Hawxy

> "By immediately I mean we send it to k-ID who said that's what they do."

People have already validated this fyi. When k-ID was first added you could send a bogus age result to discord from your local device, which probably still works. There's no evidence your facial scans leave the device.

> "By that I mean they partnered with Persona to do the actual verification."

Which isn't true, it was a UK-only experiment being run for a small subset of users, which has now been discontinued.

I get people are outraged, but this is sensationalism at best.

3.5 is approaching end of life in the next few years, you definitely should not building anything new with it. There's a lot of QoL changes in modern .NET that makes your life as a developer significantly nicer. Even for building windows services, the modern Generic Host model is orders of magnitude better than anything in .NET Framework.

> Why is there so much difference in the NuGet downloads between both libraries tho?

Because there's a boatload of older .NET apps that have been using Newtonsoft for over a decade already and aren't in a rush to switch. Anything built on .NET Framework is likely to still use Newtonsoft.

> however the 4.x stuff is definitely out of support [...] Sorry, I did not know they had actually brought non-Core ASP.NET forward into 5.0+

None of this is true, you've gotten yourself very confused. The only real change with .NET 5 was the "Core" name being dropped and the Mono runtime being merged in. .NET Framework 4.x is still around and is still fully supported for legacy applications.

This appears to be the code change: https://github.com/dotnet/aspnetcore/commit/97a86434195a82fc...

> Discord then fail to honour their end of the deal by deleting their users documents after use, and then get breached.

This wasn't documents uploaded via the automated ID checker, it was users manually sending ID documents to support in order to appeal an automated age decision.

That's a 47 day old release and the fix for the macOS issue only came out 7 days ago. Not critically out of date by any means.

Microsoft has been actively working on a new API to make third-party password managers natively integrate with Windows:

https://learn.microsoft.com/en-us/windows/apps/develop/secur... https://blogs.windows.com/windows-insider/2025/06/27/announc...

> I don't know how well-organized or efficient they are

They're 50 employees with an annual budget of $14.4 million. The cost/benefit ratio here is very good.

The PII masking aspect is very interesting and something we couldn't get when we decided on DBLab a month ago. What does the deployment model within AWS look like?

If all you care about is the forking aspect we use DBLab Engine pretty effectively: https://postgres.ai/products/dblab_engine. Gets deployed within your own infrastructure.

Tested Meilisearch recently, was a great experience, getting a multi-index search running in our frontend was very easy. Just wish they had an Australian instance, the closest is Singapore :(

.NET is a very productive stack, if you're coming from a JS background you'll find all of the batteries included that'd usually require a dozen or so NPM packages.

If you're building a Blazor app, I'd suggest sticking with its SSR project type. WASM is fine but SSR is far more productive. The hybrid mode is a recent addition, but it has too many rough edges and I'd avoid it.

- Windows 11 has provided a hardware security baseline for Microsoft, with features that require hardware support (HVCI, TPM etc) to be enabled by default going forward, stating that Windows 10 strategy of off-by-default was a failure.

- Admin accounts are a continued security problem within the Windows ecosystem, so a future version of Windows will be adding a new "Adminless" account model with linux-like just-in-time escalation. This new model intends to provide a secure middle-ground between the frustrations of a standard user account and the security risks of an Admin account. "Adminless" accounts will run as a "less privileged" user by default and prompt users with Windows Hello when an application requires escalation for a given operation, rather than permanently running the account as a standard or admin user.

- Win32 Applications will be bundled under the new Win32 App Isolation model, which provides the security benefits of UWP sandboxing & clean uninstalls without the API limitations of UWP. Developers will be able to specify what privileges an application requires, much like other application platforms. A demo was shown of Notepad++ running under this sandbox model with minimal modification.

-TPMs within the ecosystem are not in a healthy state, with telemetry telling Microsoft that many are running vulnerable firmware due to manufactures not pushing out updates, and some being inoperable due to hardware failures or other issues. Microsoft is working on its Pluton security chip to replace/augment the existing TPM ecosystem and have the ability to push out firmware updates via Windows Update.

- Software/Hardware mitigations are reaching the end of the road in terms of viability. Microsoft is now focused on eliminating classes of security bugs with extensive R&D going into the use of Memory-safe languages (Rust) in areas of the system that exploits often appear in.

> Security

There's a pretty interesting video from 2023 that goes through much of Microsoft's thoughts around Windows security. It flew under the radar unfortunately:

https://www.youtube.com/watch?v=8T6ClX-y2AE

Modern EF Core can generate SQL very close to handwritten and will aggressively warn you if you do something dumb. I wouldn't worry about it.

C# runs on practically everything these days. See Avalonia: https://avaloniaui.net/

> too much ambitions, too many people, and poor management.

The main problem in this case was SC's game director. He was around for nine years and set the scope/goals/roadmap for the game before being abruptly fired 9 months ago and replaced. Through the grape vine I've heard he never provided a long-term vision for the project internally whilst constantly promising new things to the community (ie scope creep).

The new game director, Rich, is well liked within the development team and much of the recent CitizenCon event was spent cutting back scope and providing an actual goal for SC 1.0 to release as.

The website is a fun mix of ancient Vue that was written a decade ago alongside an ongoing overhaul that has replaced the menu and most main pages with React.

That device very much predates Samsung's long-term support policy. I'm surprised it was even being sold at that point.

You get your name + address marked off the roll when you go to vote. If you get your name marked off multiple times it would indicate fraud.

> Forced voting is proof of it.

Forced voting is a net benefit, the biggest being that it forces parties to the center rather than having to say/promise stupid stuff to appeal to the fringes that have firm political positions (see: USA). Mandatory voting + preferential voting, alongside a well-run independent election commission has resulted in very high trust in our democratic process.

It's not the fault of the language, it's just the nature of infrastructure code that's been ported from terraform. With Pulumi C# you end up with multiple nested objects/dictionaries with a load of `new` object calls that just add noise to your codebase. There's also some pain points with some types being Input<T> which IDEs try to autocomplete when in reality you need to call `new T()`. Typescript permits structural typing that _feels_ a lot better to write and read within this context.

I use C# extensively for most other things I do, but this the one area where I prefer not to use it.

As much as I like it, I find C# to be too inflexible of a language for infrastructure code. I tried with Pulumi for a while but moved to TypeScript as it works so much better. Structural typing makes your life a lot easier.

No, Windows Update's Nvidia driver set is usually years out of date and rarely gets updated. It exists as an emergency fallback and doesn't push out regular updates.

As a counterpoint a lot of managed postgres providers offer automatic upgrades. Upgrading Aurora Postgres is very easy and we just schedule it in once or twice a year.

Came to the thread to mention this. I imagine the control system attached to an A/C system expected to last 10+ years should also last as long under the ACCC.

They licensed the required patents from Megapro, but the internals of the screwdriver are bespoke and higher quality than the Megapro equivalent.

The impact is Australia is immense. https://downdetector.com.au/, it's almost every major org in the country. NSW Government is completely offline.