Agree with you about the benefits of avoiding alcohol.
694 karma · joined May 8, 2011
Agree with you about the benefits of avoiding alcohol.
The one and only social activity that has saved me from this road so far has been a few meetup groups that I frequent.
> bindkey '^[[A^[[A' atuin-up-search
Works much better now!
As an aside, most of my usage of history is to use the last few commands I used, and so seeing the entire history each time seems like an overkill.
- Are Your Lights On?: How to Figure Out What the Problem Really Is[0]
- Problem Solving 101: A Simple Book for Smart People[1]
---------
[0] https://www.amazon.com/Are-Your-Lights-Figure-Problem/dp/093...
[1] https://www.amazon.com/Problem-Solving-101-Simple-People/dp/...
Very few. It depends on the data I need to store in the program. I don't store sensitive data in Figma or VSCode, so I don't really care if they don't encrypt my data in local storage. But if I'm in the market for something that offers to manage my sensitive financial data, then yes, I want to dig into its dependencies and security strategy first.
The encryption key doesn't have to be stored in the cloud. It just has to be stored somewhere else -- it could be in the file system.
> It's not a website, it doesn't run in your normal browser. It runs as a standalone application.
Even if it's a standalone application, it doesn't mean the code can be entirely trusted. I wouldn't take that risk.
That's a big assumption. Have you read all the code, and the dependencies of the dependencies of your code? If you haven't, how do you know it can be trusted? What if there is a backdoor in an obscure dependency that can inject a script into your website to steal your sensitive data? Don't laugh it off. When there is money on the line, someone is going to try it.
> Neither are there browser extensions involved here.
What about the extensions you installed in your browser? What about the user scripts (if you use them)?
> Huh? Please don't do this, especially not for "local first" applications, would defeat the entire purpose.
Why not? Why do you want a local first app in the first place? What's the purpose of a local first app, if not security?
Storing sensitive data in local storage makes you vulnerable to XSS attacks and Man-in-the-Browser attacks. You're exposing your sensitive data to an attacker that injects a script to the website and to malicious browser extensions. All sensitive data stored in local storage must be encrypted using a key stored in the server or somewhere on your hard disk. Otherwise, you're not reducing your risk, but substituting one type of information disclosure vulnerability with another.
Only if the creatives are making their money on their platform.
Since Patreon's entire business model is based on taking a cut of the revenue artists make on their platform, they don't make money if the artists make money elsewhere. Many creatives use Patreon only for fan outreach, and sell merchandise outside of Patreon.
If Patreon charged a fixed rate for their software, they could make more money, but they would lose the business of small creatives. That's the dilemma.
[1] https://assets.amazon.science/07/6c/81bfc2c243249a8b8b65cc21...
--------------
[1] https://aws.amazon.com/blogs/security/protect-sensitive-data... [2] https://github.com/dafny-lang/dafny