m0dest

29 ms·

91.
by m0dest 7y ago
I'd been trying to figure out why they required a user interaction for some of these. 5 out of 6 of these can be explained by debouncing. • "Wi-Fi" and "Bluetooth" connection triggers are extremely susceptible to bo
92.
by m0dest 7y ago
like something straight out of The East https://www.imdb.com/title/tt1869716/
93.
by m0dest 7y ago
The million dollar question: Which DRM? The fact that Apple is using third-party DRM in a web app is news. Apple TV / iTunes videos never had a web app, and presumably DRM was a big factor.
94.
by m0dest 7y ago
Overflow scrolling CSS is deprecated in iOS 13. All scrollable elements now get it by default.
95.
by m0dest 7y ago
This. I've seen a lot of naive designs where signed data is downloaded via an unsigned control channel. At the very least, they are vulnerable to replay attacks. Beyond that, it enables more selective blocking/filtering to preve
96.
by m0dest 7y ago
I took a look at Xamarin recently to see how far it had come, and the tooling is really impressive. They seem to do a great job of keeping up to date with iOS/Android SDK changes, too. But when trying to find an example of a native-fe
97.
by m0dest 7y ago
This is great. Every company should be responsible for paying market price for security vulnerabilities in their own products. If you make something that carries significant market value, you should be paying the security tax in the form of
98.
by m0dest 7y ago
> "The analog layers contain a subset of the entire collection, and include: [...] (4) The complete Vital Articles of the Wikipedia (the full English Wikipedia text is in the digital layers)." If we somehow lose Wikipedia and e
99.
by m0dest 7y ago
This means there might have been another side to this story: Zoom's change of heart might have been forced by Apple, not the public backlash. Apple: Hey, your app poses a threat to macOS security. We're going to remove your serve
100.
by m0dest 7y ago
Universal Links are better than their localhost webserver insanity, but don't really solve this. A malicious website can still redirect you to a zoom.us URL that will instantly join the meeting without confirmation. The underlying pro
101.
by m0dest 7y ago
The solution is in sight. It's called Feature Policy. https://feature-policy-demos.appspot.com/ https://developers.google.com/web/updates/2018/06/feature-po...
102.
by m0dest 7y ago
This is for tracking lost MacBooks. Apple said this at the keynote. They may expand it beyond laptops, but that's the initial scenario. (It's a great one.)
103.
by m0dest 7y ago
I used to willingly enable this and enjoyed this page. But it was recently revealed that Google shares bulk location data with law enforcement, offering the list of all devices that were in a certain area. That was the line for me. Disabled
104.
by m0dest 7y ago
For all of our sanity, please don't start producing 8-bit H.264 videos with full 0-255 range. If you have enough control over the decoder and renderer to make that hack work, you should just be producing 10-bit HEVC/AV1 video –
105.
by m0dest 8y ago
How exactly is the airport supposed to offer a WiFi network that is encrypted and open without breaking usability and compatibility? This hasn't been possible until WPA3, which has barely started rolling out.
106.
by m0dest 8y ago
Clicking is hands-down the hardest problem with this type of device. Their hardware mouse button placement is not ergonomic; the user in their video has to use a separate hand just to click! • If you allow tap-to-click, users are likely
107.
by m0dest 8y ago
This is super clever, and I hope this takes off. At the same time, I have to worry: SMTP is forever, but I'm not so sure that IMAP is forever. Email is increasingly becoming a fragmented oligopoly, and the major players are promoting t
108.
by m0dest 8y ago
I wouldn't be surprised if COI encounters issues with automated abuse detection and spam filters in those servers. When you're in an active conversation, the client is rapidly sending 1-line emails with strange headers.
109.
by m0dest 8y ago
Support for S/MIME encryption is pretty ubiquitous at this point, right? There are practical issues with CAs, but nothing insurmountable.
110.
by m0dest 8y ago
A pragmatic view: 70% of the mobile devices in Saudi Arabia run Android. Outcome 1- Apple bans Absher but Google does not. Absher usage continues. Android gains market share over time. Outcome 2- Apple and Google both ban Absher. Android us
111.
by m0dest 8y ago
Post: Tries very hard to avoid any use of the word roadmap First comment: Hey is X on the roadmap?
112.
by m0dest 8y ago
>Don't know about Chrome, but it's likely that Chrome blocks other peoples tracking in favor of Google's. citation needed
113.
by m0dest 8y ago
Because animated GIFs are already muted, autoplaying videos. If you don't give web devs an efficient way to play silent animations and videos, they resort to horrible and inefficient hacks (animated GIF, image sprites, drawing video fr
114.
by m0dest 8y ago
This concern about breaking only seems true for the Node.js side. The HTML/JS/CSS running in the web view should be pretty resilient to version upgrades; web devs are used to defensive, backward-compatible design that handles mul
115.
by m0dest 8y ago
It's great that they've simplified their story. Totally makes sense now. Texting app and AV app for consumers, texting app and AV app for teams. But this leaves a giant hole in their consumer texting product. Have they given up
116.
by m0dest 8y ago
I'd love to see this in Presto. It would make my life 1000x easier.
117.
by m0dest 8y ago
VMT = Vehicle Miles Traveled The article makes extensive use of this acronym without defining it.
118.
by m0dest 8y ago
Synced iMessage/SMS history ("Messages in the Cloud") is also E2E encrypted - unless the user enables iCloud Backup on an iOS device, which must keep a decryption key in escrow to support restore scenarios.
119.
by m0dest 8y ago
Apple Notes is different. Notes stored in iCloud (default for iOS & macOS) are stored in a fairly inaccessible local database. They cannot be exported to any format other than single notes as PDFs. The service offers no public API.
120.
by m0dest 8y ago
7 days to make sure that this isn't part of the Import flow of a competing app :D

More ›