edave64

Does that somehow not make the headline misleading? Becase that's what that comment said, not that the arrest was ok and warranted.

"Seamless integration" in this case doesn't read as statement about how well it works to me. It means the applications from the windows appear on your Linux desktop without the "seam" of a full windows desktop around them.

I do tend to let tabs accumulate, but then I turn off my PC at the end of the day and let all tabs fall into the void.

I like to start the day with a blank slate. Which seems to be such an uncommon thing to do that I couldn't convince FF on my last few Linux installs not to restore tabs when reopening. I've changed the obvious settings for it, I've set the flags in about:config, I've even completely disabled crash recovery and related features. It would still always reopen the last session

Actions that are fundamentally impossible to undo should generally need confirmation anyways

Maybe not for the email example, but the other comments already adress than

The mailto is inside the SVG, not the HTML document. So that's not "also" it's the same idea of bots not looking at the svg at all

Simple solution: Auto formatters

- If you have project wide automatic code formatting: Tabs

- Otherwise: Spaces

Nowadays, most of my projects use option 1.

Mac mini M2 user with safari here: The website causes 10-20% CPU load doing absolutely nothing. The spotlight effect also doesn't seem to work as intended. As long as the mouse is moving, the spotlight just barely moves in its direction. Then, when the mouse stays still, it suddenly jumps towards it. It makes the website seem a lot more laggy than it probably would be.

On chrome, the spotlight effect looks better, but we are up to 50% CPU usage.

I believe they mean that's how Google interpreted the query?

Exploiting browsers to gain access to userspace is fairly common in stuff like console jailbreaking.

And at that point you can proceed with the same kinds of kernel/driver exploits.

Have you ever executed a script you didn't write? It's handy to have a runtime where you can see what a script can do from its permissions.

I'd generally like to see more languages with APIs for untrusted sections. If I know my program reads e.g. paths from untrusted files but should only ever access it's own folder, it would be nice to have a way to ensure that I can't get tricked into accessing something outside of it.

Using bar graphs just showing the factor of improvement is kinda baffling. It took me a bit to understand how to read it, which is the last thing you want in a diagram.

Just show before and after bars...

It is fairly clear that it's not in competition with cargo, since it is literally based on cargo. It installs dependencies that are not managed by cargo, apparently mainly C dependencies.

There is often a quite significant distance between the beautiful, elegant and efficient design that brings tears to the eyes of a designer, and being pragmatic and financially viable.

Building a new competitive processor architecture isn't feasible if you can't at least ensure compile-time compatibility with existing programs. People won't buy a processor that won't run their programs.

I've been using a similar system, only that I additionally append a random 5 digit number, so that if e.g. hilton-68425@domain.org gets leaked, that doesn't automatically make hyatt-95813@domain.org easy to guess. Though it does sound like something that might be possible to brute force.

Also, they feed into different subfolders of the same main address.

It definitely has caused some issues, but nothing that would make me regret choosing this system. Obviously the email gets stored in the password manager. And even if not, I just look at the existing emails and check their destination address.

Honestly, the most annoying part is the setup of new addresses. I might look into a way to automate that.

Although it is true that I have not caught a single company giving the email away, but it still helps me keep the inbox organized.

Reminds me of https://pngquant.org/

Same concept just for making images more efficient for PNG

What are you doing with it that opus decoding complexity is any kind of barrier?

That's a good step, but I think in most windowing systems, windows can just take and give focus as they please, so that alone probably wouldn't be too effective.

It's probably a possible problem to solve, but fixing stuff that wasn't build with security in mind from ground up is always tediuos.

Thanks. That works, but worse that actual Safari. Especially icon fonts seem broken. But better than nothing :)

Metaverse means they can bring real world limitations to a virtual world that has no need for them, so they can profit of these limitations.

Are there actually any Webkit browsers on Windows without having to build it myself?

As I said, it needs to be as a direct reaction to user interaction. Though from the other comments, it seems my knowledge here is outdated anyways

Are you running it as part of a click handler?

That is not quite true. JS can read the clipboard on any direct user interaction using "Document.execCommand". Also, there is a newer Clipboard API that requires explicit user permission, but as far as I understand once it is given it allows arbitrary reads.

The applications still need to retrieve data for the clipboard to be of any use to anyone. E.g. Editor widgets like to have a paste button. Edit > Paste is a fairly common pattern, too.

Without having the OS in charge of managing the entire UI, it's difficutlt to make that work

That is exactly what is discussed in the article. A way to notify the user if a program request the contents of the clipboard. iOS apperently does just that.

The thing with the clipboard is that the feature is ancient. And back then, most applications were generally very unconcerned with security. So now the genie is out of the bottle, and it's difficult to convince some people that it's a problem.

The article's POC works for X only, which, as far as I understand, doesn't even prevent applications from reading each others keystrokes, much less clipboard. That just wasn't any kind of priority when it was created

This feels like a massive break with the most fundamental syntax of the language. The examples might look more readable in isolation, but I feel this would reduce readabilty in practice by making the language more complex to read and for allowing massively mononolithic expressions, like the ternary operator.

He what's that communication to reach people. You do public communicate where the public is.

Google can't be a neutral middleman because everybody is trying to manipulate the search results. If everybody is clickbaiting their page titles, and Google just displays them as is, it makes their product worse.

> The replacement, declarativeNetRequest, does not require the user to give any permissions, so the days of granting ad blocking extensions full access to every page are gone.

From what I see, it also has some strict limits. My basic uBlock+ install has 82780 network filter rules. Chrome seems to "only" guarantee 30000 rules, and I don't know if these match 1-to-1.

And there don't seem to be dynamic replacements, which might be useful to trick adblock detection. Not sure how far in the cat-and-mouse game we are on that front, but I sure don't like the idea of giving the mice highly limited rulesets while the cats can do and do whatever they like.

> The new cross-plat runtimes and languages we could have had by now if JavaScript didn't have a stranglehold on the available browser-side language space

Probably barely working, super fragmented garbage. A standard that isn't optimal but works well enough is fantasic in comparison to everybody trying to make their own thing. And realistically, if something else would have emerged, people would whine about it just as much as they do about JS.

Nowadays, we can use pretty much any language we want and compile it down to JS/WebASM. And most just add some compile checks with TypeScript. Because that's good enough, and it works.