Sephr

Apple has degraded privacy online through Safari's cookie-preferential storage partitioning (i.e. site capabilities are penalized for using private localStorage instead of cookies), requiring sites to occasionally leak data over the network for multi-subdomain same-site web applications. These applications can privately share local state offline in Firefox and Chrome but usually serve the lowest common denominator, so many webapps use cookies to support Safari.

They're pro-privacy when it serves them financially.

I hope that AI labs aren't going to wait for widespread distribution of malware encoding novel CBRN & AI info in its fundamental execution architecture (wholly preventing analysis by these safetymaxxed 'frontier' models) to care about dealing with this problem at an architectural level

I make privacy tooling and Fable 5 rejects the vast majority of my prompts to analyze and improve the software that I've written. It's bleak.

Manual string replacement with a hardcoded list of cases for escaping as suggested by the article isn't good advice for the use case of 'support inserting arbitrary text'.

Do use CDATA nodes, but only work on XML with an actual XML DOM library instead of string manipulation. Browsers have these built-in (DOMParser).

Judging by the graphics used in the launch event, it may actually be miniLED. Perhaps they aren't mentioning this so people don't compare their max 700 nits full screen brightness to other vendors' >1000 nits full screen brightness.

Where are you getting that this doesn't have a unified memory model? This laptop uses an iGPU with shared memory.

My main gripes:

- There's zero mention of the display technology, just "2.8K Touchscreen Display"

- The optional HDMI ("3rd Gen") adapter is only 4K 60hz, when the host chip has integrated Thunderbolt 4 which can output 4K 240Hz

Going to be interesting to see how this affects Uber prices in Colorado. afaict Uber heavily engages in surveillance pricing but claims otherwise, deferring to 'discount' terminology.

You're off by a factor of a trillion. It's 6.6 TFLOPS/W.

Discord would have never gotten to where it is today if not for the Mumble community never shipping a decent fully-featured web UI. There were multiple efforts throughout the years but iirc they were not coordinated and didn't gather much momentum.

It's not too late to make another tool that can fit this niche. There's currently nothing that checks every box for me, especially when it comes to UX and security/privacy. I started designing an open source comms framework with a friend to fit this niche a decade ago and feel somewhat motivated to try again in the future.

I'll post about the repo and more on my blog once I'm ready.

I'm planning to eventually launch an open source platform with the same name (peerweb.com) that I hope will be vastly more usable, with a distributed anti-abuse protocol, automatic asset distribution prioritization for highly-requested files, streaming UGC APIs (e.g. start uploading a video and immediately get a working sharable link before upload completion), proper integration with site URLs (no ugly uuids etc. visible or required in your site URLs), and adjustable latency thresholds to failover to normal CDNs whenever peers take too long to respond.

I put the project on hiatus years ago but I'm starting it back up soon! My project is not vibe coded and has thus far been manually architected with a deep consideration for both user and site owner expectations in the web ecosystem.

My other canonical link is https://hacker-news.addon.download/account-takeover-xss-poc

Unfortunately I can't guarantee fully automatic processing

Addy told me that he didn't use AI to write his apology. I can see why people might suspect otherwise though.

> with no attribution in the code or request of attribution from others, no license, and seemingly intended to share it freely with the world

The bottom of every page on my blog has a copyright link that you can follow. I dedicated the code to the public domain. I never made a copyright claim. I simply asked Addy to not claim to authorship of the code.

That is not what I posted. My original post, accessible via the GitHub comment version history is

"@addyosmani No problem; just remember that modifying someone else's code does not grant you any copyright to that code. I don't agree with your opinion that inserting existing code into a template (the API) for a framework (Modernizr) warrants a notice of credit, even with a few changes to the code being inserted."

The notable part is the PNG file was copied exactly. He could have generated one himself.

Correct. He did not commit copyright infringement. Just plagiarism.

This feels somewhat hypocritical coming from Addy.

Addy Osmani plagiarized my code and 'apologized' years later by publishing an article on his website[1] that he has never linked to from his social media accounts.

I cannot accept his apology until he actually syndicates it with his followers.

Seems relevant to note this behavior in light of points "6. Your code doesn’t advocate for you. People do.", "7. The best code is the code you never had to write.", and "14. If you win every debate, you’re probably accumulating silent resistance."

1. https://addyosmani.com/an-apology-to-eli/

I don't see any mention of HTTP 204 or multipart/x-mixed-replace. Those are both very helpful for implementing rich JavaScript-free HTML applications with advanced interactivity.

They don't need revenue, they need a community. I don't know how this acquisition will affect that.

Throwing in my anecdote: I acquired aphantasia after a viral infection as a child. This also slightly impacted my speech. There can definitely be a fundamental difference.

In my case, I can distinctly remember my experiences from before the infection, and recall a clear difference in visualization capabilities before and after.

Third-party cookies, and presumably Privacy Sandbox are both enabled by default. I can't find any controls to disable Privacy Sandbox, and I see the presence of Privacy Sandbox attribution APIs in JS.

For me, upon its inception. We desperately needed unity in API design and node.js hasn't been adequate for many of us.

WinterTC has only recently been chartered in order to make strides towards specifying a unified standard library for the JS ecosystem.

HBM would most likely have to be integrated directly on the GPU module given performance demands and signal constraints.

I reached out to JVC's simulation projector sales department directly and confirmed that this projector is not discontinued. It appears that Projector Central has incorrect information.

Note that it took a few weeks for JVC to get back to me.

"Content forwarding or sharing functionality" seems like it would cover any website with a URL.

Selling exploits doesn't inherently violate the CFAA.

Protip: Make your web SDK APIs EventTargets instead of creating custom event subscription models wherever practical.