jamesdepp

Looks like they're relying on system fonts instead of serving them over the web. It uses Segoe UI (a Windows font) by default. I tried accessing the page via Fedora and iOS and neither load the font correctly.

I am honestly not excited about the "AI" tech here--I'm excited about the battery life improvements that will come from using ARM chips. Battery life was the reason I chose an M1 laptop over the alternatives. Hopefully we can get some more competition in the space with these new chips!

Priority Continuum Onyx by any chance? Those things are absolute beasts. Fantastic commuter bikes.

Some tests might have side effects. Probably not a great idea to test the function “bill customer” on a prod deployment. That’s why containers for testing is great—it’s easy to spin up an environment that can be messed around with without consequences (even if things go wrong or your tests have side effects).

I recently rewrote a website/small backend API for a non-profit organization. I could've gone with a serverless architecture for our forms handling API and reduced spending to nearly the free tier, but I had no good way to protect against a scenario like this. There was just not good enough documentation about how to completely cut off spending in the scenario of an attack, and I wasn't comfortable leaving the organization open to a cost attack like this.

So we're using Github Pages for static hosting and a $5 box from OVH now. Unmetered bandwidth, plenty resources for our purposes. Cheap enough, and we will never, EVER, have to worry about an attack like this. Well worth it imo.

Imo, serverless is great for internal jobs where you can control spending. For public facing things, you have to be a lot more careful.

I feel like this could be a part of a weird plan to trap Apple into an antitrust lawsuit about iMessage. Beeper's CEO has been claiming that the existence of Beeper Mini actually improves iPhone users' experiences. He could argue that Apple shutting off access is not meant to improve Apple users' experiences, but rather, to keep people off of Android.

Honestly, I have mixed feelings. I REALLY think that iMessage needs to be opened up, but this was not the way to do it. Really hoping the EU swoops in and saves the day here.

pypush, the open source project behind today’s developments in the iMessage reversing news, is licensed under MongoDB’s Server Side Public License and owned by Beeper (JJTech sold the rights to Beeper, per discord). Although this library is fantastic, I do think that the extremely copyleft license could have implications on where we see this used.

I could get behind this, but only if my kids had open access to the internet via some other device. Phones are addicting and can be harmful (esp to younger teens), but it is crucial that young people have access to the resources the web can offer. It opens up opportunities and allows teens to find support resources when their family/school isn’t enough (LGBTQ+ kids in states like Florida come to mind).

The biggest reason I have found success in my career field is because I had such a head start on those I went to college with. I got into software development in middle school, and was in frequent communication with other people building software (who were significantly older than me). Most parents probably would have shut this down. My parents let this activity continue, and it turned into my career. The relationships I built then and the lessons I learned have been invaluable. This experience was only possible because I had unrestricted access to the web. My kids, once they are mature enough to handle that responsibility, will enjoy those same freedoms.

Agreed. If mobile operating systems allow password managers to support Passkeys, and password managers implement the functionality, then I will absolutely switch.

For every platform/ecosystem you are using (Chrome, Apple iCloud), you had to create a new passkey. For people using multiple different devices and platforms, this is a headache. I want to sign up once and be done with it.

Until there is a viable way to sync passkeys between all devices, all platforms, and all browsers, I will be happily sticking to my passwords. The security benefits provided by passkeys are not enough to offset the ecosystem lock-in that passkeys cause.

Right? Nuclear power is some of the cleanest energy we have. With research developments, strong safety regulations, and a plan for storing the waste it produces, nuclear is a much better option than continuing to rely on fossil fuels.

What poor timing, too. With the war in Ukraine going on, now is not the time to be increasing your independence on fossil fuels, even if temporarily.

I hope that Matrix will be for IM what email has become. The ability to control your own data and use a client of your choice is incredibly valuable. Surely, there are costs and labor associated with running a Matrix homeserver for your organization, but for organizations that can support it, this is truly becoming a viable alternative to Slack.

I feel like this is a major design flaw in the package managers being used. If people have to squat package names to mitigate the chances of a dependency confusion attack, then the package manager/package repository needs to find a better solution.

I think this is something GoLang does a great job at. To use a package, you have to specify the exact URL of the repo. This mitigates the risk of dependency confusion since an attacker would need control over the domain to upload a conflicting package.