firloop

It probably has to do with mixed content. I bet many radio streams are offered as HTTP only, making this site break if it’s on TLS.

FYI, I don't think you can submit someone else's project as a Show HN. See the rules here: https://news.ycombinator.com/showhn.html

(I'm not the creator, but am friends with the creator who is 'Jarred on here)

Haven’t tried reproducing, but it’s possible they just “don’t support” this.

Facebook also “doesn’t support” these sorts of links (at least to Telegram, Snapchat, others) on Instagram: https://techcrunch.com/2016/03/03/instagram-starts-blocking-...

Working on a private journaling app for iOS that opens ~instantly and feels like a private blog or Twitter page. Content is saved to your iCloud Drive and is totally private.

It’s still a bit buggy and the UI needs a bit of polish, but I’ve been using it for the past year and it’s been helpful for thought and introspection.

there’s a beta here: https://posting.app

privacy policy here: https://posting.app/privacy

Sorry about that, noted.

bit.ly and t.co both do, and they're hugely popular. I just left the HTTP responses out of the post for brevity. From the post:

>While neither redirect you to an advertising company like TinyURL, Twitter’s primary business model is advertising, and bit.ly’s privacy policy says they share data with third parties to “…provide advertising products and services…”

Both services set long-lived tracking cookies:

    curl -v 'http://bit.ly/aFzVh0'
    ...
    < Location: http://nymag.com/daily/entertainment/2010/08/hear_katy_perrys_milk_milk_lem.html
    < Set-Cookie: _bit=l03lLp-b899a3350a02095760-00P; Domain=bit.ly; Expires=Fri, 02 Jul 2021 21:47:25 GMT

    curl -v 'https://t.co/45cMiYOHQ8'
    ...
    < location: https://luke.cat/
    < set-cookie: muc=6d0d0800-f738-4704-b292-f03b6e5a5f91; Max-Age=63072000; Expires=Tue, 03 Jan 2023 21:49:09 GMT; Domain=t.co; Secure; SameSite=None

Video of the event here: https://www.youtube.com/watch?v=vj2-cgxy98o

Definitely smiled when the elephant gets up on its own feet again :)

I’m using 1Blocker on iOS.

I’m sure that GitHub certainly has analytics; they just don’t use third-party analytics. This means that either they’ve built their own tool or are self hosting someone else’s. I imagine that GitHub has some amount of internal tooling here out of necessity, e.g for metrics about how people use GitHub over SSH.

I'm an American that's currently in Europe, and I recently downloaded a mobile ad-blocker for the purpose of blocking cookie popups. I was already blocking most tracking at the DNS level, so this was mostly for cosmetic purposes. Blocking consent banners has made browsing the mobile web so much more pleasant.

Agreed! When I worked at Stripe, Michelle was my "spin-up buddy", and getting the chance to work with her was one of the highlights of my time at the company. Strong second that she is extremely kind and embodies the best of Stripe's culture.

I don't intuitively understand how this change blocks targeted advertising outright. Sure, Facebook will have less information about me from other apps that I use, but certainly it has numerous other ways of targeting ads to me.

Facebook knows my demographic because I provided it to them when I signed up and the types of content I interact with in their apps, and they have both coarse and granular location (IP address and the location permission) from their first party apps. Most relevant forms of targeting seem to still work. Ads from the local florist can still be targeted.

It's credible to me that other, Facebook specific, magic such as "lookalike audience" and other behavior cohorting tools may be impacted by this change, but I don't view this narrow issue of IDFA consent to be an absolute judgment on ad targeting.

> Users can easily choose to keep providing Facebook (and anyone else) with all the information they want. Or they can choose not to.

This part hits the nail on the head. Facebook is intentionally being misleading in this campaign. I’ve had the IDFA turned off on my phone for years. Now apps have to ask for it individually. If apps have to prompt to access it, and this benefits small businesses so much, wouldn’t people agree to it with the right framing? Why doesn’t Facebook provide a method in its tracking SDKs that shows an interstitial about how this is good for small business before asking users if they want to be tracked?

Of course, Facebook would never do that. That’s because “informed consent” with adware doesn’t really exist... once people actually understand the scope of ad tracking networks... they don’t want it.

I’m not even against the concept of targeted advertising. Facebook’s first party properties are fine venues for it. I’m even (generally) ok with an advertiser retargeting me based on information they have about me. I wish that Facebook was prohibited from scooping up data in every other app I use and combining it with other data that they purchase. You can have targeted advertising without a massive surveillance dragnet.

Submitter here, I missed that thread. Thanks!

yabai is another option worth considering as well

https://github.com/koekeishiya/yabai

Reminds me a lot of reading old GameFAQs guides

One standard that has stuck out to me is shipping pallets. This piece[0] opened my eyes to how they standardize what a commodity is:

> The magic of these pallets is the magic of abstraction. Take any object you like, pile it onto a pallet, and it becomes, simply, a “unit load”—standardized, cubical, and ideally suited to being scooped up by the tines of a forklift. This allows your Cheerios and your oysters to be whisked through the supply chain with great efficiency; the gains are so impressive, in fact, that many experts consider the pallet to be the most important materials-handling innovation of the twentieth century.

[0]: https://www.cabinetmagazine.org/issues/52/hodes.php

(The piece is far more interesting than the bit I quoted)

Ted Cruz is at least one Senator fighting the election results: https://thehill.com/homenews/senate/529146-cruz-offers-to-ar...

> Yesterday was the safe harbor deadline for the U.S. Presidential election and enough states have certified their election results to determine a President-elect. Given that, we will start removing any piece of content uploaded today (or anytime after) that misleads people by alleging that widespread fraud or errors changed the outcome of the 2020 U.S. Presidential election...

This is likely going to make a lot of conservatives in the US unhappy, since a number of elected officials in Congress (!) are openly questioning the election results. Also seems a lot more severe than Twitter’s approach, where Twitter is labeling “disputed claims” rather than taking them down.

I don’t believe that the 2020 US presidential election was rigged, but I think it’s heavy-handed to take these videos down outright. After the 2016 election, many people went wild with Russian conspiracy theories that proved to mostly be bogus, and that content never got this level of platform scrutiny or censorship.

Ars Technica writeup about the vulnerability: https://arstechnica.com/information-technology/2020/10/apple...

I imagine the hard part of securing <iframe /> tags isn't the sandbox, but instead maintaining user privacy. GitHub caches and proxies all of the images they render. One of the benefits of this is that a 3rd party can't fingerprint or otherwise log information about the requester. Seems a lot harder to get that right in the <iframe /> case.

Hacker News' software automatically strips leading "How" from titles, to prevent clickbait presumably. I think it's probably fine to have it here though.

Ditto, use opener for exactly this.

In this scheme, how do you look up a row in the DB by the resulting encrypted ID?

> We thus had a (very, very low) spending limit for this project. This is the reason for the Slate’s extremely basic webpage – it’s literally just a hardcoded HTML file sitting on AWS. Dirt cheap! (I had lots of folks write in offering their help to create a much fancier webpage. This was very generous, but I could do that too. It’s basic because we couldn’t afford to do something nicer. I’m not kidding when I said our spending limit was low.)

This seems like exactly the sort of thing that open source could "disrupt". Something simple perhaps; a static site builder[0] that takes in candidates and a link to an ActBlue campaign and makes a passible "slate" page. One advantage to having something like this would be something that optimizes for all of the metadata/header tags that makes a page very sharable on social media.

Admittedly, software is probably not the hard or interesting part of doing this, as the post mentions, it's probably just the actual act of promotion. Then again, making "slates" easy to brand, spin up, and promote sounds like a powerful grass-roots tool to me. (If anyone is thinking about doing this, please email me)

[0]: I'm not suggesting some overengineered monstrosity. Hell, the static site builder could be a static HTML file of its own.

This is the initial report. For some of the key analyses and takeaways, you can see them all on this part of the ICIJ's website: https://www.icij.org/investigations/fincen-files/

If you want to launder money with impunity, don't do it in crypto. Just be a megabank.

See: https://www.icij.org/investigations/fincen-files/, or Matt Taibbi's writeup of it: https://taibbi.substack.com/p/revenge-of-the-money-launderer...

Just because a piece of code is licensed under GPL doesn’t mean that the copyright owner(s) can’t license the code under another license, aka the license to Apple. The issue comes when an entity is using GPL-ed code that they don’t also own the copyright to.

I don’t want to re-invent the desktop. As a software engineer, I’m annoyed that I can’t do my entire job on my phone. I’d like to see dramatically better portable input interfaces.

I’d even be happy if more love was paid to “desktop light” environments. I have an iPad Pro that’s useless for software development without SSHing into a machine.

If you're looking for more information, see here: https://blog.npmjs.org/post/617484925547986944/npm-v7-series...