jabbany

65 ms·

391.
by jabbany 5y ago
Scanning is not allowed anyways just from standard cross-origin protections. If intranet services do not send CORS allow headers, a remote site (which will certainly be from a different origin) cannot get any information as to whether certa
392.
by jabbany 5y ago
IMO Gnome's window management and desktop stuff is just fine. But that unified toolbar-menubar-titlebar design for apps? That's just atrocious... There's no rhyme or reason for what is placed where. Some things become "b
393.
by jabbany 5y ago
It's not like they're sending up a new satellite just to blow up... From Wikipedia: > Kosmos 1408 was a Soviet Union ELINT (Electronic and Signals Intelligence) satellite launched into low Earth orbit on 16 September 1982. It r
394.
by jabbany 5y ago
I mean they care about it insofar as wanting to be either dominant (or at least be a power to reckon with) or making sure nobody can use it.
395.
by jabbany 5y ago
I do agree with this. It's too much mollycoddling from browsers and in fact dis-incentivizes manufacturers to fix the real CSRF vulnerabilities... Heaven forbid if someone joins your LAN with a device running an old/weird browser
396.
by jabbany 5y ago
IoT onboarding has always been less than ideal. I've personally never been of fan of the "spray (local) and pray" approach as it always felt _super_ sketchy... (IIRC, Magicjack does something like that to register your device
397.
by jabbany 5y ago
Doesn't seem related though, since if you ran a public server from home, that server would appear through your public facing "Internet" IP rather than its intranet address. It might make some homelab setups slightly more anno
398.
by jabbany 5y ago
This seems mostly benign, basically changing the default cross-boundary behavior from "allow" to "deny" but also providing a way for intranet devices to exclude themselves. On the other hand I'm also not a huge fan
399.
by jabbany 5y ago
It's not that hard though given we're working with HTTP... Since they control the network (DNS and all) couldn't they just wrap non-compliant devices behind a forwarding proxy that adds those headers? Like rather than resolve
400.
by jabbany 5y ago
This never really got "replaced" though. All the new connectors are for digital connections. There's not much new for analog, which is probably the way it should be.
401.
by jabbany 5y ago
Safari itself is not open source so it's unclear how much/little they have modified WebKit and the JavaScript engine. Given that this bug involves JS (events not firing), and MacOS doing its own thing with JS, it's entirely p
402.
by jabbany 5y ago
IIRC Rust has some compiler-level defenses against these glyph based attacks (ref: https://twitter.com/skyslasher11/status/1152824207555698688 ) Perhaps one could do something similar in JS as well. Like have a con
403.
by jabbany 5y ago
But they have not, so "Apple has a fairly long history of keeping cross-platform ports alive even if they aren't publicly available" means a load of nothing at the moment. I get that Apple are not trying to make a Chrome&#x2F
404.
by jabbany 5y ago
Yeah. I don't miss doing web dev in the Win XP days when one had to test everything on IE, Chrome, Safari, Opera, Firefox, etc. but at least there were options back then and things legit ran with different HTML and JS engines. Now it&#
405.
by jabbany 5y ago
Hmm, so I'm assuming from this post that this same Safari CSS bug is present in GNOME Web too? 'Cause if it isn't then it's not really a good proxy for testing Safari behavior in this context...
406.
by jabbany 5y ago
Exactly, hence the implication should be that _Safari_ is the IE6 of 2021 rather than, according to the OP, Chrome.
407.
by jabbany 5y ago
I mean isn't it a lot more manageable than things like PCIe that support DMA. Given the seemingly extensive support for doing emulated USB passthrough/redirection to VMs, I'm assuming people have looked into the security impl
408.
by jabbany 5y ago
There's nothing wrong with the browser being the next generation cross-platform execution environment. All the older options for this (Java, Flash etc.) sucked... I would like to see a strong competitor to Chrome someday though... - Fi
409.
by jabbany 5y ago
A recommendation predicated with "Get a Mac first for development work"? Last I checked Safari unlike Firefox and Chrome is not cross platform. Small aside: Webkit browsers used to have problems with CSS (especially things involvi
410.
by jabbany 5y ago
To be fair, the last two are more from a bad design choice by *nix in general to base everything on passing around unstructured text and hoping each tool's ad-hoc schema won't change.
411.
by jabbany 5y ago
Actually I think it's mostly regulatory pressure. Chinese market gacha/lootbox games are required by law to have pity mechanics, must disclose all drop rates, and even provide you with your pull history as well as purchase history
412.
by jabbany 5y ago
Well that sounds like something management would be more than willing to accommodate... That is, only paying you for those 2h a day instead of 8... I think the more important thing is that the remaining "buffering" time is still n
413.
by jabbany 5y ago
Copyright is only with respect to the code. What's being done here is changes to how the project is managed. Basically inserting an upper management over the heads of existing maintainers. AFAIK, this right was not given (or at least t
414.
by jabbany 5y ago
With the right work permit, I don't see why not?
415.
by jabbany 5y ago
Interface, maybe, but the secret sauce (if it can even be called that) for TikTok is the content discovery (recommendation) system. (Vine used a traditional friend-follower SNS design, and anecdotally all of my interactions were from off-pl
416.
by jabbany 5y ago
Sure, but this technology has only been spreading in recent years. S. Korea blocks adult websites behind an ID check. India has also been shutting down Internet access around protests and the such. Even the FBI has seized domains by requiri
417.
by jabbany 5y ago
Please do tell what other means there are? There is no difference between suppressing arbitrary content and suppressing illegal content. It doesn't matter if the decision to block comes from a dictator or the people's vote. The te
418.
by jabbany 5y ago
No? Even in a democracy laws need to be enforced and that has been really hard if a company violating local laws is not based locally. It's the same problem why Russian ransomeware groups can roam free and piracy is hard to deal with o
419.
by jabbany 5y ago
Actually, there's multiple problems with this: - Just because you can get a tourist visa "on landing" does not mean you can work in the country (even remotely), so unless you apply for proper work visas everywhere you go you&
420.
by jabbany 5y ago
This is a rational response if you look at it from a governance perspective. Pre-GFW, the government was basically in a position where if there was anything illegal online (not just political stuff, but everything from gambling to piracy) t

More ›