zelon88

This particular truck pictured appears to have a footprint about the size of a Toyota Camry, but with far greater rear visibility due to the additional headroom and no rear seat.

How can social media be dying when people like Elon Musk have like, 6,000 profiles?

/sarcasm

Seriously though, if Facebook put in even a modicum of effort to block the traffic from like, a dozen cities or usernames the platform could regain some semblance of what it used to be.

Failing that, they could provide users with bulk blocking based on geolocation or regex username match and let users take some control over what they get spammed with. The tools provided are completely inadequate.

> Jesus christ, used to believe what I believe? bro there's literally a pop self-help recommendation at the bottom of your reply. I guess we should be grateful it's not a ted talk or betterhelp.com review.

Have you read the book? It sounds like you could use some of it's teachings. Or maybe you'd be amused by them. Either way, this reads like a Reddit comment. Please try harder.

> No one is measuring your soul by jira task completions.

Your words, not mine.

> What I'm saying is such a 'live, laugh, love' philosophy

Really? Here's what you said.

> This is such a retarded modern take on things, not everyone derives meaning from checking off a bucket list they read about on some internet listicle. For some of us, creating and contributing is the goal.

Can you point out the "live, laugh, love" for me?

The irony of this statement is; most of the people who have adopted the views you're criticizing used to believe what you believe. I am one of those individuals.

I used to think that my worth could be measured by the amount of work that I produced. That there was some big tally board and everytime I did something valuable I would get a "tick" and that the "ticks" would eventually be tallied up and there would be some reward. Some relief. Something.

Only after having been literally told "This is my company, my revenue, my profit, and there's no relief coming for you no matter how hard you try" by not one, but TWO different employers did I finally start to adopt the thinking of prioritizing my own well being.

And only after prioritizing my own well being did I develop this sense of value in things I enjoy. Armed with the knowledge about the value of myself I was able to finally prioritize between work and home.

I highly recommend the book "The Subtle Art of Not Giving a F*ck" by Mark Manson. It is really good at demonstrating how "if everything is sacred, then nothing is sacred."

A lifetime is a long time. Viewpoints, opinions, standpoints, circumstances and plans rarely last a lifetime.

That's not my question to answer, though.

Google controls the browser, the page, the CDN, AND to a large extent the very standards that the browser has to comply with.

If what you claim is true, with all of this authority, why can't they write a compliant web page?

Considering the HTML provided by google dot com has 19 warnings and a Content-Security-Policy error for a page that only has a text field and a logo, I'm gonna take my chances and apply to become a W3C invited expert.

I just sent it to them and I urge everyone else to do the same.

This needs to be investigated by a mainstream outlet like 60 Minutes.

That work is in you now. It isn't gone. It has been converted into knowledge and experience that you will bring with you elsewhere.

I agree with your sentiments regarding the canceling of funding. It is tragic and criminal and we must organize and protest against it if we are going to save this country.

NPR is a public entity. It's funding, governance, and leadership structure are well known and well trusted. From Wikipedia...

.....Regarding financing;

>Funding for NPR comes from dues and fees paid by member stations, underwriting from corporate sponsors, and annual grants from the publicly funded Corporation for Public Broadcasting.[4] Most of its member stations are owned by non-profit organizations, including public school districts, colleges, and universities. NPR operates independently of any government or corporation, and has full control of its content.[5]

.....Regarding governance;

> NPR is a membership organization. Member stations are required to be non-commercial or non-commercial educational radio stations; have at least five full-time professional employees; operate for at least 18 hours per day; and not be designed solely to further a religious broadcasting philosophy or be used for classroom distance learning programming. Each member station receives one vote at the annual NPR board meetings—exercised by its designated Authorized Station Representative ("A-Rep").

Now, I do question the authenticity of your question. Everyone knows that NPR is reputable and everyone knows why. Their reputation precedes them. But I entertained your charade and now I implore you to entertain one of mine.

Can you provide me the same detailed information which demonstrates why someone should trust OAN? How about Breitbart? How about Newsmax? Can you please pick one and demonstrate why they are trustworthy using a similar format that I provided for you?

> Best to find a way to reliably maintain internal peace and health right now. Things are unlikely to stabilize soon, without a miracle. Or eventually bounce back. But that could take a long time. And this could just be the preamble for much worse disasters. Gulp.

This is woefully ignorant of the fact that some people will be thrown into an El Salvadorian prison, killed, disappeared, threatened, lose civil liberties, lose human rights, ect.

Must be nice to just put on some headphones and wait for it to all blow over. Unfortunately for many immigrants, LGBTQ members, activists, union members, government workers don't have that luxury. The news you're ignoring are their lives being shattered.

Not to users. The user who types Wal-Mart into their address bar expects to communicate with Wal-Mart. They aren't going to check if the certificate matches. Only that the icon is green.

This is where the disconnect comes in. Me and you know that the green icon doesn't prove identity. It proves certificate validity. But that's not what this is "sold as" by the browser or the security community as a whole. I can buy the domain Wаl-Mart right now and put a certificate on it that says Wаl-Mаrt and create the conditions for that little green icon to appear. Notice that I used U+0430 instead of the letter "a" that you're used to.

And guess what... The identity would match and pass every single test you throw at it. I would get a little green icon in the browser and my certificate would be good. This attack fools even the brightest security professionals.

So you see, Identity isn't the value that people expect from a certificate. It's the encryption.

Users will allow a fake cert with a green checkmark all day. But a valid certificate with a yellow warning is going to make people stop and think.

Tax every dollar over $999,000,000 at 100%.

So you tax the person extra who needs to eat their money, and let the person who is swimming in money keep more of it?

And you earnestly can't understand why the poor want to increase taxes on the rich?

This naively (or maliciously perhaps) maintains that the "purpose" of the certificate is to identify an entity. While identity and safeguarding against MITM is important, identity is not the primary purpose certificates serve in the real world. At least that is not how they are used or why they are purchased.

They are purchased to provide encryption. Nobody checks the details of a cert and even if they did they wouldn't know what to look for in a counterfeit anyway.

This is just another gatekeeping measure to make standing up, administering, and operating private infrastructure difficult. "Just use Google / AWS / Azure instead."

So my original comment was accurate then?

> Cookies are entirely a design choice, and a lazy one at that. It is entirely possible to identify, authenticate, maintain session, and store data about a user on the server completely without cookies. *

By your logic, you're just to lazy to do this better than me and it's just easier to throw banners at everyone?

In a hidden DOM on the page. Updated asynchronously.

There is Javascript running on the page that updates the DOM.

So as long as the user is on the page, the "session" stays alive.

Basically the web app builds a fingerprinting cookie with a super short lifespan in the page as a hidden DOM. On a set schedule, or with every request, the credentials that are baked into this "DOM cookie" are rotated. When the user stops sending requests the session is closed.

Let's say the cookie expiry is 10 seconds, or until the user clicks a button on the page.

Any MITM attack is going to have to intercept the HTML over clear text http in order to steal the DOM cookie. That attack would also work on a regular cookie. But with my design the attacker only has 10 seconds to deconstruct that cookie and use it to steal the session. With a regular cookie they have a lot more time.

The only other way to hijack the session would be local malware or browser extension, which would also work on a regular cookie.

I see you edited your original comment rather than replying to mine.

The URI parameter must be accompanied by the session token and encrypted login credentials as well via POST.

So unless you steal the username, hashed password, tokens, and URI parameter before the expiry of the token then you aren't hijacking a user session.

PHP doesn't have to use a cookie to maintain session.

Check my other comment for an explanation.

In the proof of concept I linked, a self expiring session token is given to the client.

If it is returned before the expiry, a new token is generated and the process starts over.

If it is not returned before its expiry the session is considered to have been closed.

Cookies are entirely a design choice, and a lazy one at that. It is entirely possible to identify, authenticate, maintain session, and store data about a user on the server completely without cookies. *

* https://github.com/zelon88/HRCloud3/blob/master/core.php#L54...

As a matter of personal policy, I always try to avoid uploading (or allowing access to) sensitive documents to unknown third parties and their unknown supply chains.

I would like to see something that adds confidence for the user. Where is your Privacy Policy, Terms of Service, and Data Retention policies? What does the source code look like? I found in the FAQ the following passage; "Yes, your data is completely safe. All file conversion processing is done on Google's side, and Docs to PDF has no direct access to your files."

This doesn't really placate me. I would like to see a written policy, like a "WISP" of sorts, that is not going to change and is going to notify me when it does change.

My own background on this topic; I created HRConvert2, an open-source and self-hosted file conversion server that supports over 400 file formats in 13 languages. HRConvert2 would perform this conversion locally on user-supplied hardware.

Also, Trump plans to fine migrants $998 per day for staying in the US.

https://www.reuters.com/world/us/trump-plans-fine-migrants-9...

And that's how they get to the millions of monthly deportations per month that they were fantasizing about in Project 2025.....

"To demonstrate how efficient our product, CoPilot is, we've decided to use it to uncover vulnerabilities in competing products."

Gee, how clever and thoughtful.

Yes, I was shocked that Bill Gates's personal blog seems to have that "500 WordPress plugins" kinda vibe. Kinda reminds me of my old MySpace profile.

My favorite quirk, which they recently did away with, was in Google docs and sheets. They made a custom right click menu that had it's own Copy and Paste buttons. If you tried to use these "Copy / Paste" options, a full page popup would appear telling you to "Use Ctrl + C / V instead".

So someone at Google was unsatisfied with the system right click options, so they remade them. Then someone else at Google probably thought that was dumb and put the popup to remind people that Ctrl + C / V is better? I don't know, all I want to do is move data. But now I have to confront this issue, which takes me away from my actual problem and makes me process some new information that is completely irrelevant. And besides, I already pressed the button. Why didn't you respect that button press? Why did you give me the option to press that button if you didn't want me to use it?

Thanks Google.

Politics is more regional than any other single factor. Like religion.

You're highly unlikely to grow up Protestant in Israel just like you're highly unlikely to going to grow up with liberal views in Tennessee.

Second to geography is demographic. You're unlikely to support DEI if you're surrounded by 90% white people all the time, and you're unlikely to decry globalism after you've been exposed to large cities and dense population centers for a long time.