dfabulich

8 ms·

61.
by dfabulich 7mo ago
Indeed, and the dead comments (from new users!) overwhelmingly favor the government position. But, this is a non-story, because those comments were correctly killed precisely so they wouldn't clog up this thread.
62.
WebKit Features for Safari 26.4(webkit.org)
2 points by dfabulich 7mo ago|0 comments
63.
by dfabulich 7mo ago
Strategically, Apple's not setting themselves up for success here by giving Apple Business away for free (with paid per-user storage bumps). As a lot of people on this thread have pointed out, Apple's Business Manager needs a lot
64.
by dfabulich 7mo ago
If that's not motivation enough for you to rename it, well, TypeScript already has a static type checker called Hegel. https://hegel.js.org/ (It's a stronger type system than TypeScript.)
65.
by dfabulich 7mo ago
> "Give it access to everything, even if it doesn't need it" is not the only security model. You're using stavrobot instead of OpenClaw precisely because the purpose of OpenClaw is to do everything ; a tool to do
66.
by dfabulich 7mo ago
Yes and no. You're right to notice that this is an example of a more general problem called the principal-agent problem. https://en.wikipedia.org/wiki/Principal%E2%80%93agent_proble... We have no general-purpose s
67.
by dfabulich 7mo ago
> Separate Accounts for your OpenClaw > As I have mentioned, treat OpenClaw as a separate entity. So, give it its own Gmail account, Calendar, and every integration possible. And teach it to access its own email and other accounts.
68.
by dfabulich 7mo ago
Android phones update to the latest version of Chrome for 7 years. As long as you're using browser features that are Baseline: Widely Available, you'll be using features that were working on the latest browsers in 2023; those feat
69.
by dfabulich 7mo ago
As a legitimate developer developing an app with the power to take over the phone, I think it's appropriate to ask you to verify your identity. It should be an affordable one-time verification process. This should not be required for a
70.
by dfabulich 7mo ago
For a security-sensitive permission like intercepting texts and calls, I'm not sure it makes sense for that to be anonymous at all, not even for local development, not even for students/hobbyists. Getting someone to verify their
71.
by dfabulich 7mo ago
I predict that they're going to introduce further restrictions, but I think the restrictions will only apply to certain powerful Android permissions. The use case they're trying to protect against is malware authors "coaching
72.
by dfabulich 7mo ago
A virtual filesystem makes it possible for the ESM you import to statically import other files in the virtual filesystem, which isn't possible by just dynamically importing a blob. Anything your blob module imports has to be updated to
73.
by dfabulich 7mo ago
Who killed stringref and why?
74.
by dfabulich 8mo ago
Today, the entire Web API is defined in WebIDL, a specification-only interface-definition language that inherently assumes you have access to JavaScript strings, objects, exceptions, promises, etc. None of those are available in WASM. WebAs
75.
by dfabulich 8mo ago
> unless you consider Frankenstein part of the hype cycle It absolutely is. Frankenstein is a seminal work of science-fiction horror, and the mysterious power of electricity to change everything is what made it so chilling to its rea
76.
by dfabulich 8mo ago
You have gotta stop cherrypicking. The massive influx of hyperbolic articles about how electricity will change everything started in the 19th century. It became a common theme in fiction (including classics like Frankenstein ) and became
77.
by dfabulich 8mo ago
I guess it's too late now, but I think "sufficient" is much too strong a word to use for that position, and puts Google in a position where they can disregard you because they "know" that existing measures aren&#x27
78.
by dfabulich 8mo ago
The most controversial claim in this letter is in the section that "Existing Measures Are Sufficient." In Google's announcement in Nov 2025, they articulated a pretty clear attack vector. https://android-developers
79.
by dfabulich 8mo ago
So, what's your counterproposal? Each of these tools provides real value. * Bundlers drastically improve runtime performance, but it's tricky to figure out what to bundle where and how. * Linting tools and type-safety checkers det
80.
by dfabulich 8mo ago
> For security, other than what the MCP protocol itself provides, what should be defined? The MCP protocol itself provides no security at all. The MCP specification includes no specified method of authorization, and no specified securi
81.
by dfabulich 8mo ago
> I only scan the headlines Have you scanned any headlines about ICE lately? Maybe do a quick search for news about Minnesota? (I'm pretty sure that if you'd been putting your pants on in Minnesota, you would not have written t
82.
by dfabulich 8mo ago
In 2024, Starcloud posted their plans to "solve" the cooling problem. https://starcloudinc.github.io/wp.pdf > As conduction and convection to the environment are not available in space, this means the data cen
83.
by dfabulich 8mo ago
This article includes a graph with a negative slope, claiming that AI tools are useful for beginners, but less and less useful the more coding expertise you develop. That doesn't match my experience. I think AI tools have their own ski
84.
by dfabulich 8mo ago
If you're not developing an iOS/macOS app, you can skip Xcode completely and just use the `swift` CLI, which is perfectly cromulent. (It works great on Linux and Windows.)
85.
by dfabulich 8mo ago
6-seater self-driving municipal minivans would be fantastic, too. (I would still call that a "bus", but I don't care what we call it.)
86.
by dfabulich 8mo ago
Self-driving municipal busses would be fantastic.
87.
by dfabulich 9mo ago
That's the testing matrix we have to do for iOS and Android apps today. The screen sizes don't go all the way up to ultrawide, but 13" iPad (portrait and landscape) down to 4" iPhone Mini, at every "Dynamic Type&quo
88.
Chrome will make popular scripts load faster (by picking winners)(danfabulich.medium.com)
7 points by dfabulich 9mo ago|0 comments
89.
by dfabulich 9mo ago
I think the industry settled on pretty good answers, using lots of XML-like syntax (HTML, JSX) but rarely using XML™. 1. Following Postel's law, don't reject "invalid" third-party input; instead, standardize how to inter
90.
by dfabulich 9mo ago
Yes, SwiftUI supports macOS automatically.

More ›