draebek

Note that I think this blocking is done not by detecting a site doing it, but instead by using block lists: Firefox has a list of sites where third-party resources, including JS that would do canvas fingerprinting, will be blocked.

As I understand it, this is different from the various "resistFingerprinting" ("RFP") settings in about:config, which will work on every site (and are notorious for breaking things). Ditto CanvasBlocker, which AFAIK runs on every site.

I got this info from one of the links in the informative post you cited: https://blog.mozilla.org/security/2020/01/07/firefox-72-fing...

Check the instructions at https://authy.com/guides/paypal/. Those seem to work for me, I can indeed now add an authenticator app just as shown there.

Oh, people are globally allowing CDNs? This has been a major thorn in my side running uBlock Origin on "medium mode" (block all third-party scripts and frames) for years now, but I figured globally allowing CDNs—or almost any sites, for that matter—was defeating the purpose of uBO medium mode, which is to protect you from unknown tracking scripts, or even worse, objectively malicious unknown scripts. (I say "unknown" as opposed to "known by way of already being on one of the many filter lists".)

I should try globally allowing the CDNs as you suggest and see how it feels. At that point, though, I wonder how much I'll be blocking that won't already be blocked via the blocking lists.

I think they offer TOTP now, right? Started sometime last year? Do you have to activate SMS alongside it?

I have been using TOTP with PayPal for (I think) a few years now. You used to have to run some weird local Python script that somehow imitated the one RSA (I think) dongle they supported in a way I don't understand, but the net result was that you just get a TOTP key that works fine.

OK, so that's the same refund of shipping fees you get from Amazon if they're late, right?

Actually, I've gotten free months of Prime with Amazon easily by just going into support chat and saying more-or-less, "You missed the guaranteed delivery date, I'd like a free month of Prime".

OK, good deal, I am very pleased to know that it's all acceptable behavior. Thanks for the detailed reply. :)

Well, everyone probably does need to agree on what is off-limits for work conversation. Putting something like "Joe Biden is a communist" or "Black lives matter is just a front for foreign agitators" into #hot-takes is probably not something you want people getting into at work in most cases, right? (Note that I am not making either of those statements, they were purposely chosen to be extremely provocative.)

I like the phrase "exposure budget", I hope you don't mind if I steal it. I've been thinking of things the same way, though my #1 "budgetary priority" right now is probably "open schools" over everything else, including seeing friends—and I say that as someone with zero children.

I fully agree, but in an office of 100 people, I'm surprised everyone else agrees.

I like these channels a lot. I have to ask, though, doesn't #hot-takes end up getting people in trouble? Like HR trouble? Or at least stuff like starting political flame wars between colleagues?

FWIW I would never trust USPS to deliver on time in my city. They regularly lose packages for a week or two before magically delivering them, with tracking information that is the long-form equivalent of ¯\_(ツ)_/¯. UPS, FedEx, and Amazon have all been vastly more reliable than USPS. However, USPS has been fine for me in other cities. Maybe, like real estate and cell phone coverage, location matters when it comes to package delivery.

BTW, when you say, "the buy has no recourse other than a refund if shipping takes longer than it's supposed to", do you imply that shipping via USPS gives you some other, more useful recourse if your shipping takes longer than it's supposed to? I cannot fathom what that would be, unless they're going to, like, refund your shipping and then give you $50 or something.

(Actually, if USPS was going to give me $50 every time they fumbled a package, I would ship everything USPS, always. I would order things I don't need, one shipment at a time. I would retire by the end of next year on my earnings.)

Is that a common thing for you, having a coin closed in your laptop? :)

Thanks for this contrary opinion. :) I have been using a Touch Bar MBP for about 18 months. I have my Touch Bar configured for function keys all the time. I touch type fairly quickly, so I rarely look at the keyboard. I spend all day in the terminal, Emacs, Vim, or my browser (which I navigate using the Vimium extension). Unlike you, I run into problems with the Touch Bar on a daily basis:

* I still hit the function keys at least a half dozen times a day by accident.

* I still manage to not register fast key presses to the Touch Bar at least half a dozen times a day by accident.

* About once a month, it seems, the Touch Bar gets stuck on its volume or brightness widget. Previously the only way I found to fix this was to reboot. Last night I may have discovered that touching other, seemingly blank parts of the Bar may get it out of this state, so at least the Touch Bar may no longer force me to reboot.

Text completion on my laptop usually slows me down, but in any case, my editor offers that for me inline, without me having to look down at the keyboard. I know all the shortcuts to delete files in Finder, comment out lines, rename variables, control volumes, change tabs, and control text formatting.

All this is to say that I guess I am not the target demographic for the Touch Bar—and, since all the new MBPs seem to have it, I guess I'm no longer the demographic for the MacBook Pro? I am inclined to agree with the comment from 'GeekyBear that I am probably in the vast minority of users, and most people will find use for the Touch Bar.

I am glad you find the Touch Bar useful. For my part, I hate it, and it's one factor that's got me looking for the exits on macOS.

I would like to second your suggestion to add haptic feedback to the Touch Bar. I use BetterTouchTool for this, and it helps me to know when I have accidentally hit the Touch Bar.

Also, I hate the Touch Bar, but Sampler looks really cool.

FYI there are various utilities (Hammerspoon and Karabiner Elements, off the top of my head) that can make caps lock act as escape if pressed and released, control if used in conjunction with other keys. This took some getting used to, but thanks to the Touch Bar, I got used to it and now I find it invaluable. YMMV of course.

For one thing, in the case of Reddit, there are sites which exist to archive deleted posts and comments. I believe I've used https://www.removeddit.com/ in the past to read some deleted content.

I would imagine it's relatively affordable and easy for someone to scrape social media and store it all, forever.

One thing ClimaCell seems to advertise is that they have access to, "Millions of data points from proprietary sources such as IoT, Drones, Airplanes, Cellular Signals, Sat Com Signals, Cameras, and more, combined with traditional data sources."[1] Another of their pages[2] claims they use signal strength on wireless networks as one of their sensor methods, which is where I assume the "cell" might come from in their name. [3] says, "Instead of relying exclusively on NOAA radar data, as other forecasting services do, ClimaCell also gathers information from closer-to-the-ground sources: cell towers, street cameras, connected vehicles, and internet of things devices such as smart garbage cans situated throughout a city."

I'm not familiar with the industry. Are other providers doing this?

(I assume that the question of whether these sensors are at all useful is another matter entirely.)

[1]: https://www.climacell.co/company/

[2]: https://www.climacell.co/blog/virtual-sensing/

[3]: https://www.fastcompany.com/90411326/how-cities-are-using-hy...

I'm surprised to be the first to write: You estimate because you do contract work for US state/local government, and the paperwork and process is horrible, and so you have to write a contract where you lay out the whole final product up front, and you have to decide what to charge for the whole thing before even starting. That number is going in the contract. It isn't going up.

Fun fact: ISTR at least one locality where, if they found out you started work before the contract was signed, there was some law (or maybe it was a policy, but in any case, no one could break it) forbidding the department from paying for said work.

Once I asked about doing time and materials instead of big design up front. The government department I was working with started saying how that would require them to certify hours, and there was a whole process, and I got the feeling that if I pressed the issue then they'd rather just find someone who could give them a dollar amount up front.

I hear that, after it left beta, the number of games that you can play on GeForce NOW is greatly reduced. I have read that you can no longer play arbitrary games from your Steam library (like you could in beta), and furthermore, a few major publishers have pulled their games from the service.

So the advantage of Paperspace would be that you can play many more games than you can on GeForce NOW.

> Everbank (not owned by TIAA) is an online-only, no-branches honest-to-god US bank.

Sorry, I don't understand, are you saying Everbank was not bought by TIAA? (It seems that it was.) Or is there another "Everbank" other than the one that was now bought by TIAA? Or are you simply referring to Everbank as it existed before TIAA bought it?

FWIW I tried Mackup for a few days to try and sync prefs between two macOS machines, and it broke more than it fixed. Many applications don't like having their preferences files symlinked or preferences changed while they're running.

Note that, at least as of 10.14 (Mojave), lots of built-in macOS preferences do not like their settings to be changed this way. For example, you can use `defaults` to change preferences for the trackpad to your heart's content, but they won't take effect immediately because IOKit (I think) has a shadow copy of the preferences that is much harder to modify. The pref pane for the trackpad ends up changing both the plist and the IOKit prefs to make preference changes take effect immediately.

If you use a lot of `defaults` commands, you'll want to reboot immediately afterwards.

Oh jeez, don't tell podcast advertisers, but I read your list, recognized that I've heard ads for every one of those products repeatedly across multiple podcasts, but I couldn't remember any of the brand names except for shaving—and I think that's only because I recently got annoyed when a YouTuber I subscribe to started to advertise for Dollar Shave Club (I assume that's who you refer to) at the beginning and end of his videos.

But maybe advertisers are happy enough if I remember their name when I eventually go looking for, say, eyeglasses and recognize their name in the search results.

FWIW apparently emacs-slack uses Slack's API rather than the IRC gateway, so it will actually stay working (for now), or so I've read: https://github.com/yuya373/emacs-slack

If you carefully read the sentence before your quote, it says, "For certain sensitive information, Apple uses end-to-end encryption." (Emphasis added.) Then scroll down to the "End-to-end encrypted data" section where it lists the data that is actually end-to-end encrypted. iCloud Backups are not listed there.

AFAIK iCloud backups are not end-to-end encrypted. I believe this past February Tim Cook, or someone else at Apple, was indicating that they were working on changing that. (It was coming up because everyone was wishing the San Bernardino shooter's phone had been backing up to iCloud, so they wouldn't need to get in the phone, they could just access the iCloud backups—IIRC.)

You can have additional MacPorts repositories, though I'm sure they're not nearly as configurable as in APT. See, for example, https://guide.macports.org/chunked/development.local-reposit.... Instead of local, the repository you add could be remote. That said, I don't believe I've ever seen a third-party MacPorts repository in the wild.

Looks like Subversion is required by nmap-update, part of nmap. http://man7.org/linux/man-pages/man1/nmap-update.1.html

Thanks for pointing out that Google's chosen data may be questionable. I found two other sources citing more like ~2.5% market share, which is in line with what you cite. I was motivated to go check our analytics and we're at more than 7% IE 8, so way too high for us to think about dropping support.

I speculate that sites with low numbers of IE 8 users are typically oriented towards more technically savvy users, and/or if those sites were never working for IE 8 to begin with and so never had an opportunity to pick up IE 8 users in the first place.

"It seems though that if you need Internet Explorer 8 support, you’ll have to stick to using Bootstrap 3."

I'm kind of surprised. No doubt some user bases have user bases running newer browsers, but with IE 8 still sitting at ~13% market share[1] I suspect this will prevent many people from using Bootstrap 4, including myself.

[1]: https://www.google.com/search?q=ie8+market+share

Agreed. I think black tea, in particular, can have like 75% of the caffeine in the same quantity of coffee. See, for example, the table at https://en.wikipedia.org/wiki/Caffeine#Natural_occurrence

I think it's either the Playstation (1) or Playstation 2 start-up sound.