to "manage litigation risk" according to Bayer

I am no Monsanto/Bayer fan or defender, necessarily, and as much as I've found it easy to jump on the anti-glyphosate bandwagon in the past - glyphosate doesn't seem to have any strong evidence for risk for low-exposure uses like home gardening? Doesn't the (weak, but present) evidence so far mostly point to the risk really only being when exposed to large amounts of glyphosate?

Or does the personal risk come from it being present in agricultural products it is sprayed on, that we then consume?

The key thing (even in the lymphoma studies) seems to be "high cumulative exposure"

I lean towards "this seems like it's potentially hazardous for all uses" but does the evidence really bear that out? I want to block out the noise of opinion on this issue and purely look at evidence- something that seems to be coming increasingly rare- but something we need to be willing to do, even if it's painful to our ego and bias to do so

Glad to see something like this. The calculus I took in college was very difficult to learn with a professor who seemed to use extremely outlier/difficult problems on tests that were hard to make sense of when the classes were spent learning the basics but not applying them to any difficult problems.

That, coupled with his inability (or refusal) to actually explain any kind of homework problems when asked- or he would start to, and then never give enough detail for us to make sense of it, made me hate calculus and math became such a sour point for me that I completely changed majors. After 2-3 really bad math class experiences in college, I realized I was spending time and paying money to get nowhere.

Now I find myself wanting to relearn these concepts somewhat out of spite, but more out of just knowing what I missed out on. I ended up going into graphic/web design and development and not getting enough from my classes to even think about employment. By the time I graduated, everything I learned was outdated (CSS tables for layout anyone?)

I wish I had either changed colleges or stayed the course despite the pain and gone into programming. One of my biggest regrets, but it's okay. I'm mostly happy where I am now, doing other stuff that is IT-related. Maybe someday I'll be able to get back into math and programming on a significant scale and do something with it.

The very first page after the prologue of this book (https://calculusmadeeasy.org/1.html) speaks to me more clearly than entire semesters of math classes did back then.

I really, REALLY hope this takes off. This would be my ideal laptop

Thank you for your reply- I know what you mean by "nowhere"- and actually that's a good way to put it. I was having a hard time articulating that myself but I agree- often my mind is "nowhere" instead of "elsewhere".

I feel like "awareness" might be a good term to describe what they are meaning by "conscious"

I think they mean conscious as in "to be conscious of", for example: I exited my house while daydreaming/thinking about other things, so I was not "conscious of" the fact that I did not bring my keys with me aka I did not have awareness or was not operating in the moment/mindfully because my mind was elsewhere

I think they're attempting to describe the difference between being present/aware of every moment we experience, vs. a habitual 'autopilot state' that we can find ourselves in (the phenomena of driving somewhere and then not even remembering the drive there, for instance) where we're really not aware of what's going on in our lives, because the mundane things are so habitual that we don't even need to be fully aware of what we're doing to do it - but that alternatively, choosing and teaching ourselves to be aware at all times, even during our mundane, habitual routines, is potentially a better way to exist

mp3tag is free

Repeating this bumper sticker mantra is honestly consistently unhelpful and comes off smug, IMHO

I believe they are referencing this book: https://plumvillage.org/books/fear/

Is there (or will there be) a feature that easily summarizes all of my recurring expenses / subscriptions? Those kind of insights really help me budget and cut down on things I may not be using anymore but are somewhat difficult to easily catch otherwise.

Removing menu iconography and making background tab separation less obvious seem odd choices from an accessibility point of view

The use of more vertical space is also bothersome but a personal preference

Overall, meh, at least on Windows. Feels like nothing important has changed other than it looks worse and screws with muscle memory. I'm sure I'll get used to it.

It feels like the "form over function" type of designers had their hands all over this. Experience is taking a backseat to design and I always hate that

One way to avoid the headaches is to taper slowly off of caffeine over a few days instead of dropping it completely. Just lower the "dose" you intake each day