ldjb

HTTP actually has nothing to do with page titles. I think web browsers should probably display the titles verbatim, but there may be use cases where they don't, a common one being where there isn't enough space so the title is truncated in the UI.

As for what search engines should do with page titles, it's really up to the individual search engine, I'd say. Whatever serves their users best.

It depends on the font. Some fonts have it in red, some in blue, some in green, some in orange. I think it's reasonable to think that cultural differences played a part in the variety of colours used by different fonts.

They seem to be gravitating towards blue (specifically, the colour most westerners consider blue), though.

https://emojipedia.org/chart-decreasing/

Very often, package installation is automated as part of a build pipeline. So if you want to build and deploy a new version of your software, you'll kick off the pipeline and that could potentially download a newer version of a package than was previously being used.

Incidents like this highlight that this may not be the best idea.

`noindex` was a Google-specific rule that was never officially documented nor supported. I think they were perfectly entitled to withdraw support for it, especially considering there are alternatives.

https://developers.google.com/search/blog/2019/07/a-note-on-...

According to their website, Dropbox for Mac needs the accessibility permissions for:

"The Dropbox badge

"Seeing who’s viewed your files

"Better prioritization for file syncing"

https://help.dropbox.com/installs-integrations/desktop/mac-p...

Dartmoor Line official website: https://dartmoorline.com/

I'm curious to know if and how you would then distinguish between a metro and the national railway, or other types of railway. I suppose one could argue they should all have the same symbol, but I feel that distinction can be helpful to people using the services.

The London Underground is the world's oldest underground railway. The very first line to be built was the Metropolitan Railway (now called the Metropolitan line), which opened in 1863.

So in a sense, you could say London was the first city to name their underground railway after the term "metropolitan".

Here's the help page in question:

https://monzo.com/help/overdrafts-loans/unauthorised-overdra...

They do touch upon the rationale in their announcement blog post [0] but I do struggle to think of specific use cases.

[0] https://postlight.com/insights/introducing-tinysheet

I spent several minutes trying to figure out how to add columns or rows, but it turns out you can't. It's a 'tiny sheet', after all.

I get what you're saying, but even if this design feature comes out of good intentions (which I honestly doubt), requiring the user to wait almost a minute so that it can "process" is rather excessive.

If they really needed this delay, surely it only needs to be a few seconds tops.

I don't think the idea of making public transport free (at the point of use) is entirely incompatible with a railway operated by the private sector. The company will need some form of income, but that can come in the form of fares, taxes, or a combination.

Operating a railway is not a very profitable business as it is. The National Rail network is transforming into Great British Railways. It's not complete nationalisation, but the government will have a lot more control. I get the feeling that the private train operating companies are generally welcoming of the changes, especially since it means the state will shoulder the financial risk.

Buses going cashless was fully consulted upon. See the FAQs for the output of the EqIA:

https://consultations.tfl.gov.uk/buses/cashless/

You're right that contactless cards usually require a fixed address, although some banks allow you to use any address you can receive post at (e.g. a friend's address).

Private companies can, to a large extent, target and accommodate only a subset of the market.

However, a public transport system has to be for everyone. There are legal and political consequences to making it difficult or impossible for certain demographics to use public transport. There's also the fact that the most marginalised in our society are often incredibly reliant on public transport. That's why TfL and other public bodies have to undertake an Equality Impact Assessment for any policy change and take these things very seriously.

It's an interesting idea, though when you consider that a lot of the people who use public transport in London don't actually live in London, and some services extend outside of London, it does raise a lot of questions. And that's before you even get into the political factors.

Those challenges aren't necessarily insurmountable, but I imagine it would be a lot more complicated to do than it might first appear.

In London at least, revenue inspectors often work in partnership with the police. But many cases of fraud are resolved without needing to detain the fraudster.

Sort of. Before February 2020, most (but not all) Oyster cards had a £5 deposit. However, Oyster cards issued since then do not have a deposit (there is instead a £5 fee for the card).

For older Oyster cards that have a deposit, you can still reclaim that £5.

I have heard something like this from colleagues, and I can confirm that staff Oyster cards are very fast. But I've always felt that regular Oyster cards are very fast too, so I don't notice much difference.

When the validator detects a staff Oyster card, it does check if the card is hotlisted (in case it was lost/stolen). But otherwise there's very little logic required.

Different countries are at different stages of transposing this directive into national legislation [0], so if you're in an EU country and haven't come across this yet, you will probably encounter this in due course.

Note that the directive also applies to the UK, where it has already been transposed into legislation.

[0] https://www.obs.coe.int/en/web/observatoire/avmsd-tracking

That sounds like an exciting idea – all the best with it!

In case you're not aware, UKTroniX are selling something similar:

https://uktronix.co.uk/product-category/px-boards%ef%bf%bc/

Thanks, I must have overlooked that paragraph.

Macbeth is certainly a creepy play, and certainly there is a lot of creepy language (e.g. Lady Macbeth's "Have pluck'd my nipple from his boneless gums, And dash'd the brains out"). But I never felt that this was due to repetition of particular words, so this was interesting to read about.

That said, although these days it is uncommon to use generic nouns with the definite article ("the"), I understand that this was a lot more common in Shakespeare's day. I wonder if this is more common in Macbeth than in Shakespeare's other plays, whether it was a deliberate choice, and whether Jacobean audiences would have felt the same sense of creepiness.

This isn't directly related to the article, but does anyone know of any good resources or best practices on how to report a vulnerability?

A few days ago I discovered a pretty major vulnerability on a certain website, but security isn't the focus of my day job and I wasn't sure where to begin and what to keep in mind. The author of this article had some problems with the disclosure process; maybe there are best practices that could avoid these.

I found the OWASP cheat sheet [0] really useful, but other than that, I didn't find too many other relevant resources.

The vulnerability I reported has now been fixed, but I'm still pondering whether to publish the details or if it would just stir up unnecessary trouble. So it would be good to have resources that will help inform my decision.

I think a lot of people who want to report vulnerabilities probably feel like they don't know what they're doing, and they probably don't feel very well supported through the disclosure process. At least, that's my experience.

[0] https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability...

The author gives an example of this afterwards (analysing shares in a pachinko company).

Essentially, you identify numerous hypothetical scenarios, analyse the impact they would have, and use that information to decide whether a particular course of action is a good idea or not.

This is covered by the Audiovisual Media Services Directive 2018/1808. EU member states were supposed to transpose this into national legislation by 19 September 2020, but not all have.

You can see the status for each EU member state here:

https://www.obs.coe.int/en/web/observatoire/avmsd-tracking

Thanks, I stand corrected. Part of me did think 2005 would have been a bit too recent.

That lecture (from 2005) is how I first came across this idea of computer science not being about computers. It was interesting (though not massively surprising) to discover that similar arguments have been made for several decades earlier.

Yep, it was October 2011: https://xkcd.com/960/

I know websites that can send a push notification when a product that is out-of-stock is restocked.

I'm sure I've also been on sports websites that allow you to receive a notification when a goal is scored in a particular match.