dessant

30 ms·

271.
by dessant 6y ago
The webRequest API is not supported in Safari, so extensions like uBlock Origin cannot be ported in their current form. It's unfortunate that Apple is not embracing the webRequest API, since it's so much more than a tool for cont
272.
by dessant 6y ago
When iPhone prices will be adjusted for cost of living, employers can adjust compensation based on the geographical location of the employee. Just because potato is cheaper in some places, substantial purchases can still cost the same, and
273.
by dessant 6y ago
What goal was Sweden pursuing by taking no real action in the beginning of the pandemic? The reasons might be unclear, but the lack of action has been properly documented.
274.
by dessant 6y ago
There's probably more truth to it when turned around: there are a number of pirates who would buy content, if it would be easily accessible. This is a self-inflicted wound by media companies, and they are attempting to solve the issue
275.
by dessant 6y ago
Netflix often promotes new content by overzealously recommending it, the constant suggestion you see for The Queen’s Gambit is probably an ad.
276.
by dessant 6y ago
To add a personal note, I came here to ask questions, to learn something new, and to try understanding how any of this is allowed to happen. You've ruined my experience and this thread for no reason. Please don't ever do that agai
277.
by dessant 6y ago
> But they are not an "Israeli Company". They are owned by a European Private Equity group, with HQ in London, despite what the Guardian's "reporter" "Jassar Al-Tahat" says. Yes, Novalpina Capital purch
278.
by dessant 6y ago
My original comment asked if we should assume that the NSO Group arsenal is shared with the Israeli Intelligence Community, given that we've talking about an Israeli company. That's a valid question, because hosting such a company
279.
by dessant 6y ago
Why are companies that stockpile zero-days for resale legal? Aren't they also a threat to the countries that host them, even if some or all of the intelligence is shared? And why aren't countries that host these companies sanction
280.
by dessant 6y ago
Hi! Please also look into the collector.githubapp.com analytics endpoint, the request does not seem to be compatible with GDPR in its current form. Either unique IDs tied to the user will have to be removed, or express consent will have to
281.
by dessant 6y ago
Thanks for the update. It appears the data will continue to be sent to Google Analytics from the backend.
282.
by dessant 6y ago
Mentioning user tracking in a TOS or privacy policy that is mandatory to accept in order to use the service is no longer legal. This article may help you understand what consent means under GDPR: https://www.privacypolicies.com&#
283.
by dessant 6y ago
> consent is simple to gain, who reads the entire ToS and privacy policy? That's not how informed consent works, you can't just mention the collection of personal data in a privacy policy. Consent must be explicitly requested f
284.
by dessant 6y ago
Yes, they can do anything with the user's data, if the user has consented, or if they are willing to break the law. The tracking request you see above requires informed consent under GDPR, and GitHub does not ask for consent before col
285.
by dessant 6y ago
A GitHub spokesperson has issued this statement [1] about a request to api.github.com: "That endpoint tracks aggregate performance metrics, and does not rely on cookies or other unique identifiers". GitHub is still sending our use
286.
by dessant 6y ago
That extension hides, and sometimes accepts cookie consent popups for tracking cookies, it's harmful for your privacy, and should only be installed if you literally don't care about cookies, nor your privacy.
287.
by dessant 6y ago
GitHub still sends the same personal data to their own analytics endpoint, and the privacy policy which lists third-party data subprocessors [1] has not been updated. See my comment below for details: https://news.ycombinator.com
288.
by dessant 6y ago
I've been planning to post about this issue a couple of months ago, when I've noticed that GitHub was sending personal data collected on the client-side to Google Analytics without user consent. Then recently they have introduced
289.
by dessant 6y ago
Until now GitHub has sent client-side requests to Google Analytics with a client ID that was also sent in a second client-side request to an in-house analytics API at GitHub for augmenting and cross-referencing user data. The client-side Go
290.
by dessant 6y ago
> This seems to be more focused on the distribution. The screenshot makes it seem like it'll be shown on Chrome's new tab page. Yes, the point of AMP is for Google to control content distribution on the web, and they entice you
291.
by dessant 6y ago
> Something like AMP? This is literally AMP [1]. The feature was launched as AMP Stories, which has now been rebranded to Web Stories. They are throwing everything at the wall to increase the use of AMP. [1] https://amp.dev&#x
292.
by dessant 6y ago
Working for Google and Facebook is often a choice, with a highly desirable outcome. People rarely become engineers at Facebook because they just couldn't find a job at a different company. Those engineers could decide to build similar
293.
by dessant 6y ago
There is a need to begin calling out Facebook and Google employees directly for their role in harming society, especially because they seem ready to rise up whenever one of their peers is mistreated. What would be your strategy for holding
294.
by dessant 6y ago
Extension stores have a policy of only allowing the use of permissions one really needs, which they have been enforcing with automated scans and manual reviews. Why couldn't they require the use of declarativeNetRequest for extensions
295.
by dessant 6y ago
There's a good chance that none of those browsers will support the blocking webRequest API in 3 years, and that's because of Google's thumb on the scale. Quitting Chrome solves nothing.
296.
by dessant 6y ago
We've all been watching with disbelief as Google evolved the narrative around the declarativeWebRequest API, coming up with new angles and changing the goalposts to wear people down as critics have disproved all of Google's reason
297.
by dessant 6y ago
This is a wonderful service and it's laudable that your heart is in the right place! Please introduce a paid version early on, people are lenient about the early rough edges when you have such an admirable mission statement. Also don&#
298.
by dessant 6y ago
Masking secrets is not meant to defend against malicious code, but mitigates a class of issues in the build system and the software you build that could lead to inadvertently leaking secrets.
299.
by dessant 6y ago
Unexpected behavior caused by any bug could print the variable to the build log, there is no need for malicious code to end up with compromised secrets.
300.
by dessant 6y ago
I've moved on back when Travis CI employees have started recommending to turn off secret filtering in Windows build logs as a workaround for a bug, then decided to turn the workaround into a fix, exposing secrets in the logs of all Win

More ›