afarah1

They want to make money. Their buyers want a closely surveilled world with no exits.

Legislators in every jurisdiction seem to have more to gain with the data collection than without.

I think the insane part is that this is not criminal and the executives are not jailed for it.

Just call it war and it's no longer criminal. Perhaps on terror, or whatever.

If one is concerned with this sort of scenario, this talk about corporations and regulations is really short sighted.

Most large companies hedge their exposition to FX rates.

Why not aggressively rate limit? Legitimate use of HTML rendered commits should be largely unaffected, and crawlers slowed to a halt. You can even jail after a number of 429's...

Well, nowadays the purpose of a TV is usually to watch content over the internet, so I wouldn't call it "stupid" to connect the TV to the internet.

You might say it's naive, but is it really naive to buy a TV and expect it to be a device to display audiovisual content and not a spyware/adware machine?

I feel like it's not the user's behavior that should be put into question here, but the borderline criminal behavior of the manufacturer.

Yeah... Original and clever, and a great read! But it seems mostly useful to the handful of people dealing with ELF internals, than to the vast majority of people executing ELF blissfully ignorant of its internals... Maybe if the latency and size trade-offs were the other way around it would be more appealing to the masses.

Correct, but there are no better non-root alternatives as far as I know. Would love to be proved wrong. There are some workarounds to use NetGuard with a VPN based on a work profile or something, but I haven't personally tried them and cannot attest to them working.

Worth the shout-out to the open source NetGuard app which allows you to block internet access for select apps without root, using Android's always-on VPN feature as a firewall. This is useful to prevent this and any other apps from talking to the network in a way external to the app itself.

>the .NET developers magazine.

Surely it's online? Such magazine still being in issue would be equally surprising to me.

If there is a sustainable market for higher volume/quality/durability products for a higher price, it is in the interest of companies - new and existing - to capture it, as by definition they would profit from it.

Consolidation alone is insufficient to explain such a gap under the assumption of profitability.

It prevents event dispatch, upon which this exploit relied. The same could be achieved without listening to clipboard events, in which case the setting would be insufficient. I'm not sure there is a way to fully prevent clipboard manipulation in the browser.

Huh, I don't know about the world of HSMs or crypto and their audits, but in FedRAMP SaaS, you absolutely have to run everything with FIPS mode enabled, there are strong guarantees that need to be in place and audited.

You can disable it on Firefox by setting dom.event.clipboardevents.enabled to false. I haven't had any issues with it.

Someone shared the code in the comments, it uses 'copy' and 'cut' event listeners, so disabling this setting would have prevented the exploit regardless of an adblock.

Also interesting to look at the chart per country. [2] US fossil fuel is 4x entire Germany, while for China just coal is over 8x all of Germany. So good and relevant news at a local scale! But pretty irrelevant at a global one... A scale at which there is more talk than action in parts of the world, probably because it would be too economically painful if not unfeasible to e.g. limit or tax imports, outsourcing etc by emission source.

[2] https://ourworldindata.org/grapher/primary-energy-source-bar...

Nothing new about that

The same can be said about Flock, or other surveillance state mechanisms.

It's good for security, it's more convenient than police doing police work.

Until it's not. Until it's hacked or abused as powerful mechanisms commonly are.

Yes but also as always a people problem. People put the cameras and monitoring systems in place and operate them, to govern other people who ultimately yield to be governed, as the alternative is made too costly / dangerous by the governors.

I use a separate user for all development tasks, its home folder contains all repositories I work on, and nothing else, and that is all the IDE and the AI assistants have access to. Create the user once, start the IDE from a shell using that user, and that's it. In Linux it's a pretty seamless experience.

It's simple sandboxing based solely on unix file permissions. Albeit weak, I find the isolation sufficient. Until I'm shown otherwise it seems like a good compromise given how easy it is.

You can also create iptables rules matching on the user, so this technique is useful for applications where you want to restrict network traffic as well, and don't need stronger or more fine-grained isolation mechanisms.

Even if all applications look at the OS trust store, in my experience there's always a gap distributing the CA to every consumer, leading to time spent on debugging from time to time... Maybe that's not the case in perfectly homogeneous or sufficiently small environments where every team uses the same infra / stack.

EU driving assists are obtrusive to the point of making driving less safe in my experience. Great video on the subject: https://www.youtube.com/watch?v=f-S76WEl25k

Couple of things that could be done, from the top of my head:

- Strip links, script tags, etc - Apply the same filters used in user comments - Add a warning indicating user-generated content may be present

The post suggests the UX is problematic in that it allows user-generated links to pass as YouTube generated content. I'm not familiar with Creator Studio to know if this is the case, but if so, simple changes can go a long way.

Driving a rental car in Germany almost makes me cheer for the ongoing bankruptcy of their auto industry. It really needs a full reset at this point. Sad thing is EU law mandates for a modem in the car as well as intrusive driving aids that actually make driving less safe by constantly driving your attention away from the road[1]. So there is no hope to get a minimally decent car in Europe in the near future, unless a wider reset also happens at the political and social level.

[1] https://www.youtube.com/watch?v=f-S76WEl25k

I've had the "problem" of forgetting syntax before any AI, with IDE autocomplete. It was only ever a problem when switching jobs and being expected to write syntactically correct code on platforms without syntax checks or autocomplete. So I did some exercises on such platforms in preparation for interviews.

In the real world, reliance on syntax autocomplete and checks was never an issue. The important thing has always been understanding the core concepts of the language and the runtime, e.g. how the event loop works with Node.js and how to write asynchronous and event driven programs.

Biometrics is just something else to get leaked, terrible idea because it's even more sensitive (can be used to track you through cameras for example, like used in the Iran war).

This problem has long been solved with federated IdPs and MFA - something you own like OTP device/physical token besides something you know like SSN/tax id/password.

Most governments prefer biometrics of course because citizen privacy is the opposite of what they want.

You can also race it with another promise, which e.g. resolves on timeout.

In Brazil you already can't access some government services without a smartphone, such as paying for municipal parking in various cities. So if you own a car but not a smartphone, you get a fine. Sadly the least of the country's problems.

Ah, so the minutes long wait hearing answering machine bs is a universal experience. I thought it was a local thing and limited to ISPs, utilities, and financials... When I can choose between competing companies, having a direct line to a human for customer support is at the top of my list. I'm happy with either chat or phone, I just don't want to go through a bot first.