wackget

There's something disagreeable about charging a subscription to search freely-available scientific papers.

Yeah I get you're technically paying for the "advanced" search but it still leaves a bad taste in the mouth because this service's entire existence depends on open source knowledge.

P.S. hiding pricing behind registration isn't cool

Personally I hate articles which are split across multiple pages. It's unnecessary.

When did Ars Technica start splitting articles into multiple pages?

I thought that stupid trend died out 10 years ago.

It just results in me abandoning the article on page 1.

Article/title is a bit confusing and perhaps borderline clickbait, so...

If I understand correctly it seems like his crime was *using* the exposed database credentials to log in to the third-party database server.

So he wasn't charged for simply "exposing" the credentials as the title says, but actually using them to poke around.

Wow that is truly shameful. P.S. thanks for uBlock Origin and uMatrix

There's such a beautiful irony in reading about unfettered data mining on a website (theverge.com) which connects to *37* third-party domains when displaying the article:

1. ak.sail-horizon.com

2. amazon-adsystem.com

3. api.parsely.com

4. c.amazon-adsystem.com

5. cdn.concert.io

6. concert.io

7. coral.coralproject.net

8. coralproject.net

9. csp.withgoogle.com

10. d35xxde4fgg0cx.cloudfront.net

11. duet-cdn.vox-cdn.com

12. google.com

13. googleoptimize.com

14. googletagmanager.com

15. googletagservices.com

16. gstatic.com

17. ingest.sentry.io

18. js.memberful.com

19. memberful.com

20. micro.rubiconproject.com

21. moatads.com

22. narrativ.com

23. o4682.ingest.sentry.io

24. parsely.com

25. polyfill.io

26. rubiconproject.com

27. sail-horizon.com

28. sentry.io

29. static.narrativ.com

30. theverge.coral.coralproject.net

31. vox-cdn.com

32. www.google.com

33. www.googleoptimize.com

34. www.googletagmanager.com

35. www.googletagservices.com

36. www.gstatic.com

37. z.moatads.com

P.S. list courtesy of the uMatrix browser extension

They don't want to promote PWAs. They want to promote their own business.

> I know I ought to pay it forward and publish the code for my app. Even if it doesn’t work for anyone else as-is, it might provide a helpful guide — one I would have been grateful to have. But the code is marbled with application-specific values, well-salted with authentication keys.

Meh. Pretty disappointing excuse. Wouldn't take long at all to separate secrets and would make the app inherently more secure anyway.

Do you still need to pay Apple's extortionate $99/year developer fee if you're only developing apps for private/personal use?

A question I always ask is why we can't control our phones via desktop computers yet. It's 2024; this should be possible and mainstream without half-baked solutions like Airdroid or unacceptable workarounds like rooting your iPhone.

I sit in front of a full-size keyboard and mouse literally all day, yet when I need to do something on my phone I'm forced to physically pick it up and use its horrible tiny little keyboard to achieve something I could achieve in 10% of the time on a PC.

How does AuthKit compared to Auth0? Any major differences?

Also what if you have an existing email-based account system which works fine - can you use AuthKit to add additional sign in methods like social without replacing your existing system?

Or people could just not use obscure acronyms when discussing specialised topics on an open forum?

Out of interest, what would happen if you didn't have proof of purchase or if, somehow, one day in the future Apple ceased to exist and enrollment became impossible?

Would the computer be "bricked" by this or could you wipe it and install a fresh copy of MacOS?

The irony of the prominent "TUF Gaming" branding on the side of the card.

You'd think they'd add a rigid frame around the card, or at least around the weakest point.

What if you already run a web server which uses port 443? Strange that the readme doesn't mention that scenario because it's extremely common.

Presumably you'd choose a different port but then it'd be pretty obvious you're running something if your server has a random HTTPS server exposed on port 444 or whatever.

The font hurts my eyes.

> Nov 29: We disclose issue to CTO & Security team with video examples

> Nov 29: Writer responds, asking for more details

> Nov 29: We respond describing the exploit in more detail with screenshots

> Dec 1: We follow up

> Dec 4: We follow up with re-recorded video with voiceover asking about their responsible disclosure policy

> Dec 5: Writer responds “We do not consider this to be a security issue since the real customer accounts do not have access to any website.”

> Dec 5: We explain that paid customer accounts have the same vulnerability, and inform them that we are writing a post about the vulnerability so consumers are aware. No response from the Writer team after this point in time.

Wow, they went to way too much effort when Writer.com clearly doesn't give a shit.

Frankly I can't believe they went to so much trouble. Writer.com - or any competent developer, really - should have understood the problem immediately, even before launching their AI-enabled product. If your AI can parse untrusted content (i.e. web pages) and has access to private data, then you should have tested for this kind of inevitability.

OpenCola always gets passed around but for me it just represents the tip of a very frustrating iceberg.

There are tons of flavor formulations I'd love to know - not because I'm a chemist or a food scientist but just out of sheer curiosity and the desire to learn how stuff is made.

I wish people would research other flavors, e.g.:

* Bubblegum

* Tutti Fruitti

* Irn-Bru

The entire second half of the article acts as if custom elements aren't already supported in HTML:

https://html.spec.whatwg.org/multipage/custom-elements.html

You can go ahead and create <whatever> <custom-elements> with whatever attributes you want and it'll work.

Techcrunch is an absolute abomination of a website. For those using uBlock and/or uMatrix, have a look at the list of third-party domains the site uses.

No less than 18(!) of them:

* ads-twitter.com

* bizzabo.com

* dscg1.akamai.net

* facebook.net

* google-analytics.com

* googlesyndication.com

* googletagmanager.com

* mrf.io

* oath.com

* sail-horizon.com

* twitter.com

* twitter.map.fastly.net

* typekit.net

* vidible.tv

* wp.com

* yahoo.com

* yahoodns.net

* yimg.com

There's also two (!) layers of cookie consent redirects and the page simply will not load without JavaScript.

Even with first-party scripts enabled the main article doesn't load and at this point I don't give enough of a shit to work out why.

@dang should consider banning Techcrunch URLs from Hacker News IMHO.

It can't just be me who thinks adding moisture to the already-filthy internals of a coffee grinder is a terrible idea. Sounds like a recipe for mould growth.

I took apart my electric grinder once for cleaning and it stank of mildew even without adding water to the beans.

No doubt these are an environmental abomination, however there are a growing number of recycling services. In the UK/Europe at least they can be collected at the same time as your kerbside recycling. The scheme is paid for by the coffee manufacturers themselves.

Random questions about US courts:

1. If someone files a suit, is a basic level of sense-checking done before the defendant is served and issued a summons? Basically I'm asking if someone could just file a lawsuit with absolutely no reason just to inconvenience someone else.

2. Can a court summon anyone to appear at any court anywhere in the country, or can the defendant choose to travel to their closest/most convenient court? (If the former, can the defendant claim travel expenses or similar?)

3. Is there a specific reason that in-person depositions are mandated in civil suits like this? It seems you could communicate everything you need to over video conferencing without having to be physically present, regardless of any COVID-type excuses.

Gabe probably just can't be bothered travelling and I don't blame him.

Why do they continue to use fabric for the seats?

Fabric and foam gets insanely dirty and is almost impossible to properly clean.

There's also the very real problem of bedbugs being spread via the tube.

> The myth that you could change an entire site design just by changing the CSS is a complete myth.

You should tell that to this site which has been doing exactly that for 20 years: https://csszengarden.com/

Look, this is the most obvious advice ever but everbody needs to hear it: don't use a web browser made by the world's biggest fucking internet advertising company.

This entire article could have been replaced with two words: "graceful degradation."

Sadly that concept is utterly foreign to today's "web developers" who have absolutely no idea of web development without JavaScript.

> "Prefer vanilla approaches using HTML"

> Proceeds to insert JavaScript and CSS into HTML attribute.

> "HTML is easy to understand"

> Proceeds to import external JavaScript library which uses an ultra-obscure, totally unclear HTML attribute `_=`

Unpopular opinion but I hate the design of the site. The transitions are too slow and the entire site is inaccessible to anyone with vertigo, visual processing or balance disorders. Needless to say it also doesn't respect the browser's `prefers-reduced-motion` preference.

A massive case of style over substance for me.

As a developer, I flatly refuse to engage with Apple in any way because of their $100 annual fee.

I feel especially vindicated when stuff like this surfaces.

Imagine being the richest company in the world and having the audacity to charge people for the privilege of being able to contribute to your platform.

It is absolutely insane, and nothing will convince me otherwise.