traspler

This means I can finally upgrade, thanks! Not having the fans to scream against during my Teams calls was a real dealbreaker for me ;)

I don‘t know what exactly it is but the posts on their blog always make me frustrated and angry. The mix of content marketing and technical details is just infuriating. It just feels like they start with an immense heap of bullshit and then start weaving in some nuggets of information.

The mobile app is so bad, nearly nothing works the way it should. Tap a Notification, you‘re lucky if the right mail opens, try to attach images on iOS? For while it sent HEIV images instead of jpegs, so normal people were out of luck; hope it doesn‘t crash? It does. The UI is also pretty ugly.

But it‘s not only the app that is bad, the web client was quite functional for a while apart from the missing login persistence. Then came the new UI now it just kind of works. Try to move/tag many mails after each other? Now you also have to deal with clicking away success boxes as they start piling up and overlapping the very UI elements you are trying to reach. There are threads but for some reason they are way more cumbersome to use than GMail’s. Everything is gigantic now as well. I haven‘t checked yet but during the beta I could just not find some settings anymore. Hope they got added before launch.

I love the „A Somewhat Opinionated Discussion“ section. It‘s great how it discusses the „Don‘t roll your own crypto“ mantra.

Kind of, they detail a MitM attack and a way to extract plaintext from a client but both of them seem very impractical to do.

You should be able to install Windows on it. As they say on the website you are free in your choice of OS. Then the anticheat shouldn‘t be a problem.

I‘m not sure this delivers enough performance for decent PC level VR but you can install Windows, they say you are free to reinstall whatever OS you want.

I'd love to get something simple that could handle a 10Gbit fiber7 connection and act as a 10Gbit Router & Switch in my home. My skills and patience in this area are a bit limited so going as deep as Michael is not something I could do with confidence. Narrowing down the hardware to something that is not only powerful enough, cheap enough, compatible with something like OPNsense and available to normal humans has kind of scared me off a bit.

It has already been announced that they will add ads to Telegram but only to public groups/channels over a certain amount of users. Everything else will stay ad free. See: https://t.me/durov/142

Isn‘t it a bit disingenuous to reduce this to a discussion about security & privacy? If apps would only get rejected for these reasons I think a lot less people would have a problem with the AppStore. There is so much bs your app can get rejected for that is simply there to safeguard Apples control/income and cripple competitors.

I've noticed this too but I couldn't determine any clear patterns. It's also very confusing when the file ending in the URL does not match what I download (that's why an explicit "save as" might be better than an implicit auto conversion). I think I also had situations where it did the opposite, download the webp even though the URL had jpeg in the name. I assumed that it's the webserver serving the image being too clever.

One big problem I have with the image/video format zoo in the browsers is that it becomes an incredible complicated task to get the media out of the browser in a format all the other software can work with. It would be amazing if the browsers offered a built-in „Download & Convert“ feature for images and videos.

Pages automatically defaulting to webp so you try to send the link through a messenger and you might notice that it doesn‘t work for everyone, either iOS users can‘t see it or the messenger interprets it strangely. So you try to save the image and send that, same problem, you get the webp image…

Does anyone know if it does liveness checks for the "selfie verification"? The docs are a bit vague on that.

And do I understand "Stripe uses a combination of machine learning models, automated heuristic analysis and manual reviewers to verify the authenticity of hundreds of different document types." correctly in that I do not only upload video/images of my passport, face to stripe for automatic analysis but in some cases a human would even review it? Or is this a specific option I could choose?

What I've witnessed a couple of times is that there can be tremendous amounts and great documentation if the feature/framework can be broadly marketed. If it's on a marketing pamphlet it gets a lot of attention but as soon as it becomes standard or a bit less desirable the quality and extent of the docs are the first thing to go it seems. Sometimes "better docs" is the marketed feature but as all marketing campaigns go, they seldom leave a lasting impact.

The way Apple talks about new developer features/systems seem like ads for very exclusive clubs sometimes. "If you are already doing this, you can do it here now and we show you some teases, talk to us if you want to know more".

One example for me is ReplayKit... yes I don't know too much about Audio/Video but the little documentation there is it feels deliberately obfuscated and lacking. Better API level docs would help but it absolutely needs more high level guides and examples. One WWDC talk linked on a page is not enough.

When I had the opportunity to do something with a Hololens (1st Gen) I was a bit hesitant as the subject matter seemed very difficult and I come from a very different background but when I went through the documentation, tutorials and played around with the SDK I was shocked how simple the SDK and how clear the documentation was.

Haven't worked with much MS things besides that but it left a very good impression.

„At first it looks like Social Sign-In fragmentation but it's not. These are competing wallet UIs that all use the same basic Eth account sys“

How does any of this make it easier for me as a user? Competing wallets, competing social logins, all the same at the and with the difference that username/pw is easily portable to another one of my systems. Oh I chose a wallet that doesn‘t have a client on that other platform I use, too bad. Okay I can use a different one, let me just safely transfer my keypairs…

It might be better to centralize the identity layer instead of going the OIDC route of having many identity silos but a shared protocol; so your identity is actually a singleton but from a usage perspective I doubt this will solve anything.

I see everyone raving about Terraform but I always found it awkward how the DSL works. It might be an improvement over stuff like CloudFormation but feels strange to move the complexity into the language.

Things like the CDK which operate on top of CF feel much more natural and more flexible to me.

But your suggestion still involves a hard dependency on a centralised authority. Someone needs to issue the paper form, issue the stamp, make sure every agency knows what is "genuine", issue a "number" to be written on the paper, create a centralised system where that number and your ID is linked and stored so the border people can check the validity of the number, you need to procure all of these physical goods and send them to the locations. AND they have to somehow then make sure that any other country can take that paper and somehow validate that it's actually genuine as well, maybe call a phone number on the paper and ask?

I honestly don't understand how any of this is simpler, less centralised and a benefit to the end user.

If you have a web browser, a printer and know how to copy paste you can issue a pass. The system returns a pdf you can print and hand to the person. No mobile phone, data service or email involved. This can happen at the same place where you get your vaccination.

For the end user and the intermediary at the issuance place it's exactly the same, you get vaccinated, someone enters it into a form, you get a paper to take with you. With the benefit that if I wanted I could get it on my phone and someone in Spain or Sweden or wherever would be able to validate it in a second.

But one of these passes is nearly worthless (in the sense of impersonation) if you don't also have a valid ID of the person it got issued to and you look the same.

When my vaccination pass would "leak" then my name & birthdate would be leaked and they would know someone of that name and birthdate got vaccinated but other than that, they can't impersonate me as if they presented the pass they would be asked to show the corresponding ID as well.

It‘s basically a PKI and this design was chosen with the explicit goal to participate in the EU Green Pass project with the goal that all EU members can participate in the same system.

When the the system stands the only bureaucracy will be for an issuer to get a cert from the authority or for an authority to be included in the root.

All the things you describe with the seal and number and system to validate is just as much if not more bureaucracy and is not that far off from the proposed solution.

How does a short lifetime of the certs help with 3rd parties building these databases you mention?

The framework and broad specification came from the EU through their EU Green Pass project so we have at least reduced fuck-up risk ;)

I was sceptical if they manage to actually deliver as fast as they promised especially as the EU guidelines and specs were were general/rough just a month ago.

It‘s as distributed & offline as can be.

You could easily print the QR code out and the validator can be offline; the validation still works fine. The validator should have to connect to the network periodically to check for revocations, otherwise everything can be done offline.

Issuance, Revocations & cross country validation requires some kind of backbone but even issuers don‘t have to be centralized if you want. The only thing you need is to get an issuer cert from that central trust authority and you can start issuing passes that are valid.

Currently it still requires a government ID in addition to the pass so it‘s even more „offline“. The specs have room to enable eID solutions though but that will probably be online only as the verifiers will need to be specific for every provider.

Just fyi, going to „https://pastenow.xn--me-x2t without the „www“ just gets me to a „Hi“ page without any content.

This is pretty nice :)

My first thought was that our eyes and hands do all the work; our mouth and ears are untapped resources in the quest to become true 100x engineers ;)

All joking aside, I am interested in how well this might work outside of a11y use-cases. Speaking is just so natural. It doesn't have to be used exclusively but I do want to find out if there are cases where it's just nicer to say a command during coding than remembering all kinds of keyboard shortcuts. I always wonder if a more hybrid approach of using touch, speaking and typing for various situations could feel better than keyboard all the way.

Could it be that you‘ve already been using the new GPU rendering in SublimeMerge but not ST3?

That would explain the visual corruption issues I sometimes have with Merge but not ST3. In Merge some actions, sometimes (mostly in the settings) corrupt the application window (sometimes also after minimizing and sleep) on my MacBook. To me it looked like a rendering/GPU issue. It looks like blocks of pixels having different colors, lines shifted, etc.

What impact does being marked as "originally installed by a browser or file manager app" have? And how would that be different for Epic Games Launcher/Store?

The article mentions that even standalone apps can update themselves without user permission if they follow the requirements, Epic Games Launcher/Store is also a standalone app that needs to update itself at some point.

It doesn't change the initial installation dance with allowing "unknown sources" with all it's "scary" language and hoops a user has to jump through it seems; maybe that's what you meant? At least for Epic this will still be a problem as they see this as a clear disadvantage: https://www.theverge.com/2020/4/21/21229943/epic-games-fortn...

Yeah, I thought so too. There is a lot more to maintaining a project than just push code. Here are some other takes:

https://news.ycombinator.com/item?id=27116357

https://twitter.com/youyuxi/status/1392096427313147908

You can check his GitHub here: https://github.com/hzoo