kalleboo

> I haven't seen anything like it

I remember using the fluxbox wm like this back on the university Sun machines

The excuse is usually that the Android face unlocks are very insecure and easy to trick since they just use a regular camera instead of the IR dot projector. I don't know how true this actually is though.

Same excuse behind not having under-screen fingerprint scanners - supposedly they're a lot easier to trick.

Then why do they still take so long?

LLM should still be able to catch a misleading permission message though.

For the iOS permissions I know of (Camera, etc), the message comes from the Info.Plist in the .app bundle, not from code.

> I purchased a static IPv4 IP, and they made the CGNAT IP static.

Thank you, I needed a good laugh today, that is amazing!

> We tariffed them (Europe will too) because China subsidizes them

EU has been tariffing Chinese cars since 2024. They determined the unfair government subsidy to be between 17%-35% depending on the manufacturer. Starting this year they added an option for a price floor instead.

> The app developer should not get to provide the message text for a prompt like that.

In App Store apps, where these messages get human review, it could more safely be allowed.

There were out-of-the-box GUI experiences, like Apple's "Back to my Mac", that never worked right because of all the issues with poking through NAT caused by IPv4.

Relying on peer-to-peer relays also doesn't scale, which is why Skype dropped its supernode architecture.

You could configure your web server to only allow one request per worker, which means the corrupted memory can not get used by the attacker. Not great for performance, obviously.