A good deal of APIs don't pin SSL certs so MITM works for a solid amount of them.

I do really wish the era of Xbox & Halo 2 modding returned in modern times. I owe that point in time to my career choice and still believe Halo 2 was the most innovative online game of all time.

Just buying a simple tool to load game saves and you could have a soft-modded Xbox in minutes. Now consoles blow e-fuses and prevent downgrades on top of tons of other security enhancements.

Was a great read and trip back in time. Pair this with projects like Insignia launching Halo 2 support and its a great time for classic Halo 2.

I concur - I saw the React Native repo getting spammed with hundreds of similar issues/prs. So many unique usernames and such a cumbersome process to report a painfully obvious spam account. I hit the limit of open abuse reports you could have. My attempt to help was ended - I was only 4 accounts in.

Thought I would get creative and add comments to one of my existing reports of the other 10 or so spam accounts. The tickets were closed and only the main account was deleted - not the others mentioned in the ticket.

So I gave up.

Love this - I can almost imagine the convincing for other companies wasn't even needed when they realized a small binary size and comparison to competitors would net them more business. A perfect little solution for triaging issues between services and comparing solutions.

I write weekly on https://connortumbleson.com using Ghost. Started as a new years resolution I've kept just discussing what crosses my life or mind. My favorite posts:

* https://connortumbleson.com/2017/05/01/the-human-behind-the-... - being an open source maintainer

* https://connortumbleson.com/2018/02/11/stumbling-into-a-mlm-... - wandering into an MLM and researching it

* https://connortumbleson.com/2019/06/02/apktool-in-the-wild/ - finding apktool unintentional markings in a released application

> I decided to see how many commits GitHub (and git) could take before acting kind of wonky. At ~19 million commits (and counting) to master: it’s wonky.

This just doesn't seem right to me. Why? Its obvious at some point you'll harm the service. If the goal was to test it, why not try locally with git.

Was wondering when this might come out. Ghost doing it and having such success seemed like something that would spread to competitors.