Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
hda2
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
14 ms
·
91.
▲
by
hda2
4y ago
According to Google, that's changing soon (probably in an attempt to ward off pending app store regulation).
92.
▲
by
hda2
4y ago
No, just ban software stores from removing working apps for no good reason.
93.
▲
by
hda2
4y ago
This, but unironically. Science is, and has always been, about adjusting our flawed, incomplete models as new evidence emerge. We shouldn't let our ill-informed preconceptions prevent humanity from moving forward. If removing blood fro
94.
▲
by
hda2
4y ago
> but then what if you need hooks? then you'll have to somehow manually enable it on a repo-by-repo basis, which also doesn't seem very convenient. What's wrong with that? Git hooks are inherently dangerous (i.e. running a
95.
▲
by
hda2
4y ago
Nitpick: This isn't an RCE. An attacker would need 1) write access to a /local/ directory that the target will navigate to in his shell, and 2) convince the target to execute arbitrary git hooks in every directory (or parent
96.
▲
by
hda2
4y ago
Then don't run commands in PS1 that blindly execute arbitrary code in that directory. Honestly, people haven't learned a single thing from Window's autorun days.
97.
▲
by
hda2
4y ago
Wait, I thought git hooks aren't pulled from remote. Wouldn't untrusted git hooks mean that git verify-* are useless since you're already running untrusted code?
98.
▲
by
hda2
4y ago
Was this change discussed publicly prior to merge? I think this is a big mistake. Build environments use separate users for security purposes. It's insane to decrease security for everyone by requiring a single user to do everything be
99.
▲
by
hda2
5y ago
The pessimist in me is inclined to believe that this is just another empty gesture to ward off the specter of right-to-repair legislation that's looming over tech giants. Louis Rossmann made a grate video about why these programs are a
100.
▲
by
hda2
5y ago
> Why should I trust open source today? Packages are routinely hacked, political message or not. Correction: NPM packages are routinely hacked. I've been using linux packages for two decades, and not once have they been hacked (to
101.
▲
by
hda2
5y ago
> Twitter is under no obligation to retain this kind of stuff on your behalf. They declared something worked one way then silently changed how that thing works without properly announcing the change first and giving people enough time to
102.
▲
by
hda2
5y ago
My bad. I meant full proper desktop-grade support for addons and devtools like what kiwi does for chromium on android. From your comment, it seems that proper full is still disabled on both stable Firefox and Fennec. Since I'm not real
103.
▲
by
hda2
5y ago
> Well just tried it. Edge > opened Bing > "Firefox" > Click on first Firefox hit > Download. And nothing like that happened. No pop up or nothing. And I'm using a Windows 10 PC with an MS account logged in for
104.
▲
by
hda2
5y ago
If I may ask: How are you using addons on mobile? Firefox for android doesn't allow addons and F-droid Fennec doesn't seem to support them either. The only browser on android that gives me full devtools and addon support is kiwi b
105.
▲
by
hda2
5y ago
Like other abusive software, if I need to use windows, I use it in a sandbox (a VM in this case) or in its own dedicated device. Life it too short to deal with malicious vendors.
106.
▲
by
hda2
5y ago
I agree that some very small subsets aren't worthy of attention, but I don't understand how any person would willingly isolate from the views of "vast subsets of humanity". How can you be so sure you got it right? How do
107.
▲
by
hda2
5y ago
Precisely! Sure, block abrasive assholes, but blocking those who follow them or like their tweets will only serve to isolate YOU from those who might be able to present their view point in a more nuanced and respectable way. I think this ca
108.
▲
by
hda2
5y ago
I'm also one of the people who ultimately decided not to buy a switch (despite wanting to) because of nintendo's aggressive and misguided notion of ownership. There are other options that doesn't involve me betraying my princ
109.
▲
by
hda2
5y ago
> web 3 = own 1. How would this work for me as a user? Are web 3 "websites" (or whatever constitutes a service or company) not able to retain a copy of my data? Or phrased in another way, what prevents websites from also /
110.
▲
by
hda2
5y ago
> Me refusing to transact with you isn't a war crime. You refusing to transact with me isn't a war crime, but your line of thinking where normal citizen activities are similar to conscripts shooting at you can certainly lead to
111.
▲
by
hda2
5y ago
This line of thinking leads to bombing schools and hospitals. This is how we get war crimes. I'm glad most people don't think the way you do.
112.
▲
by
hda2
5y ago
> shoot at enemy conscripts But most Russians affected by these aren't shooting back. They aren't conscripts or have anything to do with the war (doubly so now that sanctions are in effect). Shooting at solders trying to hurt y
113.
▲
by
hda2
5y ago
Unless your program is a black box that doesn't interact with the rest of the world in any way, sandboxing will not be enough. People still need to mitigate the effects of malicious supply chains.
114.
▲
by
hda2
5y ago
> You can activate a developer mode and install any extensions you want to. You mean a full feature-complete devtools like what you'd find in the desktop version of firefox?! If so, then it's a life saver. The only other browse
115.
▲
by
hda2
5y ago
People got into trouble for reporting issues without any further digging. I'm not stupid enough to take the risk. Want good samaritans? Fix your laws first.
116.
▲
by
hda2
5y ago
Seeing that we as a society haven't fixed this problem yet tells me that we deserve the countless security breaches we get. I will continue to let any vulnerability I discover go unreported until the government grants immunity to those
117.
▲
by
hda2
5y ago
An enticing UVP for Arti would be that it allows rust services to easily have cheap built-in network redundancy via tor integration. This would make it trivial for administrators to set up alternative access to their services if their servi
118.
▲
by
hda2
5y ago
What's the status on allowing all addons and devtools on Brave for Android? I switched away from brave to another browser because those features were stripped out.
119.
▲
by
hda2
5y ago
Leaving what you consider Islamic imperialism aside, I'm curious to hear your thoughts on how dhimmi status compared to how jews were treated in other parts of the world at that time.
120.
▲
by
hda2
5y ago
> The “crap” you’re talking about is the idea that fairness has a place in mating. That "crap" is something you brought up on your own. We're discussing unfair discriminatory pricing, not mating.
More ›