varenc

54 ms·

871.
by varenc 5y ago
Fair point! That does seem like a key difference. But I still wouldn't be surprised if all tech industry legal/compliance teams have been spooked by this. Also under COPPA no one under 13 can make an online account for anything, r
872.
by varenc 5y ago
I've been seeing age checks like this more and more. Recently the FTC came down hard[0] on Kurbo (aka Weight Watchers) for not doing enough/anything to stop children under 13 (COPPA) from making accounts. Since they're not co
873.
by varenc 5y ago
There's an active Discord with 700+ Warp users. I reported issues on it and immediately got helpful replies. They're talking to lots of real-world users. My take is that the hacker news crowd is not the target market for Warp. I
874.
by varenc 5y ago
Strongly agree with this! I have the now discontinued eGPU Pro and it rocks. Is normally completely silent and it functions as an actual thunderbolt dock. It’s one of the few eGGUa with a secondary thunderbolt port you can use with a Thun
875.
by varenc 5y ago
hah I see we both discovered the same lists! Did you get these from traffic interception too? I didn't find any hits for these on Google but not surprised you beat me to it of course. I'm a long time fan of your apple-hacking blog
876.
by varenc 5y ago
Hah I appreciate your accuracy. I got 250k by running this: $ curl https://cdn.smoot.apple.com/static/autofill_tld_whitelist_url | jq | wc -l 250004 And then I naively assumed with the extra JSON brackets the
877.
by varenc 5y ago
For context, see my buried comment explaining how I found this here: https://news.ycombinator.com/item?id=30906482 In summary: I don't have any indication it's in current use. I saw this URL in intercepted traffic
878.
by varenc 5y ago
My guess actually is that iOS/Apple no longer uses this particular list. I found this by intercepting traffic on an older jailbroken iOS 13 device. Given how old some of the domains in the list are, I'd guess that iOS 15 no longer
879.
by varenc 5y ago
OP here. I found this URL by intercepting traffic on my older jailbroken iOS device. It's possible that a more recent version of iOS doesn't use it. This url, among others, was returned in some configuration-fetching call to http
880.
Apple's whitelist of the 250k auto-completable domains in iOS(cdn.smoot.apple.com)
373 points by varenc 5y ago|172 comments
881.
by varenc 5y ago
Here's a link to the actual complaint: https://www.courtlistener.com/docket/63197557/ubiquiti-inc-v... Ubiquiti is asking for: WHEREFORE, Plaintiff Ubiquiti Inc. demands judgment against Defendant Brian
882.
by varenc 5y ago
MIT has a ~95% graduation rate, so most students really do graduate. And for the 5% that don't it's unclear how many dropped out due to the workload vs dropped out to found a company, etc. MIT has tons of internal resources to hel
883.
by varenc 5y ago
That’s likely because the Studio Display has Apple’s proprietary “Spatial Audio” support.
884.
by varenc 5y ago
For example, the California State Parks website complied with this. Here's an example of a PDF that needs to be requested: https://www.parks.ca.gov/pages/21299/files/angel_island_gp_a... It seems silly,
885.
by varenc 5y ago
This macOS dictionary app (Dictionary.app) also uses webviews. This will come as no surprise since it does things like in-line Wikipedia results.
886.
by varenc 5y ago
Wow I’m glad to meet someone else that does this as well! Next iOS device I get I’m going to set it up as “managed” from the start so I’ll have access to the more powerful security configuration profile settings. It’s telling that these day
887.
by varenc 5y ago
re: AirPlay speakers, if you really never want to use AirPlay you can apply a configuration profile that disables it entirely. These are the profiles that allow IT departments to enforce all sorts of policies on employee computers. You coul
888.
by varenc 5y ago
> it's still sitting below user space and can do whatever it wants to the system. I don't know much about the Endpoint Security extension, but for Apple's network filtering extension they actually DO address this! The code
889.
by varenc 5y ago
> All AV somehow have to hook into low level system calls so can’t really avoid the kernel driver. While I don’t doubt this true for Windows, on macOS Apple is phasing out kernel modules with APIs that allow software to hook into those l
890.
by varenc 5y ago
I think it's fair to say mass adoption of automobiles was viewed progressively in that time period. Certainly not by all, but by many. It was a new disruptive technology that allowed you to move people and things in a cost efficient wa
891.
by varenc 5y ago
> The only thing that could be done, in principle, by ICANN and EU/US service providers is to block out all content coming in or out of Russia I don't think this is true. The root DNS servers ICANN runs could stop handling requ
892.
by varenc 5y ago
The proposal sent to ICANN isn't about just cutting off Russia's internet from the outside world. It would have disrupted most all internal Russian government-approved usage of the internet as well. If the Russian gov preferred to
893.
by varenc 5y ago
I think it’s a limitation on all extensions applied by Chrome/Firefox. My guess is to stop extensions from making you force install more extensions or something... (Also what’s up Andrew! YC S09 represent :wave_emoji:)
894.
by varenc 5y ago
On Chrome you can go into extension settings and adjust permissions so SingleFile only has permissions “on click”. Then it won’t/can't inject that little JS snippet into a page until you actually want to use the extension. The onl
895.
by varenc 5y ago
I went and filed this with Apple, radar #9930566, just referencing the blog post. I wouldn't assume the engineering team responsible for this code at Apple is reacting to HN posts so I figure it's still worth reporting. Nows a goo
896.
by varenc 5y ago
I like the `psgrep` tool which behaves much more like greping ps that pgrep does. And `psgrep` is actually just a bash script itself.
897.
by varenc 5y ago
> ... put an AirTag in your car After your car is stolen and the AirTag is separated from your phone, you have ~12 hours before it starts randomly beeping every time it detects motion, alerting the thief to its presence. Or if the thief
898.
by varenc 5y ago
Speaking of United shipping apps with symbols intact... Last week I came across some unminified JS on United's website[0]. I love the warning it starts with: /* Minification failed. Returning unminified contents. (5218,49-
899.
by varenc 5y ago
That's also how I read it, which astounds me. Would be technically impressive if it worked like that. And extra vindictive since even if they don't allow rooted devices to play DRM'd video, there's no good reason why the
900.
by varenc 5y ago
> the battle is partly won in several U.S. cities (including NYC & SF) which passed laws to mandate acceptance of cash In SF, despite the laws, many businesses openly had a no-cash policy once the pandemic started. "Sorry, Cred

More ›