Sophira

6 ms·

31.
by Sophira 3mo ago
How does this compare with the F-Droid version of OsmAnd? [Edit: To answer my own question a little bit, I found a post from September 2025 that compares OsmAnd and Organic Maps (which this project forked from): https://blog.fire
32.
by Sophira 4mo ago
I don't have any specifics, but based on experience, it feels like software giants like to patent what a lot of people would consider obvious wins (such as interruptible animations) if no other company happens to be doing it, and it fe
33.
by Sophira 4mo ago
I assumed that issues like "tap eight times for a no-op" not working was because of software patents not allowing the developer to do the obvious thing. Is that not the case?
34.
by Sophira 4mo ago
I get around this by pairing JavaScript allowlisting with custom CSS and userscripts. I shouldn't have to, though.
35.
by Sophira 4mo ago
> This would result in an airplane level of whirring while it used maybe a few GB of memory and hard drive storage to boot up Windows 95. In those days, RAM was measured in megabytes, not gigabytes. My first Windows 95 PC had a grand tot
36.
by Sophira 4mo ago
To be fair, .md is the ccTLD for Moldova, first set up in 1994[0], ten years before Markdown was even a thing. The ccTLDs use the ISO 3166-1 alpha-2 country codes, defined in 1974 (according to Wikipedia)[1]. Moldova has every right to the
37.
by Sophira 4mo ago
Obligatory reminder that what the US government considers to be extremist activities includes the obvious crime of being interested in privacy and anonymity[0]. (Hence all the age verification laws cropping up everywhere, most likely. Their
38.
by Sophira 4mo ago
There are three TLDs I block on my computer completely, and all of them are file extensions - .zip, .md, and .mov. (Yes, the domain "readme.md" exists. Fortunately, whoever owns it is not using their power for evil and does not ha
39.
by Sophira 4mo ago
Similarly, Windows XP's release is closer to the release of the IBM 5150 (the first-ever IBM PC) than it is to today.
40.
by Sophira 4mo ago
I haven't actually investigated that (and I'm not able to do so right now), so I couldn't tell you for sure. If that's the case, then yes, the forms method would be 'better'.
41.
by Sophira 4mo ago
If it was one of the requests that would trigger a preflight normally, then yes, it would trigger a preflight. But the code as shown doesn't do that because "multipart/form-data" is one of the allowed MIME types that can
42.
by Sophira 4mo ago
> I guess the same trick might work with urlencoded forms, but it wouldn't work with multipart/form-data It does, though. See my reply at https://news.ycombinator.com/item?id=48618539 .
43.
by Sophira 4mo ago
> ...there are ways to produce request bodies that are valid JSON even if the browser forces you into a different format... The browser basically never forces you into a particular format. You don't even need to do the trick with
44.
by Sophira 4mo ago
Regarding the first part, it's easier than you might think to have a false sense of security. I've seen a web application that did, in fact, check the Content-Type header to make sure that "application/json" was the
45.
by Sophira 4mo ago
That's not quite correct. POST requests with certain Content-Type headers, such as text/plain or multipart/form-data, will still be allowed without any kind of preflight. If the web application doesn't check the Content-
46.
by Sophira 4mo ago
If your web application specifically parses data based on the Content-Type that it advertises itself to be, then yes, the webapp would hit a parse error. But there are many applications that don't do that. An attacker might use JavaScr
47.
by Sophira 4mo ago
My understanding was that "preventing otherwise disallowed HTTP requests" was the entire point of the preflight OPTIONS request, and that CORS will do nothing if the request would otherwise be allowed. For example, a POST request
48.
by Sophira 4mo ago
That video was super interesting, thank you!
49.
by Sophira 4mo ago
That makes sense. I feel a little silly that that's not something I considered despite the article saying exactly that. I think I got caught up in the details.
50.
by Sophira 4mo ago
Oh right. I feel silly for forgetting about that even though it's mentioned in the article. Thank you!
51.
by Sophira 4mo ago
That was incredibly well-explained. Kudos. I do have a question that the article doesn't seem to attempt to answer, though. The article says (paraphrased in my new understanding) that any spectra which makes the cones in your eyes reac
52.
by Sophira 4mo ago
I misspoke when I said Android 7+, my apologies; I was thinking of my Pixel 7, which runs Android 13.
53.
by Sophira 4mo ago
...I feel a bit silly. When I said "Android 7+", I was thinking of my Pixel 7, which runs Android 13, so "Android 13+" is what I actually meant to say. Oops.
54.
by Sophira 4mo ago
While the OOBE of the stock image doesn't force an Internet connection, the ability to unlock the bootloader does - whether you can do it or not depends on the phone manufacturer's desire, and Android for some reason uses an Inter
55.
by Sophira 4mo ago
The occassional "Drive has not been checked in <n> days, forcing check" message on bootup got annoying sometimes, yeah. It could easily take tens of minutes to finish, exactly when I wanted to use the computer! (At least thi
56.
by Sophira 4mo ago
I'm guessing that a big part of the problem with moving away from fork() in general is that each new process needs a copy of the parent process' environment anyway, right?
57.
by Sophira 5mo ago
To my knowledge, SequoiaView[0] predates even KDirStat - it just didn't have the tree view paired with it. [0] https://sequoiaview.win.tue.nl/
58.
by Sophira 5mo ago
Weird Al didn't make that song! That was Bob Rivers.
59.
by Sophira 5mo ago
On the one hand, people say that AI models (LLMs, image generators, etc) are just stealing from people and that they cannot be original. On the other hand, people say that AI models have tells that no actual person would do. Which is it? Yo
60.
by Sophira 5mo ago
The Gigabyte motherboard on my system does this as well. I turned it off immediately, of course.

More ›