> You do realize that a full kernel vulnerability like this allows you to feed falsified information to SafetyNet?
Are you sure that's true? The whole reason why modern Safetynet/Play Integrity uses HSM data where possible is that you can't spoof that with root (without a microcode bug). It does not trust the running OS by design
I just tried GrapheneOS's https://attestation.app/ on a stock Pixel, and all of the OS version info shows in the "hardware verified" section
And, as usual, "risk/threat to democracy" is used to mean "support for parties I don't like"
It wasn't long ago that the Twitter shoe was on the other foot, and many of those complaining now were quite happy to endorse the right of private companies to promote/suppress speech at will (with no hint of irony regarding their alleged ideological views on private companies)
> Interesting provocative article, I bet it will be praised on some Microsoft sponsored conference.
"Win32 is the only stable Linux desktop API" has been a common observation in the Linux community for years. I'm not sure why you're acting like it's a Microsoft-sponsored smear
Microsoft may have indeed won first place via dirty anticompetitive tricks, but Linux/*nix would need a similarly stable API first in order to have won at all. And obviously plenty of companies and initiatives have tried (from Red Hat to Valve), and yet progress has still been glacial
Also nobody's saying it's a particularly good API, but it is stable. As "Worse is better" famously observed, the technical elegance of a standard has barely any effect on its adoption, versus more boring social and commercial factors
This headline is a good example of why title case should be considered harmful. It took me several times to parse correctly, since I initially read "Application" and/or "Notes" as proper nouns
> If I had sent out an email with even a quarter of the typos they had, I probably would've lost my job.
I don't know their life, and they may be right, but I think they may well just be imagining it. I also went from excessive formality to short conversational tone as I became more experienced. But it wasn't due to any promotions, but because I realized nobody had ever cared
I mean this is a standard cliché even in fictional works: the young new worker who keeps falling over themselves to perform what they think is necessary formality, only to be shown that they can just chill out and act like a human
A wedding is a social event with friends and family. I am going there to see the people. A flight is a functional form of transport which is shared out of necessity. I am going there to pay as little mind to the other people as possible
How well does Zulip protect users' privacy against snooping admins? I.e., does it have E2EE DMs? Unfortunately, this is a legitimate threat to be concerned about
> It's worth pointing out that in France and the UK, the authorities involved are arms length independent of the political bodies
As someone who has lived in (and followed current affairs) in both of these countries, this is a very idealistic and naïve view. There can be a big gap between theory and practice
> There are statutory instruments (in France, constitutional clauses), that determine the independence of these authorities.
> They are tasked - and held to account by respective legislative bodies -
It's worth nothing here that the UK doesn't have separation of powers or a supreme court (in the US sense)
> Patreon gives creators the option to either increase their prices in the iOS app only, or absorb the fee themselves, keeping prices the same across platforms.
I'm curious what percentage of creators chose which
Yes. It's improved now, but the mobile web was bad for a long time. The early days of Android experienced a "web-first" ecosystem by force, as lazy businesses just threw a webview around their site, and it was awful
It's not users who are pushing this. It started off with just superfluous but optional apps of websites. Now every year I find there is something I used to be able to do, which I now must own a smartphone to do. And it's not just getting discounts at coffee chains, it's increasingly stuff like accessing healthcare plan benefits, or verifying my identity for banking
A few sites throw up a blocking screen to download the app, which disappears once you spoof a desktop UA. But the big problem is businesses now having no web interface at all
On the contrary, this thread seems to have a large number of users who can't handle criticism of Wikipedia without responding with unfounded assumptions and insinuations about the critic
That's true, but the same may already be true of your browser's cookie file. I believe Chrome on MacOS and Windows (unsure about Linux) now does use OS features to prevent it being read from other executables, but Firefox doesn't (yet)
But protecting specific directories is just whack-a-mole. The real fix is to properly sandbox code - an access whitelist rather than endlessly updating a patchy blacklist
I believe Quartz is the go-to solution for this. It's not part of Spring but it offers a similar annotation-driven interface, but with distributed locking via a database