doomrobo

Ooh that's kinda evil. A server could give a client a uniquely identifying ETag for a given URL. So whenever the client comes back on the same browser, they're identified.

Fortunately this is probably just as detectable as the Last-Modified abuse in the post.

[deleted]

Would love to see if people have a good experience with this. The only thing keeping me on neovim is the ergonomics of my config. If I can have that, PLUS the discoverability of all the LSP features, hovering, consolidated error messages, etc. without it breaking all the time, I would switch in a heartbeat.

fwiw I think an important distinction is that you're talking about a majority group. It's probably different for the indigenous people that the Japanese Empire committed genocide against, like the Ainu

This looks like a nice way to add some features to your website. But to all reading: Overlays are NOT the way to make your website accessible. They frequently do not work as intended, and sometimes even harm accessibility [0]. One particular overlay was so bad that it got sued under the ADA [1].

Unfortunately the only way to make your website accessible is to put in the work to make sure it complied with the standards. There’s lots of resources online for this. See [2] as a starting point.

[0] https://adrianroselli.com/2022/09/overlays-underwhelm-at-id2...

[1] https://adrianroselli.com/2022/03/faciliti-will-get-you-sued...

[2] https://www.accessibilitychecker.org/guides/wcag/

One argument is that cocoa farming is a driver of deforestation in some regions [0]. Besides the environmental angle, a lot of cocoa farming is child labor [1].

[0] https://e360.yale.edu/features/the-real-price-of-a-chocolate...

[1] https://www.washingtonpost.com/business/2020/10/19/million-c...

It looks like Kiwix uses the ZIM file format, which appears to have diffing support [0] (see zimdiff and zimpatch). That said, it doesn't look like Kiwix actually publishes those diffs.

[0] https://github.com/openzim/zim-tools/tree/master/src

Unfortunately that was all the info I have. It was through the workshop newsletter that the library maintains. More info on workshops and how to subscribe: https://www.nypl.org/about/locations/heiskell/news

> I wonder how often do people write SVG by hand?

A data point: The New York Public Library just did their fourth SVG study group earlier this month. The description was "This group is studying Scalable Vector Graphics, images which can be composed in text editors like Notepad, as a way for Blind and low-vision people to create our own drawings or work with existing images. Feel free to join us if you're interested in drawing with code."

> Nothing stops the API evolving... Anyone can make a build of Chromium with a better API, test it out with their own extension, and if it works better, then they can send a PR to get that API into Chrome.

This is not at all how API proposals are handled. There are a lot more (time, financial, logical) barriers to a change like this. See the role of the W3C in this: https://www.eff.org/deeplinks/2021/11/manifest-v3-open-web-p...

Been using it for a personal project [0] and, having built things with JavaScript in the past, I can honestly say my development speed is far far faster with Rust. All the weird things that JS permits and all the weird runtime errors become compile time errors. To be fair, I haven't tried typescript.

[0] https://github.com/rozbb/readtomyshoe

Try it out here https://mdn.github.io/dom-examples/web-speech-api/speak-easy...

It's god awful on iOS

Currently no. If you listen to them they sound terrible. But I made a GitHub issue for the ability to change voices, and I hope to be shipping that soon. Autodetection is a bit harder but probably not by much.

Actually it doesn't appear that anyone has decided on a safe amount of alcohol to drink.

> Negative effects are related to the amount consumed with no safe lower limit seen.

https://en.m.wikipedia.org/wiki/Alcohol_and_health

> Alcohol consumption at any quantity is a risk factor for cancers of the mouth, esophagus, pharynx and larynx.

https://en.m.wikipedia.org/wiki/Alcohol_and_cancer

Good question. The short answer is that the UX of doing it with local TTS is pretty terrible. The voices will of course vary from device to device. But more importantly, control from the lockscreen doesn't work anymore (I've found you can't really use the web TTS API in a way that plays well with the MediaSession API, the position-resuming functionality, etc)

Merkle Hash Trees are not a solution for offline checks. You can very easily check membership in a tree if someone sends you a proof of membership. But to get a proof, you'd either have to generate it yourself (meaning you're storing the whole set anyway) or get it from a third party (ie an online lookup, which is what OCSP is). The forefront of CRL design is in set compression techniques like Ribbon filters https://arxiv.org/pdf/2103.02515.pdf

I think this is pretty close to the common understanding of it. See Definitions in https://en.m.wikipedia.org/wiki/Longtermism

I use Zotero with cloud sync. It's got full text search, tagging, webpage snapshotting, and PDF annotations

I actually think I need this! It works for even private repos, and Firefox doesn't do great with history selection on github for some reason

The author claims that veggies aren't cruelty free because among other things: "In New South Wales, Australia, over a five-year period up to 2013, rice farmers killed nearly 200,000 native ducks to protect their rice crops from the birds."

Very brave, though the author forgets to compare to literally any other numbers. A quick check reveals that Australia slaughtered ~1.5M chickens PER DAY in 2013. Currently it's ~2M per day [0].

So the author argues not to avoid cruelty because it only reduces cruelty by 99.9932%. This is garbage.

[0] https://www.chicken.org.au/facts-and-figures/#Production

Woah there at least let's acknowledge that e2ee is a BIG ask and would concretely hurt usability. A secure e2e messenger should pass the "mud puddle test" [0] meaning if you drop your devices in a mud puddle and then slip in said puddle and crack yourself on the head, you should be locked out of all your accounts.

Do you want a Zulip where account recovery is impossible by design? Or where conversation history is unavailable to new users [1]? You might say "well let people opt in if they want e2e" but that's not helpful either. If even 1 user in a group is not opted in then the entire group has the same security level.

[0] https://blog.cryptographyengineering.com/2012/04/05/icloud-w...

[1] This must be the case unless you invent a p2p system for users to bring a new user up to date on the group. And even then people could voluntarily lie about past messages. There are neat ways around all this but the point is that this system is very complicated and doesn't currently exist in practice.

A more accurate claim: 46% of the mass of the Great Pacific Garbage Patch is fishing nets.

https://www.nature.com/articles/s41598-018-22939-w

Oh, my bad I misunderstood. Yes, you could just construct a system of 65537 equations in 65537 variables. You can't do a binary search though. Remember, all you have access to is c (mod p_i) for i = 1, ..., 65537. To do a binary search, you'd need the integer c (not mod anything).

Note: if you set privacy.resistFingerprinting to true, GDocs will be blurry. I don't have another way to explain that

Ok someone please make a concrete claim about what they fear has happened or will happen. Example: "I'm afraid the NSA hacked a submitter's email and used it to access their GitHub and change constants in the encryption algorithm."

What's with the FUD here? Read the post quantum crypto NIST candidates [0]. They're all academic teams. NSA had a submission (Simon/speck) to the lightweight crypto competition (which by the way got absolutely trashed for lack of transparency). No submissions to the post quantum competition.

If you wanna see some valid criticisms of the existing PQC schemes, read the mailing lists. They're spicy.

[0] https://csrc.nist.gov/projects/post-quantum-cryptography/rou...

Not so simple. You forgot about the fact that it wraps around the modulus.

Say c is the 65537th power of m. You try a guess m' and find that its 65537th power is c + 10 (mod N). Will you choose your next guess m'' to be greater than m' or less than m'? It could be either.

Are you saying that “quarantining + something not known to have an effect” is better than quarantining alone? Why?

TL;DR This is a way for admins to enforce network policies without needing to see the decrypted traffic. You can use this to enforce domain blocklists for DNS over HTTPS: client proves their requested domain is not banned (a few sec) and middlebox verifies (a few millisec)

From your first link:

> The digital images can be converted to binary data and encrypted with Advanced Encryption Standard (AES). However, the high correlation between adjacent pixels may still be kept after encrypting a digital image without considering the property of digital images.

What do you mean by this? It sounds like it’s suggesting that, e.g., the AES-CBC ciphertext of an image has detectable internal correlations. In other words, AES is completely broken as a cipher. Surely I’m misinterpreting the claim here.