• 1 Post
  • 28 Comments
Joined 4Y ago
cake
Cake day: Jan 21, 2021

help-circle
rss

Probably not. Google Ads explicitly allows mismatch between displayed domain and actual domain. This is literally a supported configuration with no tricks.

The link you sent gives me a “Redirect Notice” interstitial that mitigates this attack greatly.


Allowing showing different domains than the actual click target is wildly reckless and should be punishable.

“Oh but our poor advertisers want to use click tracking and it is too hard to set up on their main domain”. Oh boo hoo, I’m sure if it is important to them they will figure it out.


I don’t know why everyone is so negative. The gameplan seems pretty clear to me.

  1. Make expensive fancy product. This is effectively a “devkit” that companies can use to start experimenting with AR software.
  2. Make lower cost product. There are now a few decent apps available and early adopters will be willing to buy it to be one the leading edge.
  3. Now there is a bigger market, leading more companies to be willing to develop apps.

Apple is hoping that this is enough to break the chicken-and-egg cycle. Enough to get a few powerful apps such that more regular consumers will be willing to buy which again increases the addressable market which makes it more attractive to companies.


My problem is that I do red, blue, green then can’t think of any more clearly visible colours.



It is also nice that these just degrade to regular thermostats. It isn’t like they are completely stopping working. It would be nice if you could swap out the API, or they keep the API running longer (how much work can maintaining it be?). But this sounds like a pretty graceful degradation.

It would be nice to have these speak some common Zigbee protocol or similar. But this isn’t the worst behaviour I have seen from companies.


I would definitely go for Irish sheep farmer. You get to live in a cute little house in a green pasture by the seaside and the sheep feed themselves. What do you need to do? Sheer them every once and a while? I’d take that over Terraform any day of the week.


TOTP code is like 5 lines. The hardest part is writing the seed to disk.


Yeah, a lot of these were lessened because the task was easy without any knowledge. I like the iPod one because the UX would be unfamiliar to someone who didn’t use it. But things like “Type {phrase} into the search box” are really just a lame way to make a reference.


Even if they do plan to sell they wouldn’t say it. If buyers think that a sale is inevitable they can offer less because they “don’t have a choice” but to sell. If they act as if their plan is to pull out the buyers need to not just make them an offer that is higher than the others, but also high enough to make them reconsider their whole position.


Probably. Wouldn’t it be good to have the truth during investigations?

However I think that we really need refine when warrantless searches can occur. Right now many searches seem to be done with very little evidence to justify them. I think this protection should apply to your mind and phone just like it applies to your house. This probably also needs to be considered at border crossings. Right now they have basically unlimited rights for searching what you have on you with little to no evidence.

We should probably also rethink about how the information is shared when there is a warrant. Right now during a trial a huge amount of personal information can be made available. Maybe if it was easier to get precise information less would be needed.



Even if the code isn’t reused adding names to sub-expressions can be very valuable. Often times I introduce new functions or variables even if they are only used once so that I can give them a descriptive name which helps the reader more quickly understand what is happening.


To be fair having a name can make things easier to read. I get that i % 2 == 0 is a common pattern and most programmers will quickly recognize what is happening. But isEven(i) is just that much easier to grok and leaves that brainpower to work on something else.

But I would never import a package for it. I would just create a local helper for something this trivial.


To be fair, this is actually reasonable. But it does look stupid on the face of it.


  1. Is available to be used in website scripting.
  2. Not quite as full of footguns as PHP (although it is close).

Nothing, all TVs are crap.

The best options are usually buying large “monitors” or digital signage. However these both tend to be more expensive than a similar TV. Monitors also often lack a remote which may be valuable for a TV and digital signage may have less input ports than you may want.

I would love if a major manufacturer made a TV that just displayed what signals I put into it.

Right now the best option still seems to buy a Roku TV and never connect it to the internet. But some features will be disabled. For example Miracast doesn’t work for some explicitable reason until you connect it to the internet. (Then again it barely works anyways, so no major loss)



737 is a very unusual file permission. But IIRC it actually works as intended. The group that owns the file can’t read it but can write and execute, everyone else can. However I suspect you can probably figure out a way to drop the relevant group?


This is actually great. I hope it makes it to Firefox Android as well.

I don’t actually have a use for it. But my partner is a huge tab group user on mobile, so I can’t switch her off of Chrome. If this launches on Firefox Android she would probably switch. It would be great for privacy and browser diversity.


I don’t think we need to set a global minimum date, but the manufacturer should have to put a date on the box. If they don’t support the device up to that date (including security updates and maintaining any required cloud services) then the consumer gets a full refund with possibly additional damages.

I think of it like the digital version of a nutrition facts table.


A[n LG] spokesman said, "our focus on customer satisfaction is paramount.”

Ok, that got a solid laugh out of me.


Gabe Newell really nailed it there. I buy tons of games on Steam. I also used to subscribe to Netflix and rent movies from Google. But now Netflix has junk and I need to subscribe to 10 services and they occasionally deleted my partner’s downloaded shows while traveling because they couldn’t validate the license. I can’t even play HD videos from any legal retailer on any of my devices other than a Chromecast as they aren’t under the media lobby’s control.

But say I was to download a movie from a torrent site. It would probably be a higher quality than streaming services would give me, I can play it offline with no concerns about license expiry and it will still be 4k on every device I choose to watch on. I could also take a screenshot and share to my friend (which may cause them to purchase that content!). It’s basically all upsides. Maybe slightly more difficult to find the content than something like Google Play rentals, but really not much and the tradeoff is the greater choice of content available.

It is reductive to say that piracy is just a service problem. There are lots of people who will try to save the money. But a lot of those people wouldn’t spend much if any money either way. They would just skip most content, or watch with friends or similar. There is a huge group of people (myself included) that would happily pay a significant amount for content if they provided a good experience. But they are too busy failing to stop piracy to bother giving a good experience.


This is why DisplayPort is the better connector. Because they don’t have their thumbs up their asses.

It always saddens me how much user pain has been caused and money wasted in implementing DRM which as far as I can tell hasn’t succeeded in preventing a single movie or TV show from being available on torrent sites.


Reminds me of birthday fields with manual drop downs. It is always faster to just type, especially for the month number which in the custom dropdowns often can’t be typed with the keyboard.

Plus there are native HTML date pickers now. Please!


At least some of their antics are actually resulting in positive change for their customers.

While the motivation is likely disingenuous as you say, the outcome sounds positive.


Or just to try it out. I would totally like to try one on for a few days.


The rant comment will be forever changed.

And dare I say improved.