thenewnewguy

> All feedback is highly appreciated, no matter how brutal.

Some complaints about the linux packaging:

The website mentions a license, but doesn't appear to provide a link to one, and my .deb download didn't come with a license either.

You're redistributing Oracle Java for some reason? Might want to just mark that as a dependency, and I hope you have a license for that.

You have two copies of libEGL.so for some reason.

Sometimes the directory is BugJail and sometimes it's bugjail.

I don't use a distro that takes rpm or deb packages, maybe there could be a .tar.gz download for us?

Why not? If you're writing the bootloader (or using one that's trustworthy and open source) and deploying it by yourselves then it should be relatively safe. An attacker would have to have physical access to the hardware, or some method of modifying the bootloader on disk.

People on HN seem to hate them, but honestly progressive web apps have potential to solve most/all of those usecases.

There's an option to disable the WYSIWYG editor now :)

Unfortunately, it still doesn't work as good as before: text like `Object`s (no space between the ending ` and next text) doesn't work anymore, and according to Slack's support this is 'working as intended'.

I just checked and it's one or two clicks on the same page (i.e. not a different location) for FF and Chrome. Maybe it's different in Safari (as we are talking about MacOS here), but I haven't used in so long for me to know.

It might be better to use the linked post's title?

> Unless you need docker-compose!

There's a solution for that :) (Note: still somewhat beta quality)

https://github.com/containers/podman-compose

Unless you want the OS to spy on the keyboard this is near-impossible to pull off. And even then it's very hard to do well (backspace, tab auto-completion of paths, copy+paste, etc).

> This is also why if you access a website with a self-signed certificate, the browser will not give you a “yes” button to go through. You have to jump through a few hoops somewhere else (depending on browser) to accept the self-signed certificate, and then you can see the site.

The button doesn't say "yes", but at least on FF there's a way to bypass the warning with one or two clicks from the error page itself. I think you might be confusing this with HSTS, where a certificate failure on an HSTS-enabled website will not let users bypass the warning (and for good reason).

I think you missed a few words there: "with a boot loader that netboots signed images".

They won't be relying on the BIOS netboot that picks up the first DHCP server, but rather a custom bootloader that will check the signature on the image before running it.

Just skimmed over the post, so it's possible they pointed this out and I didn't notice - but I think this is misleading. The title makes it sound like organizational complexity _causes_ bugs, but in reality I think both are simply effects of a more underlying cause.

Larger and more complicated software both requires a bigger team (therefore more organizational complexity) and is more likely to contain bugs.

Your money isn't going to them, they already have the money regardless of whether the item is sold on Amazon or not. If you want to support specific retailers buy from them directly rather than via a marketplace that allows third parties to list on it.

Developers don't need to, unless they're the ones hosting your website. In which case, yes, I expect them to be able to configure web hosting software.

Depends on the website's Cloudflare configuration. Cloudflare supports both methods - CF to website can be HTTP or HTTPS.

This is true, but containers are so much better than nothing and relatively simple to use, so if someone isn't going to put in the effort for a more secure solution I'd rather they use Docker than nothing.

Counterpoint: Google has become the "default" way many people browse the web. Because of Google many web users don't memorize or bookmark TLDs for websites, they just use Google to find it. As a result, it could be argued that Google is taking users away from your site by proxy of this.

Sounds like you ought to get mad at Mathematica for selling 32bit MacOS software in 2019, which it's been well known for over a decade that support will eventually be dropped.

LastPass (like all other good online password managers) has a web UI.

For the average consumer, (i.e. not the average HN user, where this is far more debatable), yes.

Most laws don't care about the nationality of the victim - i.e. in a legal sense yes it is illegal. Whether or not the governments would work together to extradite/charge you, on the other hand, is a different story.

Does it really matter if it's the drug directly or the shared experience it makes possible indirectly? (I don't which it is)

Hi, not the original poster here but someone familiar with California's justice system. I went ahead and listened for a bit to what the podcast and its guest had to say.

Your relaying of the podcast, while a little simplified, is not the problem - there aren't "key elements" missing. The problem is that the information on the podcast is blatantly wrong.

Would their interpretation would be correct for the HotSpot JVM? (As in does HotSpot start with interpretation and JIT "hot" code?)

The point is that technology could _also_ be used for censorship.

> Firefox already has the video player control interface for gifs; you just have to right-click.

And do what? I'm using (latest stable) FF but nothing in the right click menu seems to allow me to control playback.

> HTTPS is unnecessary for this site.

A: HTTPS prevents your website from being defaced

B: I care about protecting the privacy of which websites and web pages I visit - even if you don't

C: The website hosts the author's PGP key

Somewhat off-topic rant, but why do websites display long videos as GIFs? Is there some size or compatibility benefit? Because it's really annoying to not be able to pause or rewind these GIFs that take the place of where a video would usually be.

Also, get an HTTPS certificate friend, it's 2019. Dreamhost provides LE certs literally for free.

Directly linked on that page: https://fonts.google.com/attribution

to be fair, that's not really a problem with slack

> better performances

I don't mean to bash slack too hard, but it honestly feels like the performance has gotten worse over time for me. Certain actions like Up Arrow (edit previous message) and loading threads on the "Threads" page seem to take way longer than they used to.