cmg

Do you have any recommendations for good macOS time trackers? I've tried Clockify but the desktop app is extremely lacking and doesn't feel native at all. I've ended up just keeping a browser tab pinned.

Browser manufacturers changed the behavior of APIs like performance.now() [0] to add slight rounding 'errors' or limit the granularity of timing functions. That function used to report on the microsecond level in (most) browsers, but now is generally limited to around 1ms due to timing attacks.

[0] https://developer.mozilla.org/en-US/docs/Web/API/Performance...

I nearly gave up on learning newer front-end JavaScript stuff like React & webpack and so on a few years ago because of spaces in paths.

node-gyp doesn't like it when there's a space anywhere in your working path. Stuff I was messing around with was all in ~/Code Projects at the time, and using npm install on some things just broke. Looking back, I definitely could have done a better job parsing the error messages but still...

There's an issue but it was closed in 2018 as "The workaround is to use a path without blanks" https://github.com/nodejs/node-gyp/issues/439

work/client/project/2021-11-11-file.ext is great until you've got a '2021-11-11-project-status.txt' in a few directories and you need to find one quickly! I do a combination: clients/client/project/2021-11-11-client-project-update.txt

meta.org was acquired by Chan Zuckerberg Initiative in 2017. For some time, meta.com was forwarding to meta.org.

You probably wanted to post this in "Who wants to be hired?" instead - https://news.ycombinator.com/item?id=28719317

Thank you for your work on it! I used Sequel Pro for a long time for MySQL databases and occasionally use its successor Sequel Ace as well, but I'm moving my workflow to Beekeeper Studio as much as I can.

I've been trying out Beekeeper Studio [https://www.beekeeperstudio.io/] recently, and like that it supports both MySQL and PostgreSQL (and others I don't use). The interface takes a little bit to get used to, but it's been pretty powerful for me.

Before that, or when I'm in a rush to just get something done as I adjust to Beekeeper, I use Postbird (an Electron app) [https://github.com/Paxa/postbird]

How trustworthy / realistic is this data, though?

> The coverage map was created using data submitted voluntarily by the four mobile carriers using certain standardized propagation model assumptions or parameters that were established by the FCC as part of the Broadband Data Collection.

> Please note: The map depicts the coverage a customer can expect to receive when outdoors and stationary. It is not meant to reflect where service is available when a user is indoors or in a moving vehicle.

> Because the coverage map is based on propagation modeling, a user’s actual, on-the-ground experience may vary due to factors such as the end-user device used to connect to the network, cell site capacity, and terrain.

I've seen a lot of this recently, both on the types of posts in the article and on the posts of controversial / extremist right-wing politicians like MTG.

I probably wasn't clear enough - children should be protected for a variety of reasons, but they should also be consulted about the issues they face and how best to protect them.

Instagram says they'll be consulting with "parents, experts and policymakers" but this leaves out a very important part of the 'safe apps for kids' ecosystem - the children themselves.

They are using apps and online social spaces in ways that adults can't imagine or comprehend. They're dealing with self-esteem issues, bullying, predators, extreme content and targeted advertising & algorithmic content to keep them engaged. Kids aren't dumb. They're certainly as - or more - susceptible to the negative effects of social media as the rest of us but they shouldn't be ignored here or relegated to a class to be protected because of some kind of diminished capacity. Instead, IG and the experts should be working with them, including their ideas and feedback.

Similar to the iOS feature that can scan the messages of people under 18 on a family account for nudes, features like will get LGBTQ kids who don't have supportive homes in trouble for exploring their sexuality & identity. It will get kids who are looking for support in abusive situations via actually helpful posts in trouble when their adults see what they've been looking at.

I remember what kind of issues I had at home before I learned how to clear my web browser history in the 90s - I can only imagine how much worse this could be in terms of surveillance of kids.

That's where I'm at with my iPad, which is stuck at iOS 10. It still works pretty well for taking notes or browsing the web, even though that version of Safari is getting pretty old.

For security, it's completely signed out of iCloud and all other services, and Safari is mostly for research purposes (so no social media, email, etc).

Except people want to view the content.

If they think my friend has sent a picture, or a business has sent an invoice, they're likely to click it.

Especially in the 3 receiving situations that bb123 outlined (1, 3 and 4) you're not likely to have the contact info, or it's plausible that the person could be using another phone to send that message.

Now - I know to check the sender, don't click strange links, all of that. I run trainings on how to avoid phishing and improve personal & organizational digital security. But it comes down to the fact that people are using technology as a tool.

Apple made headway with BlastDoor but it's clearly not good enough.

In fact Chrome has a "Force Dark Mode for Web Contents" experiment under chrome://flags that does the "make everything dark" thing.

Here's an example screenshot I took the other day of the HN frontpage. Chrome with FDM on the left, Firefox on the right: https://imgur.com/a/TiNxsR6

I've been using the Temporary Containers addon for this and it's been good so far: https://addons.mozilla.org/en-US/firefox/addon/temporary-con...

It's not that it might be a problem - it is a real-world accessibility problem for people who use screenreaders.

Should the software be able to detect context? Sure. But that's not where we are today and to withhold content from people because their software hasn't gotten that far just seems wrong.

It's an interesting exercise in seeing what we can do with various Unicode characters, for sure. The 'disclaimers' presented could be worded a bit more strongly, as in "This will as of 2021 cause problems for people using screenreaders, so it's not recommended to use it."

The author says "(Maybe it does cause a problem, but it wouldn’t have to.)" and this feels extremely dismissive of people who actually rely on screenreaders today.

I had Safari/VoiceOver speak this tweet [0] (no offense to the author, it was just the first one in my feed that had this style of character in it). Every letter is some form of "Mathematical bold script capital s"

In that particular tweet, not only does it not read the word, but the "i" character is "Mathematical bold script small 1"

[0] https://twitter.com/kiwapebretech/status/1420613820876271617

> if you are building an unlock mechanism the first question you need to ask is how you build a UI which clearly communicates to a user that they are likely giving control of all of their data, location/camera/microphone, etc. to whatever they're installing.

Facebook puts a large "Stop!" warning in the browser console when you try to open developer tools with a link to https://www.facebook.com/selfxss. I'd be really curious to see if that's helped to stop such attacks on their side.

Full text: "This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or "hack" someone's account, it is a scam and will give them access to your Facebook account."

For me, datalist is almost an acceptable compromise for a typical combobox (input + select/dropdown) control. Custom solutions for that require JS and are not accessible or otherwise don't behave as a user would expect a standard input to without lots of extra work.

With select you have <option value="123">Customer Name</option> so the user sees Customer Name but submitting the form gets 123. With datalist you only have <option value="Customer Name"/> and the input tied to it gets Customer Name.

You're also stuck with whatever you put in the option's value attribute - very unlike how a <select> works where the option has text content and a value.

Scenario: You've got customers, who have names and IDs. You want to search by name, but the ID needs to be sent to the server - you're right back to doing some JavaScript hack with a hidden field that gets a data-customerid attribute or whatever off of the selected option from a datalist.

As theandrewbailey said, it would absolutely benefit from HTTP/2 - it took about 30 seconds to complete on my fast cable connection on a laptop.

Fair warning: Page 1 transfers about 8.3MB with 1,000+ HTTP requests. And will likely bring back memories of the 90s.

Yep:

.button:active { background-image: url('/some-reference-thats-actually-a-tracker'); }

.cat seems to be a non-geographic TLD focused on the Catalan-speaking community: https://en.wikipedia.org/wiki/.cat

Had you or your wife looked up "shrimp recipes" or "how to make shrimp" or anything like that in preparation for the meal? Or did you use a loyalty/discount card at the supermarket that's tied to your identity?

I used privacy.resistFingerprinting for a long time, but it changes the timezone to UTC. As a web developer it just caused a little more confusion than I was willing to deal with when working on front-end stuff. There's a bug [0] to address this but it hasn't been acted on yet.

[0] https://bugzilla.mozilla.org/show_bug.cgi?id=1364261

"for anyone" and "for programmers" are two entirely different things.

Monday night shanties at the Gris are great! Years ago, friends and I made it a weekly habit to drive the 45-50 minutes up to Essex on Monday nights. I'm glad that they're planning on making a comeback after COVID and put it on my list of things to do when it's safe, but now I'm wondering if they're going to be even more crowded.