lemoncucumber

I set up a custom "All Applications" keyboard shortcut for the Zoom command, it's really handy.

Yes, I was simplifying — the important part is keeping the untrusted code off of a trusted network. If you want to do the legwork of carefully segregating things then of course network access can work.

I didn’t mention containers since they don’t provide strong isolation and some people misuse them as though they do. There’s no harm in using them as another layer of defense, but hardware virtualization provides much better security.

Sure, that's basically what services like AWS Lambda do. As a starting point, you'd want to run the code in a short-lived VM with little to no network access which is dedicated to just running untrusted code.

The M1 is a system-on-a-chip so AIUI there's a bunch of stuff on there that you wouldn't want two of.

The relevance is that Apple provides two independent services:

* iMessage, which does use true E2E encryption in transit.

* iCloud backup, which backs up the contents of your device (including your unencrypted at-rest iMessage data), and does NOT support E2E encryption.

Technically if you (and all your friends) use iMessage and don’t use iCloud backup, then it is impossible for Apple to read your messages.

In reality, the alternatives to iCloud backup are too risky and/or cumbersome, so most people use it, with the result that Apple can read your iMessages once they’ve been sent/received and your phone has performed a backup.

You keep posting strawman after strawman, and that's why you're getting downvoted.

> newcomers are more entitled to live somewhere than the people who already live there

Nobody said that besides you.

> residents of an area are obligated to change it in order for more people to move there and change their existing quality of life

Again, nobody said that besides you.

My password manager only fills passwords on the domain they belong to, and it’s also my TOTP generator so the same applies there too.

Personally I wouldn’t be able to crisply render the font on a low-DPI screen without a hint

Put another way, the problem boils down to companies that only optimize for one variable (shareholder value) relying on algorithms that only optimize for one variable (engagement).

Taken together, it results in a lot of negative externalities that get ignored at every level.

The ads are all encoded as animated Jifs™.

Nice blog post. I made a similar switch, but in the back of my mind I worry that I’ve introduced a new risk factor, since it’s much more likely for my custom domain to get hijacked than gmail.com.

See for example this story of someone’s Twitter account getting stolen via a social engineering attack on their registrar: https://arstechnica.com/information-technology/2014/01/picki...

A Google search suggests that setting up a registry lock could be an additional layer of defense against these types of attacks.

Have you done anything to guard against this type of attack?

I’m not sure I agree.

Here’s my interpretation of what you mean by semantic associativity: “Bi-” is another way of saying “two,” and the confusion with “biweekly” arises because it’s unclear if the “two” should be taken to mean “two occurrences per week” or “two weeks per occurrence.”

Meanwhile, “semi-” means “one half,” and in normal conversation it’s not common to say that an event occurs “one half of a time per week”. So it’s unambiguous that it must refer to “one occurrence per half week.”

I used to use Safari, until Big Sur came out and ruined its UI by making the contrast way too low -- I was having trouble even distinguishing where the page content ended and the browser chrome began at a glance.

So I switched to Firefox a few months back... It's disappointing that they've now made exactly the same mistake, but at least there's Firefox Color [1] that allows me to easily restore some contrast without spending time writing my own CSS.

[1] https://color.firefox.com/

> When you print a shipping label on eBay, our negotiated rates let you save money relative to what you would pay at the post office or to a carrier for most services, and you'll save time by not having to stand in line. The cost of the label is then charged to your invoice, PayPal account, or Processing funds if you're a managed payments seller.

Source: https://www.ebay.com/help/selling/shipping-items/labels-pack...

> SF doesn’t have local payroll tax, it has a local income tax that applies both to residents and to nonresidents on income earned in SF.

This is false. There are some low-quality websites that have incorrect information about a nonexistent 1.50% SF income tax, if that's where you're getting your information.

San Francisco used to have a payroll tax up until last year, when Prop F replaced it with a gross receipts tax. [1]

[1] https://sftreasurer.org/prop-f-overhaul

A similar example:

As a reply to the question, “what’s the most expensive car on the market?”

1) “I’m guessing it’s some German supercar.”

2) “I would guess it’s some German supercar.”

3) “I guess it’s some German supercar.”

As a native speaker, the first two both sound correct to me, and essentially equivalent. The third sounds a little weird, even though it’s grammatically the simplest. I can’t put my finger on exactly why.

Neoliberal propaganda has become so ubiquitous that we don’t even notice it unless someone calls it out, like this article does. It’s a thoroughly depressing state of affairs.

I'm pretty certain that the ATV remote beams good old fashioned infrared signals to change the volume on your TV/soundbar/receiver directly without involving the ATV itself.

“Over the past decade, automotive safety regulators in Europe have made pedestrian safety a priority. But their American counterparts have not adopted the same rules to protect people outside of vehicles. As pedestrian deaths rise alarmingly fast in the U.S., with nearly 6,000 lives lost last year, the difference between the American and European approaches to the regulation of car design stands out strongly.”

Source: https://usa.streetsblog.org/2017/12/07/while-other-countries...

I started a new job during the pandemic, and the experience has been much worse than I expected. There’s no opportunity to ask simple questions without always worrying that I’m interrupting. Whereas in an office it’s easy to see who’s on the phone or focusing on something and simply ask someone else (or wait).

There’s also no opportunity for the kind of work-related conversations that might happen over lunch where I’d learn more about the team, the org, the project, and the history of it all. In the past I’ve gotten a lot out of being present for casual conversations among more experienced teammates and asking the occasional question.

I just checked and it looks like they now recommend hitch-mounted ones as their top picks. And they have a whole section about the pros and cons of different types of racks. So it looks like they revisited the category and improved their reviews.

A decent free option for reviews is Wirecutter from the New York Times. I've yet to buy anything that they recommended that was outright bad, and they have a surprising breadth of categories that they review.

They make money through affiliate links, but they claim that the writers/reviewers have no knowledge of which companies have affiliate relationships with the Wirecutter so it doesn't bias their picks.

It should work on an iPhone 11 as long as you've upgraded to iOS 14. It's supported the iPhone 8 and newer: https://screenrant.com/apple-ios-14-back-tap-iphone-list/

There is no XUL, only Dana.

You're thinking of pull quotes, which can be confusingly similar to block quotes but are a different thing:

> It seems that many people (myself included) confuse blockquotes and pull quotes.

> The main purpose of a blockquote is to separate a large section of text — quoted from an outside source — that is relevant to the source material at hand.

> A pull quote is a section of the article pulled out of its context and repeated to give either emphasis, or to aid the reader in scanning the article.[0]

Unfortunately HTML doesn't provide a pull quote element so you have to make do with applying some CSS to a <blockquote>, or <p>, or whatever to get the desired visual effect.

[0]: https://www.studiopress.com/how-to-use-block-quotes/

> Also, a public service announcement: if you were leading a project in the past, its "led", not "lead" :)

I always wish there were verb form of "tech lead." You can say "led X" or "served as tech lead for X" but neither is quite ideal.

For anyone wondering (since the linked article doesn't say):

> The reported cause of death was a brain aneurysm.

Source: https://www.sfgate.com/entertainment/article/Grant-Imahara-M...

Hindsight is 20/20, but Intel selling off their ARM division (XScale) almost exactly a year before the first iPhone was announced looks like a pretty bad call in retrospect.

Native apps have long been able to use TouchID/FaceID and have never been able to access the actual finger/face print data. There's no way that iOS exposes your actual finger or face print to websites.

Excited to see this in ten years.