talkin

With such a small group, chances are they all figured out that a race to the bottom won’t reach the desired long term outcome.

Legal: “it’s forbidden to target ads at specific users”

Done.

That’s the most common approach, but a cynical rewording of that statement is: I’m not making it accessible by default.

Sure. We all know that’d right. Everybody at Adobe knows too.

We also all know that they have the best dark patterns and just-not-too-sketchy business practices. Everybody at Adobe knows too.

Good luck with the fight.

Complaining about no overrides is complaining about not being able to ignore quite serious symptoms.

Firefox makes you fix the root problem.

Common misconception, but Https / TLS provides a combination of gaurantees, and the one cannot work without the other:

Encrypted transit but you might be talking with the hacker on the other end == worthless.

And with plaintext transit you cannot prove integrity during transit AND also not prove talking with the proper endpoint.

In short: Browser really is warning you that something is fishy. Don’t shoot the messenger.

The more silly[1] comments are from the maintainer, saying you should update configs with workarounds for patch releases.

1: Suggested package: sillier.

> Microsoft has been criticised (and even sued) for these practices for years.

But that also is proof for the abstract! By having this image, MS preselects on engineers with lower ethical standards.

The attacker doesnt’t use a compliant browser to make the request. User agent protections only help in situations where a regular user (or their software) is being tricked

Who says it’s their security practice… The way the top post is told, I would assume the call to be made by an attacker . :)

No, it wasn’t.

It’s not validating reused codes or tokens from an application owned by attacker.

It might also be an issue too, but it’s not actually a hard blocker.

Just ask the author for a proper onetime invoice. Maybe not all OSS authors will do it, but I woud be happy to make a quick PDF for a nice buck. :)

Now the real reason that doesn’t happen more often: Our financial departments and/or bureaucracy inside the org are actively hindering frivolous acts as being nice to others.

But still the little detail that of the 30 richest countries, it’s the only one where you can go bankrupt if you have medical bad luck. ;)

No, some switchers and dimmers can also control lights without a hub present. Some products come as a paired bulb and switch, with only an optional suggestion that you later extend into the ecosystem.

I find it funny how you‘ve gotten a few questions about feature parity, rather than how someone could ever use 300MB for just taking a selfie.

You mention 2 behaviors: With and without a modifier key. So just accept either key for zooming. :)

> Calling "media queries" a privacy issue is absurd

The header at media queries says “Fingerprinting resistance”. Some data point like screenwidth doesn’t immediately disclose you identity. But having a few data points helps with fingerprinting.

NIH is a cynical name, it means you prefer IH. All this stuff is related to Canonical reinventing stuff, without most other distros adopting it.

Urls and some other fields are stored plaintext. So yes, you’re safe from bruteforcing passwords. But still lost privacy / doxxing / spear fishing info.

You’re focusing on a single word in a sentence which was just about the format.

> so I produced a new one from my wallet. "It's not signed" she told me. So I signed it in front of her

I’ve had this too. It felt weird, but isn’t that bad: You sign just the same before a second attempt, so might as well continue. And the upside of having to do this ad hoc is that it’ll help on future card usage.

But the following likeliness check is hilarious of course. :)

I would be stunned if most users are from North America.

Source: From Europe. Europe already might be in the same ballpark + I don’t forget about other continents.

It never ‘led to’. That just happens to be the publicly communicated reason; RSS had to go for strategic reasons.

Yes.

In a secure hash function, all output bits are without bias. So all combinations exist.

Underscore matches any single char, so those patterns work fine. It’s an efficient way to match any small separator, like space, dashes, etc.