lima

I also gave up, after 10+ years of paying for it and even developing custom plugins.

The remote dev story is bad, it won't play nice with Nix environments, and high DPI support on Linux kept breaking on every other update.

I still miss the Git client sometimes, but Jujutsu has filled the gap.

What's wrong with the Sigstore ecosystem? Why reinvent this wheel in particular?

They may still train on it if you submit feedback or flag a safeguard. The terms are a bit fuzzy on this.

Inside the JS sandbox, not the browser's outer containment sandbox.

That blocks all sorts of abuse, but a targeted exploit would be delivered on a clean domain.

It would be chained with a separate 0day sandbox escape.

uBlock Origin won't help with this kind of targeted exploit, and Firefox has a much worse security track record.

Which browser has a better security track record?

eID PKIs have very little in common with the web PKI. There's a national root of trust with strong attestation. It's a very simple trust relationship. You already trust the respective government to issue IDs.

Plenty of European countries have an eID CAs and it works fine. The PKI part is a solved problem.

Doesn't even need ZKP, the CA can just issue an attestation.

Yes, if you're unable to be polite about it, just don't comment and/or email the moderators. Your comment would have been informative and well-received without the snark.

You were right to call out the other person for trivializing the risks of tick bites, just assume good faith and be kind.

TIL about Ticktogs. Thanks!

Be careful with the dismantling, if it's a used test, you will likely end up with DNA amplicon contamination which is extremely hard to get rid of.

Lucira did that, but IMO it's quite wasteful. LAMP reactions don't need much, so it's best to make a cheap reader like Metrix or Pluslife so the tests can be less expensive.