g_p

39 ms·

331.
by g_p 5y ago
The value of manual reviews seems to be undermined by the inconsistency from the perspective of the developer. It seems like Apple's intent here is to create an ecosystem with a general rule of "don't be a prat", but is
332.
by g_p 5y ago
To back up at least the outline hypothesis of this point, this is in Apple's 10-K SEC filing: > If developers reduce their use of the Company’s platforms, including in-app purchases, then the volume of sales, and the commission that
333.
by g_p 5y ago
Fingers crossed, but I've not really had any spam issues on a few UK numbers. I have even been quite generous in giving out one (i.e. using for any online stores that insist on a phone number), and I've yet to really have any unso
334.
by g_p 5y ago
The UK and EU have both adopted effectively what you describe under PSD2 - the UK banks in particular were forced by their competition and markets regulator (CMA) to adopt open interoperable APIs. The end result, now it's available, is
335.
by g_p 5y ago
This is a really good point, and I think some countries actions are certainly (as you say) blocking innovation - Australia's moves around getting search engines to "bail out" the media is one example. Clearly an independent (
336.
by g_p 5y ago
I'd urge anyone who finds this behaviour unacceptable to contact the UK's CMA - the regulator responsible for competition. They have an ongoing investigation into Google and Apple's practices with regards to app stores (and m
337.
by g_p 5y ago
> Many of these companies create immense global value and could not possibly have gotten to where they are w/o the resources of a FAANG (think YouTube, WhatsApp) -- and if you think otherwise, where are the competitors? (I mean...th
338.
by g_p 5y ago
You absolutely should! Something bodies like the CMA often struggle to get is the "evidence of harm" which validates their concerns. Your story is a real example of a competitor or business actor being harmed in precisely the way
339.
by g_p 5y ago
Absolutely - there's few technical barriers here. I thought about the idea of supporting multiple notaries, but concluded that the current system is too reliant on the notary system for platform security, since the signed app's pe
340.
by g_p 5y ago
This is a good use case actually - Apple seeks to prevent "thought crimes" from arising around breach of third party terms of service etc, like this. Even if a user may be acting legally around copyright (overwhelming public inter
341.
by g_p 5y ago
This approach sounds a lot like that used by XPrivacy, and its successor, XPrivacy Lua, both for rooted Android with the Xposed framework. They allowed you to spoof responses to a huge range of API calls that revealed sensitive data, by hoo
342.
by g_p 5y ago
Arguably an approach that assumes there can be a hostile store operator would create a more secure and private product, as Apple would rely less on private entitlements and APIs in plists, and more on either technical measures to control ac
343.
by g_p 5y ago
To truly open up iOS, by my understanding, Apple would need to remove the requirement for notarisation of binaries. This would mean they'd also need to sort out their entitlements system, given an app can use entitlements to say it isn
344.
by g_p 5y ago
There is a risk of a tragedy of the commons situation with EV charging and other wider use of electricity for heat and as a primary source of energy -- there will, in the short and medium term, need to either be massive investment in signif
345.
by g_p 5y ago
California seems to be trying to pass (or succeeded in passing?) some new legislation which aims to get sites to honour some new version of DNT. The problem I have is that DNT is "good enough". Websites need to accept the law (opt
346.
by g_p 5y ago
Not excusing their dark patterns (which don't play nice if you block double-click at DNS level, but just as an observation, googleusercontent.com itself is actually a legitimate and valid (at least IMO) security precaution. By serving
347.
by g_p 5y ago
An interesting question as many don't understand the rules for when consent is required. I'd wager it is far fewer sites than who don't show one, or show a meaningless pop-up saying they use cookies and you agree by browsing
348.
by g_p 5y ago
What most websites don't realise is that cookies aren't only covered by GDPR, but also the ePrivacy directive (or more specifically its national implementation, since it is a directive). The ePD says consent is the only legal basi
349.
by g_p 5y ago
Most probably - metrics tend to be focused on something advertisers like to hear, like page views (paginate your artist listings for more page views!), scroll-downs (add loads of whitespace and padding and large artist photos), video watche
350.
by g_p 5y ago
I do wonder if to some extent the inherently subjective nature of UX/UI design is what keeps it forever going? Designers want to stay employed and not just become a "bring in one-time at the start" contractor, so they justify
351.
by g_p 5y ago
There's a growing base of evidence in both the US and the Netherlands (from news media websites, I believe), that targeted advertising is effectively a bubble, and didn't yield higher metrics or revenues. In fact I believe in a co
352.
by g_p 5y ago
Agreed that homomorphic is a pretty absurd leap in the article. Shared my thoughts on what it could be in another comment. With regard to FHE, I'm familiar with the concept in abstract, but this article and the comments made me wonder
353.
by g_p 5y ago
I could see 2 ways they could do something here. Not suggesting they're feasible, but just in principle: 1. Length correlation of messages - a block cipher will be padded to the nearest block, a stream cipher could (absent padding) giv
354.
by g_p 5y ago
I don't see a massive difference between a Gmail account and a phone number. One is typically provided by a company, in a competitive marketplace, with rivals available. That one is regulated and has to adhere to portability which lets
355.
by g_p 5y ago
Unfortunately this service doesn't seem to work with 365-based calendars, or anything other than Gmail/Google workspace. Otherwise jt does seem to do what's needed (albeit server-side).
356.
by g_p 5y ago
Good point - perhaps didn't make the limitations clear enough though - this would only help if the early payload gets delivered through a request made to a remote server (which inherently goes through default system DNS). That's
357.
by g_p 5y ago
This is a very good question and one to check - merely having crash logs disabled (at least for an HN audience) isn't a high information signal. I've got crash logs and as much analytics and telemetry disabled in a custom provisio
358.
by g_p 5y ago
I don't believe there are proper application level firewalls. You can however (at least if the entire OS isn't compromised at the time of the network requests) get something which is better than nothing through the private DNS API
359.
by g_p 5y ago
If you are trying to do something about it, get some people together and look at the UK's approach to this - it sounds like you could bring a lot of this to Quebec. Not saying it would be easy - these sound like deeply entrenched probl
360.
by g_p 5y ago
These licenses are in set-aside bands specifically for sharing. You're talking about 80 GBP per year for up to 10 MHz, and 80 GBP per year for each additional 10 MHz. https://www.ofcom.org.uk/manage-your-licence/ra

More ›