Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Sephr
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
7 ms
·
61.
▲
by
Sephr
2y ago
GPC is also a narrower signal implying a smaller subset of privacy choices.
62.
▲
by
Sephr
2y ago
Removing this feature harms user agency. This will result in Firefox users having to deal with more annoying consent prompts. Transcend Consent Management's default configuration opts users out of every unessential tracking purpose (an
63.
▲
by
Sephr
2y ago
Does this mean better motion response times? The M-series MacBook Pro displays have notoriously smeary displays while displaying high-motion content, so this would be a welcome addition.
64.
▲
by
Sephr
2y ago
I like to use my windows to get some sunlight.
65.
▲
by
Sephr
2y ago
400nits is way too dim, especially for $650. There are 4K 165Hz 27" and 32" FALD monitors with over 1000 dimming zones capable of sustained >1000 nits full screen brightness available for $400.
66.
▲
by
Sephr
2y ago
I self-host OFTN Zerodrop as a pastebin with CAPTCHA support along with binary uploads and conditional routing. Unfortunately I still ended up taking down my publicly accessible demo to not have to deal with the legal risk of potential abus
67.
▲
by
Sephr
2y ago
Reminds me of when I used this same API to debug Chrome OS's "crosh" shell and escape OS protections, also obtaining root access on developer devices. (CVE-2014-3172) The author of this post had to bypass much more challengin
68.
▲
by
Sephr
2y ago
I imagine that moderately sized autonomous VTOL jets will eventually become cheap enough to completely displace attack helicopters for most use cases.
69.
▲
by
Sephr
2y ago
Doesn't this behavior from Mozilla staff indicate that using Firefox extensions at all is a security issue? This shows that the reviewers may not be competent enough to catch actual malware uploaded to their add-ons site.
70.
▲
by
Sephr
2y ago
It's possible to implement shared history systems where newly invited members of a group can request access to the history of a group, while preserving E2EE security.
71.
▲
by
Sephr
2y ago
> I don’t think it’s reasonable to expect zero link fraud facilitated by Google Link fraud is entirely preventable in an automated fashion. They just need to start enforcing their own policies. Validating ownership of 'display URL&#
72.
▲
by
Sephr
2y ago
The core issue here is that Google does not effectively verify ownership of vanity URLs displayed to users. You may not ever connect to the vanity URL in the first place.
73.
▲
by
Sephr
2y ago
Google has convinced regulatory agencies that they're not responsible for their own complicity with supporting link fraud. I wrote an article about Google's role in enabling link fraud[1], which shows how this is effectively a for
74.
▲
by
Sephr
2y ago
Yeah. GPU is the only thing you'd want to upgrade in the near future, and Thunderbolt 4 already throttles performance significantly. These CPU results are pretty formidable to go along with a full-fat GPU over 120/40Gbps Thunderbo
75.
▲
by
Sephr
2y ago
This processor series seems great for thin-and-light laptops and handheld gaming devices, yet Intel has decided to only include Thunderbolt 4 instead of Thunderbolt 5. This limits the longevity, upgradability, and relevance of gaming produc
76.
▲
by
Sephr
2y ago
Cool. I got "Your boundary is at hue 174, just like the population median. You're a true neutral." with a MacBook Pro miniLED display.
77.
▲
by
Sephr
2y ago
> total plastics mass concentration in brains increased over 50% in the past 8 years I wonder if this correlates with the rise in the use of 'compostable' (i.e. weaker) plastics, that are more likely to break down during use.
78.
▲
xMEMS Introduces 1mm-Thin Active Micro-Cooling "Fan on a Chip"
(xmems.com)
3 points
by
Sephr
2y ago
|
0 comments
79.
▲
by
Sephr
2y ago
Caveat to the title: Except for local client-side data emissions . Filtering private data before it gets sent from your device in the first place is a good idea.
80.
▲
by
Sephr
2y ago
> E4X had the unfortunate downside of returning actual DOM instances, which needed to be updated imperatively Firefox never shipped the optional E4X DOM APIs. I wrote a polyfill for them at the time.[1] 1. https://github.com&#
81.
▲
by
Sephr
2y ago
Another interesting related area is designing URLs for third-party components. Third-party component have to coexist with existing site navigation logic, so generally you can't safely add URL-based configuration to such a component. Fo
82.
▲
Tiny Tapeout Demoscene Competition
(tinytapeout.com)
4 points
by
Sephr
2y ago
|
0 comments
83.
▲
by
Sephr
2y ago
This leads to an interesting phenomenon that increases tracking in some poorly designed browsers, despite the wishes of both site owners and visitors. Sites will end up using this, and some site owners will also install privacy compliance s
84.
▲
by
Sephr
2y ago
In browsers, it's as simple as: if (!sessionStorage.sessionReported) { reportSession(); sessionStorage.sessionReported = 1; }
85.
▲
by
Sephr
2y ago
This service claims to not track personal data, yet their docs admit to storing hash(siteID + User-Agent + IP) + seen_paths on their backend for session tracking.[1] Sites can track sessions without tracking personal data. 1. https:/&
86.
▲
by
Sephr
2y ago
I imagine that your example scenario would involve talking to your users to keep their trust and owning up to mistakes if you were running a free service whose security ended up being affected by those mistakes.
87.
▲
by
Sephr
2y ago
I never claimed bad faith. Lack of professional competency can also cause poor decisions. As it stands, Jake hasn't even admitted to his mistake yet. This isn't just about an open source project. It's about an online service.
88.
▲
by
Sephr
2y ago
The owner of the domain was Jake Champion. He transferred ownership to Funnull.
89.
▲
by
Sephr
2y ago
I'm curious as to how Fastly can defend their choice to keep Jake Champion in their employ after the damage he caused by transferring polyfill.io to Funnull[1], triggering this entire incident. The warning signs should have been obviou
90.
▲
by
Sephr
2y ago
Funnull claims that Jake Champion owned the project and transferred it to them as part of an acquisition agreement[1]. 1. https://x.com/JFSIII/status/1761385341951361182
More ›