buildfocus

5 ms·

1.
by buildfocus 10d ago
Seems intentionally misleading. While I agree exposure to US surveillance in non-US providers likely isn't zero, it's significantly harder for the US to do this internationally for legal, practical & political reasons. AWS is
2.
by buildfocus 1mo ago
I've seen this on many many other sites as well, most notably Twitter, and lots of common modern captcha pages too. Very annoying!
3.
Your 'App' Could Have Been a Webpage (so I fixed it for you)(danq.me)
4 points by buildfocus 2mo ago|0 comments
4.
by buildfocus 3mo ago
The election is a re-election vote triggered by the MP already in the very safe seat, as a distraction from "where did all this money come from" investigations around him (which are also conveniently paused by this byelection). He
5.
by buildfocus 4mo ago
Europe is the obvious answer. As others have posted, your numbers here are way off. And on the flip side, there's now some major programs actively encouraging this with special grants, support, relocation bonuses: e.g. ATRAE in Spain,
6.
by buildfocus 4mo ago
How could it possibly hurt? For trusted publishing, it's not a band-aid, it's a significant improvement that kills an entire class of CI takeover publish attacks. I'm sure attackers will find another way but it's a big g
7.
by buildfocus 5mo ago
Are they disabling local mode? There's no mention of that here - the post by Bambú actually specifically promotes it.
8.
by buildfocus 5mo ago
> But it's still not at the point where it's cleaner per capita than the US and it's still quite far from that. China has significantly lower co2 emitted per capita than the US already. Per kWh no, but that's a differ
9.
by buildfocus 6mo ago
That referendum result is quite debatable, since the legal situation meant most people against it simply didn't vote. While in the past it was close, nowadays polls strongly suggest a comfortable majority against independence: https:&
10.
by buildfocus 8mo ago
> Now this dumb announcement comes out that a 3rd party has (apparently legally) established interop with a Meta property with (I am guessing) a completely proprietary, undocumented, secret protocol underneath. Resd the article - this is
11.
by buildfocus 9mo ago
Wireguard is _really_ simple in that sense though. If you're not doing anything complicated it's very easy to set up & maintain, and basically just works. You can also buy quite a few routers now that have it built in, so you
12.
by buildfocus 10mo ago
Interesting discussion of the details of the rules and breaches here, from a "this isn't actually about content or censorship at all" perspective: https://bsky.app/profile/daphnek.bsky.social/post&#x
13.
by buildfocus 10mo ago
This makes no sense. A lifetime license is convenient conceptually, but it completely detaches your goals (working software) from a company's incentives (provide absolutely zero after initial delivery - everything afterwards is cost wi
14.
by buildfocus 10mo ago
I've done something similar, it's worth noting Scaleway in the same space, for people looking for an AWS replacement more like managed services (equivalents to fargate/lambda/sqs/s3/etc) instead of just bare in
15.
by buildfocus 10mo ago
My impression is that Grok is very rarely used in practice outside of a niche of die-hard users, partly because of very different tuning to other models, and partly the related public reputation around it. https://firstpagesage.c
16.
by buildfocus 11mo ago
The contrast between the steadily shrinking freedoms in Apple-land and the open computing approach underlying all today's the Valve announcements is fascinating.
17.
by buildfocus 11mo ago
That's an impossible model though - you're asking somebody to do unlimited work for you forever, for a fixed one-off price. In that world nobody should ever ever sell a lifetime license, it's a huge responsibility with strict
18.
by buildfocus 11mo ago
This typically means they agree you don't get double charged (so you can claim taxes paid in one back in the other) but they both still want you to complete the paperwork regardless. Saves money, not time.
19.
by buildfocus 11mo ago
The way to make this work for real is with a smooth migration path, which means a way to keep running Android apps on your new system. If you want to sponsor Waydroid to help make that happen, you can do so right now: https://ope
20.
by buildfocus 1y ago
We already have exactly this right now, without digital ids, it's not even theoretical. The government blocks plenty of residents from aspects of society (eg can't work based on visa rules, can't access public/health ser
21.
by buildfocus 1y ago
For Spain, for online stuff signatures & verification it's mtls, with a client certificate issued by the government. You can sign documents with it or authenticate with it entirely offline (effectively nobody does the latter, but y
22.
by buildfocus 1y ago
For Spain at least, most banks have foreigner accounts you can open with a passport, and convert into a normal account once you have local id later. It's a mildly unusual setup (and a bit confusing when you're new) but it's p
23.
by buildfocus 1y ago
They only needed to test with the latest Electron at the time of release (or indeed, any chance version - they're all affected - but latest is a reasonable baseline). If they had, they would've seen this. There are patches out now
24.
by buildfocus 1y ago
That's not true - you can enable developer mode and install apps via ADB without affecting Play Integrity for other apps on your device. You can test this today. Play Integrity is focused on checking the OS is original and the runtime
25.
by buildfocus 1y ago
Attestation & Play Integrity is having a good go at blocking this: lots of critical software (e.g. the app required to use your bank account) requires certified attested devices, and Google are pushing hard to get as many apps as possib
26.
by buildfocus 1y ago
https://httptoolkit.com also worth a look if you're interested in this space: has some neat automated setup for Android MITM that can be much simpler _and_ more effective than the manual config route (with automated Frida s
27.
by buildfocus 1y ago
Node can also produce a single binary executable: https://nodejs.org/api/single-executable-applications.html
28.
by buildfocus 1y ago
You can also do this natively with Node, since v18: https://nodejs.org/api/single-executable-applications.html#s...
29.
by buildfocus 1y ago
This expectation is that this should not work - well behaved network devices shouldn't accept a blind GET like this for destructive operations. Plenty of other good reasons for that. No real alternative unless you're also going to
30.
by buildfocus 1y ago
This is a misunderstanding. Local network devices are protected from random websites by CORS, and have been for many years. It's not perfect, but it's generally quite effective. The issue is that CORS gates access only on the cons

More ›