unhappy_meaning

> ... you need to think from the attacker's perspective and make sure every route to every piece of sensitive data is actually secure.

This is almost "paralyzingly" scary but to not think about it at all is something I cannot fathom from the developers who made these apps.

Doing some more digging into these two "CEOs" of Tea and TeaOnHer. The TeaOnHer CEO is a Criminal Justice graduate from UMD with some comments about using claude.ai and the Tea CEO looks like he took a 6 month coding bootcamp at UC Berkeley. I don't want to dog on their background because I also don't have a CS degree but man...

> Images of these driver’s licenses are publicly accessible web addresses, allowing anyone with the links to access them using their web browser.

> TechCrunch also identified a potential second security issue, in which an email address and plaintext password belonging to the app’s creator, Lampkin, was left exposed on the server

> While the app requests IDs and selfies from its users to verify their identities — a process that is not automatic — users can access a “guest” view of the app without signing in.

Is this just bad development? Are these just things could be missed by any developer or team?

I'm curious as someone who would like to create side projects with users (albiet not dubious ones these like apps) but I'm always afraid of a glaring security flaw that would be basic 101 of web development.

Hello Mr. Roberts,

Thank you for doing this, as you know we've probably have seen some crazy news articles and segments of ICE agents arresting people all over the U.S. with some for good and some for wrong reasons. What is your advice or best practice for someone who is "wrongfully" approached by ICE agents but has legal status to be in the U.S.? (whether work visa or green card)

I've read that someone should carry their green card with them or if they have some sort of REAL ID mark on their drivers license it may help.

Thank you again for doing this!

Slightly off topic but as someone who was in the "no-code" or "low-code" bubble some time ago as a "consultant", the sale tactics of these companies are slimy, cutthroat, and lots of fluff.

Client will go around saying they need an app or a thing and they reach a no-code company who promise they can deliver a working MVP at sprint 0 (~2 weeks). They charge a lot of $$$ and promises what would be construed at 24/7 support. If they get the contract, the "consultants" are worked to the bone in the beginning because managers need to hit their marks, make their C-suite happy, and ultimately try and keep the client as a long term paying customer.

This isn't anything out of the ordinary but I just had to rant that no-code is BS but it's still a flourishing market.

In almost all of SE Asia, especially Thailand, Vietnam, Malaysia, all of the toilets come with a hand-held sprayer. They also had this in the Doha airport and I'm not sure how common this style is outside of SE Asia but I'm guessing it's common. Japanese style bidets are very common in Korean households as well and I'm sure its easily a billion dollar business.

It is nice but the functionality is quite difficult for a person who's not used to this whatsoever. After you're done sh*ing, you grab the handheld sprayer and turn it upside down and reach behind you toward your butt and try as best as you can to aim it into your anus to wash as best as you can. People who have been doing this their whole lives can probably aim with a precision of a Marine Corp Sniper but to us, we look at it as alien technology. It's is quite difficult to use for a first timer and there are factors that worry us.

If its not aimed correctly, where does the splash go? If you're lucky it stays in the toilet boil. However if your aim is off, you can completely miss your anus and either shoot to much under or over which will shoot the water outside of the toilet bowl.

Also when I was using the bathroom in the Doha airport, the handheld sprayer had a soap dispenser next to it. I was curious what it was for so I YouTube'd and searched for instructions on what the soap dispenser was for and (kind-of) to my surprise it was soap to lather and clean your anus with your other free hand. After you lather and clean, you basically rinse your hand with the hose as well.

Yup, a lot of the men who are lonely are also a bit of an outcast whether it's self-imposed because of their warped sense of socialization or they're ostracized because they have weird takes on life issues or just life itself.

YouTube overall quality has been in a slow decline for the last several years and I'm sure it has to do with $$.

The UI is slower in almost all aspects, the grid mentioned here isn't even aligned properly. Playback buttons are slow to respond to hovers and clicks and the 1080p quality is no longer a "true" 1080p quality.

Don't even get me started with shorts because while the baseline functionality of it works, its pretty buggy for what it is. Maybe they are just too busy with scaling the entire thing that UI is an afterthought because the basic functionality is there and now its profits over quality.

> wouldn't they burn out eventually?

They also might not have a choice depending on how much their skills are worth to the gov't... if North Korean.

And the decline of a good product begins because it will be all about profits for board members going forward...

We used your repo as inspiration for a separate US gov't design system (not uswds) at the beginning but ended up shifting focus to building web components just before I left.

Awesome work and hope your gov't sees the value of this work and oss work in general!

Your last sentence reminds me of the scene in Rick & Morty where Rick topples an alien galactic empire by devaluing its currency to nothing.

Man the AI race is just launching at all fronts.

Interesting project and great to see other projects as well. Everyone has their own wants, wishes, and requirements for their YT feed so its awesome to see what people have come up with.

This post has actually inspired me to create something of my own because I am the worst YT addict of all time.

How happy has everyone who uses or switched over to Proton(mail)?

Happy with it and the security (I guess, I don't think about it too much) but my only gripe is I can only make one filter on the free version...

I'm for it, I have my configs all spread out through the LazyVim folder structure. Whatever floats your boat.

It'll be a net-positive for things like that, passports might be rendered useless in the future since they're already using facial recognition at Customs. It can help solve crimes given it can recognize faces using CCTV footage amongst other things.

There is a certain level of distrust since it can be abused and people think it will lead to a dystopian police state.

This is a really great and informative article, inspiring actually.

is it mostly React and Angular in Singapore?

Oh wow, I did confuse Vue and Svelte. My previous comment is wrong about Vue and VDOM. Svelte is the one that uses the real DOM.

I've built with React a few years ago but React is still at the top by a large margin. Second is Angular because a lot of enterprise apps are built with either React and Angular. Vue's is definitely 3rd and a big jump in popularity had to do with Chinese dev's using it simply because Evan You is Chinese.

Vue uses the actual DOM instead of the virtual DOM but try and build something tiny with both and see which programming model you like and choose that UI library.

Free airline tickets were what we got offered in the mail. Went and sat through the presentation and got pounced on by the sales reps to sign for a timeshare after the presentation. When we refused they sent us to the "boss" and he tried to further convince us to sign up for a timeshare in his office. Still kept refusing and at the end, he slammed the vouchers for free airline tickets on his desk and said, "Here you go, have a nice night" with a pissy attitude.