rsa25519

Note that a sandbox escape is often possible via TIOCSTI (CVE-2017-5226) [0] unless a special flag (--new-session) is used.

Bubblewrap is aware of this, yet their documentation gives no indication that this flag is necessary to produce a secure sandbox. In --help, the documentation of --new-session is simply "Create a new terminal session," which severely understates its importance.

It's frustrating to have such a useful tool be knowingly easy to misuse.

[0]: https://github.com/containers/bubblewrap/issues/142

Note that the wonderful Go type system interprets time.Second * time.Second as 277777h46m40s with the type time.Second (not sec^2)

This is an unfair comparison because covid death reporting lags far behind other data

> Hopefully they also improve the UX

They're making great progress! There's still more work to do, but I've been very impressed by the improvements made by the Element team over the past year, ranging from many small details to large usability features like the UI for spaces as an easier way to organize communities

You're describing entrapment

This issue is that HN didn't include the trailing exclamation mark as part of the link

In that case, Safari should make it clear that its users should not expect web application to work well. OP proposes helping Safari do that by displaying informational banners when appropriate.

Also try searching "journalist in blue" via the default (not image) article search on Bing. It lacks the relevant results found on Google or DuckDuckGo.

> In this: "the host will open the door at random and in this example it happen to have a goat" vs "the host will never open a door with a car behind it".)

If the host opens a door with a goat, then it doesn't matter whether or not it was intentional.

You can be partially in :-)

I highly recommend using the Nix package manager alongside whatever you're comfortable with. That way you can `nix shell -p foobar` when you need a package quickly or fallback to brew/apt/etc if you're not yet comfortable addressing the situation in Nix.

> The people who do well on the test are given the job on a probationary basis.

This sounds terrible. Not everyone can take tests well (even if they strongly understand the content), and few people can afford to accept a job that's probationary.

> No more cookie banners or ads.

I'm not sure how I feel about making money off ad-blocking.

The Discord and Slack bridges use the respective platforms' official APIs, fwiw

> Linux distributions don't depend on running random code from GitHub repositories like Homebrew does, it has package repositories.

Is the Homebrew github repo not a package repository?

> The only meaningful act of protest in the 21st century is to permanently delete your digital accounts?

Surely this is an exaggeration?

I'd like to quote more (it feels gross to seemingly quote-snipe) but the site blocks copy-paste on mobile, making productive discussion of its contents needlessly difficult.

> They can also stop screenshots being taken of exchanges if they are using an Android phone.

This is terribly misleading. A Signal user can disable screenshots being taken on their own device (something like "disable screenshots on my phone when I'm using this app") but Signal makes no attempt to apply this policy to other people in a conversation. It's not like Snapchat, which attempt to block/track screenshots taken by any party.

Good thing that Android allows side-loading apps

> This issues goes way back: imagine if after executing a program on CLI instead of closing it gave you a fake shell, where you eventually went about your day until you had to type your password into sudo..

As a fun fact, even worse might be a program maliciously aliasing sudo in ~/.profile

> Hm, you also need to consider that 5 trucks can have a much higher combined output than the 1 truck 5 times as high.

How so?

Yep. And I assume you could use Time.IsZero() for Go https://stackoverflow.com/a/36234533

Fortunately `published_at == null` is much more intuitive that using `!!` to typecast.

> To quote the author: "it depends"

Where do you see this? To quote the article I'm reading: "it doesn’t really depend"

> "The #1 most difficult [reason] to leave the Apple universe app is iMessage ... iMessage amounts to serious lock-in,” was how one unnamed former Apple employee put it in an email in 2016, prompting Schiller to respond that, “moving iMessage to Android will hurt us more than help us, this email illustrates why.”

> “iMessage on Android would simply serve to remove [an] obstacle to iPhone families giving their kids Android phones,” was Federighi’s concern according to the Epic filing. Although workarounds to using iMessage on Android have emerged over the years, none have been particularly convenient or reliable.

https://www.theverge.com/2021/4/9/22375128/apple-imessage-an...

I wish they were that innocent.

> iMessage on Android would simply serve to remove [an] obstacle to iPhone families giving their kids Android phones

https://www.theverge.com/2021/4/9/22375128/apple-imessage-an...

Hovering on the achievement shows which contribution(s) were the cause

iMessage intentionally attaches social inclusion to ability to buy premium hardware. I think that's wrong.

> Maybe album cover art is just less meaningful in the year 2021

This might be too broad of a generalization. I find a lot of cover art quite interesting, and I hope it remains prominent. I think a (dis)like for cover art might just be a personal preference.

From the book:

> In the English++ project a foreign language is naturally English and a specific purpose is the field of computer science.

I actually might spend time time reading this. I'm a native English speaker, but it covers a lot of computer at a high level in a way that's very easy to understand.

And, we're only going to hear of events that were seen. Even if the locations of events were random, we simply would be more capable of spotting ones that happen in that area

> it fails even on HN!

Huh, weird, it works fine for me in Firefox.