kevinslashslash

> deny access to the App store if using the permission if you want, I don't care, as long as there is an option to do it for power user.

That's what the article is about. It's a policy change.

> The greatest scam of Google and Apple is convincing millions of developers to learn Swift and Kotlin to make apps on their stores that can be swiftly (pun intended) removed from their stores

I certainly won't defend Apple and Google's app store monopolies and control. However, Kotlin was actually a case of Google listening to the developer community. Google could have, and wanted to, push Dart (see Flutter) on Android. But the Android development community was already adopting JetBrain's Kotlin. Google listened and embraced Kotlin instead of pushing their own thing. It was not a hostile act.

The original response was essentially blaming affected users, saying it was credential stuffing. Now they changed their story. If there is any credibility to the credential stuffing story, they should ask all users that received the email change password, not just say change it out of an abundance of caution.

Obviously something changed as the emails just started going out recently. Maybe it was a recent code change introducing a bug on their end, that's fine software has bugs, but they could explain it. Maybe attackers are doing something different, which is triggering an old bug causing incorrect emails. Or maybe LastPass still doesn't really know and is just giving a potential reason, like they did earlier saying it was credential stuffing.

I'd already stopped using LastPass years ago and deleted my account when this current mess started, so they weren't really going to win me back anyway. But the (current) response to this incident leaves plenty of unanswered questions.

I got the "Someone just used your master password" email too

Time Monday, December 27, 2021 at 3:05 PM EST Location São Paulo, SP 01323, BRAZIL IP address 160.116.190.69

I haven't used LastPass since 2016 or 2017.

There is an about:config setting called privacy.resistFingerprinting that does a handful of things, I believe including canvas fingerprinting. It also disables site specific zoom though (as that could be used for fingerprinting) which I find rather annoying.

The non-nightly Firefox Preview for Android doesn't support add-ons. I imagine the title is just to emphasis that add-ons such as uBlock Origin work with this nightly.

And Apple bought NeXT which is what macOS and iOS are based off of. A purity contest of "from scratch" isn't really relevant. Google clearly put, and continues to put, a lot of serious technical work into Chrome and Android which is reflected in their success.

Well yes but also they forgot about gmail. It requires @google.com not @gmail.com

Because "red curry with tofu" is just called "red curry with tofu", not "vegan red curry with tofu". Same with chana masala, hummus and veggie sandwich, pasta marinara, etc. But a hamburger, "chicken nuggets", etc very much needs the "vegan" prefix to make it clear what it is, so you end up associating the word with the meat substitutes. But that doesn't mean American vegetarians only eat things that have the word vegan/vegetarian in the label.

Similarly, "gluten-free" is associated with breads, pastas, etc. Not rice or other non-imitation products.

I had a similar experience. A friend gave me a free shell account so I built a little battle.net chat bot in Perl. Later I branched out into AIM bots, one had jokes/fortune but also a student directory (commandeered from a school server with lax security). The other would sign on like 60 different accounts and on my command mass message someone, it'd crash some versions of AOL and just be a real annoyance for AIM users.

The Perl library was `Net::AIM::TOC` and later `Net::OSCAR`