lima

Dubious utility aside, this is a solved problem using mmWave.

Google even ships it in some Nest displays for sleep tracking...

What do you mean by "consumer clouds"?

...on a single-zone persistent disk: https://status.cloud.google.com/incident/compute/15056#57195...

> GCE instances and Persistent Disks within a zone exist in a single Google datacenter and are therefore unavoidably vulnerable to datacenter-scale disasters.

Of course, it's perfectly possible to have proper distributed storage without using a cloud provider. It happens to be hard to implement correctly, so apparently, the SK government team in question just decided... not to?

It's the same with ISO27001. A bad actor can always weasel their way through.

You're not wrong, but there are organizations which could hard-fork Chromium, it just happens to be more productive to collaborate as long as Google remains a good steward.

Your copy&paste does not support your argument. Just looking at the top items on your list, it's basically a bunch of Safari-only features which no other browser vendor ships:

- CSS Canvas Drawings is not a web standard. It's a WebKit-specific feature, only Safari implements it. Chromium removed it in order to replace it with an actual web standard (CSS Painting API).

- Likewise, the CSS filter() function is Safari-only.

- U2F API has been deprecated for years, was replaced by WebAuthn, and only Safari still implements it.

- Same with SPDY, which was replaced by an actual web standard (HTTP2). Only Safari still ships it, but has marked it deprecated.

- SVG Fonts were removed from the SVG spec.

- HLS, JPEG-XL, HEIF/HEIC are essentially Safari-only as well.

CSS hanging-punctuation and audio/video tracks are new features that haven't been widely implemented yet.

Soni

Yep, people have been reversing huge Windows patches for decades and it never stopped anyone from figuring out what the fixes were.

Even simpler tools like Solid Edge in synchronous mode will do a decent job of editing STEP files, as long as they're not just full of polygons.

Merkel era politics were anything but "woke". It was 15 years of overly conservative policies, stalling economical and societal progress.

This. The time for new nuclear plants was 20 years ago. Now it's too late, and too expensive, even in purely practical terms without the question of safety.

The stupidest part is that, according to the thread, OEMs are allowed to provide binary only patches before the embargo ends, making the whole thing nonsensical since it's trivial to figure out the vulnerabilities from the binaries.

Fun fact: Google actually owns the most commonly used tool, BinDiff ;)

Using Security Keys/FIDO2 instead of TOTP codes completely solves trivial phishing attacks like this one.

Last time I tried this approach, the problem was that the native camera input had much better quality, while ImageCapture was essentially a still frame from a video (worse exposure/processing).

Is this better now?

The only distros that are cleanly customizable are declarative ones approaches like NixOS or guix.

seccomp-bpf, for instance.

Chromium OS gets very close, they also have fully-functional VM-based isolation for Linux applications with GPU acceleration.

Unfortunately, there's no popular non-Google distro of it.

Source: https://delta.chat/en/help#pfs

It's basically GPG with better UX.

I'm in the EU, I used HONSVR and paid $50, which seems reasonable.

Sounds like eye strain rather than any sort of physical damage. What would the mechanism even be?

There are prescription inserts for it, including astigmatism and dioptries

Thank you

Theoretically yes, if the court can be convinced that it is relevant to the case.

There's no privilege, so yes, if the AI chats are retained, they may be subject to discovery.

> They don't explain it, but I'm assuming that the API is something like api.cercadating.com/otp/<phone-number>, so you can guess phone numbers and get OTP codes even if you don't control the phone numbers.

They mention guessing phone numbers, and then the API call for sending the OTP... literally just returns the OTP.

That's very nice to hear! I've been a big fan for a long time, and this has been a blocker for many deployments.

Energy Star is entirely voluntary.

Manufacturers make energy-efficient appliances because consumers prefer them over less efficient appliances, not because the government is forcing them.

I'm fine with paying for it, but what's worse is that the notifications aren't end-to-end encrypted, and the plaintext passes through their server and Google's.

For some use cases where self hosting is required for compliance reasons, this is a deal breaker. And spinning your own mobile apps isn't quite practical.

Much more flexible than Skaffold thanks to Starlark config vs. a rigid YAML structure.

Editorialized by the reporter, not the original report.