bluesign

27 ms·

271.
by bluesign 6y ago
This reminds me of Google Wave little bit.
272.
by bluesign 6y ago
I think the practical way of thinking would be: - seeing L + L = C and converting CM to M ( basically striking L L and C ) - then V + V = X, ( striking Vs and add an X) Then write whats left: MMXXXII Then try to re-write.
273.
by bluesign 6y ago
> But hypothetically the App Store review process is vulnerable to a bad actor inside Apple pushing an update to a big app that included malware. I don’t think this is technically possible.
274.
by bluesign 6y ago
to be honest I am on the side that thinks asking 2FA to disable 2FA is not necessary, now I read my comment again, it sounds like I was on other side. on both cases, password change and 2FA disable, it is asking password (but not 2FA) So I
275.
by bluesign 6y ago
"Another risk is similar to why you should require a password to be re-entered in order to change a password." you know that google asks your password when you want to change your password right?
276.
by bluesign 6y ago
I think this study is little flawed, I would appreciate if someone with more statistics background can comment. I think: - monte carlo simulation is not good to compare with election results. At least you have households tend to vote simila
277.
by bluesign 6y ago
It all depends on how well you use git I guess. Imagine you developed a feature on a branch, then merged it into main. Later you have to change something at that feature, from the commit message you can find the commit, then you can see whi
278.
by bluesign 6y ago
I think this is related to relativity, one data feature missing, which is the level of job vs their previous exposure. Basically with juniors you don’t know what they have been exposed before. In general less they are exposed, more confiden
279.
by bluesign 6y ago
I mostly agree on your thinking but I think it is not so simple to decide. If we focus on reinforce vs question part. It is kind of prisoners dilemma. If we assume governments(reinforcers) will anyway work on this technology, and lets assum
280.
by bluesign 6y ago
For example you can check if clipboard has an URL, and if exists you can use it. Checking part would not trigger privacy alert. Actually it is documented way of doing this.
281.
by bluesign 6y ago
If intermediate certificate private key leaks, basically you can block revocation. As you can sign OCSP message with this certificate. Kinda defeats purpose of revocation. But as far as I know, browsers are not failing hard on OCSP failure,
282.
by bluesign 6y ago
But we are not ending with this kind of discussions here (even when we do it is discussed like why vim is better, why MS is good/bad etc) thats the point. Like if you show me some examples from top 100 today, that is splitting audience
283.
by bluesign 6y ago
“ I think you are right that HN is not the right venue. A lot of what has kept it functional for over a decade is the focus on tech.” Exactly this, because tech discussion doesn’t usually split audience 50/50 and audience is usually mo
284.
by bluesign 6y ago
Thank you very much for confirmation.
285.
by bluesign 6y ago
I think it would be more clear if you come up with a statement like: ‘we never used this data, other than showing favicons’
286.
by bluesign 6y ago
More like we made a design decision, than someone warned us this is bad for privacy, we ignored, after 1 year it blew up on HN, now we are fixing it.
287.
by bluesign 6y ago
Sorry but this is not enough reason. There is a simple question you should ask to yourself. - Would you be ok to use a third party for this with same privacy policy?
288.
by bluesign 6y ago
how they will manage? they will check every day your app behaving correctly? or is it easier to force trials to be on apple subscriptions, and don't have any problem.
289.
by bluesign 6y ago
But here situation is more like: You downloaded CBS All Access, they made you free trial member, you have no idea how much it costs. You may even don't know it costs You started watching Picard etc, 1 week later, when new episode came,
290.
by bluesign 6y ago
Cause the consumer thinks app is free or one time purchase, they may even not say anything about payment, till your trial is over. And you invested your time on a training, later surprised by the cost, but as you were invested timewise, you
291.
by bluesign 6y ago
To be honest this rule is for a reason. Onboarding people without price, then telling them about price certainly will increase your retention, but not the best case from consumer side. From twitter they say: “ We've experimented with a
292.
by bluesign 6y ago
Sorry for confusion, second marginal was mistake, I meant even marginal cost is zero, actual cost is not. My main point is even marginal cost is zero, there is another cost ignored (saas service example) If you are ok with to pay 0 when mar
293.
by bluesign 6y ago
Problem is audience, if we had unlimited number audience, maybe marginal cost would be zero. In current situation, cost of production (including labor), is shared with intended audience. Imagine a edge case, I am writing a book to a very sp
294.
by bluesign 6y ago
I think another analogy can be better. Imagine I want to fly somewhere, plane is half empty, I am going there and sitting. Don’t have ticket. (Imagining no enforcement) Should I? Eventually this plane will fly there, my effect on cost is ig
295.
by bluesign 6y ago
I see 25% reduction in single core performance, 45% on multicore performance, according to ipad pro benchmarks [1] Nothing to be too happy about [1] https://www.macrumors.com/2020/03/23/ipad-pro-2020-a12z-benc
296.
by bluesign 6y ago
There is separation between responsibilities, even those apps are apple apps. Basically if you can do with any app, it is OSX, otherwise apps fault Even apple guides state: You must also verify that the file you intend to read from or write
297.
by bluesign 6y ago
It works with any app that can be convinced to run arbitrary code. It is limiting the scope very much. TCC shouldnt check entire app for signature. Safari should verify its resources, is what I am saying
298.
by bluesign 6y ago
This sounds like a bug in safari more than osx tbh.
299.
by bluesign 6y ago
It is not "smoking gun", it is not scientific, it is not even "study". This is more likely screaming "fire!" in theatre. Also what you suggested is not symmetric, let me explain: - There is a claim tiktok is do
300.
by bluesign 6y ago
especially after claiming "There's also a few snippets of code on the Android version that allows for the downloading of a remote zip file, unzipping it, and executing said binary." I checked quickly tiktok apk, but couldn&#x

More ›