Kind of... the fact that they have the actual data behind a "soft" paywall (waiting times and terribly slow transfers otherwise) makes me a bit skeptic of their "goodwill".
Bandwidth isn’t free of charge
Readit Newsmattl commented on Anna's Archive: An Update from the Team annas-archive.org/blog/an... · Posted by u/jerheinze
mattl commented on Web apps in a single, portable, self-updating, vanilla HTML file hyperclay.com/... · Posted by u/pil0u
I'm starting to see more and more sites want to block them too.
You have to use Discord to login?
mattl commented on Apple's Browser Engine Ban Persists, Even Under the DMA open-web-advocacy.org/blo... · Posted by u/yashghelani
> default app" for "navigation". > iOS 18.5.
Where is that setting?
Settings | Apps | Default Apps has no option for Navigation (iPhone SE 18.5, in New Zealand). Maybe EU thing?
https://support.apple.com/en-us/121430
* Navigation (in some countries and regions1) –– choose another app instead of the Apple Maps app to use when opening links for a location
I don't have this option in the US.
IRC/Mastodon
Firefox is still there, but Mozilla is adding AI slop to it too. I’d love to see an extension to disable all that stuff, or ideally get rid of it and make it an extension
mattl commented on '123456' password exposed chats for 64M McDonald's job applicants bleepingcomputer.com/news... · Posted by u/nan60
Incredible! That’s the combination to my matched luggage!
Check your luggage for fries
mattl commented on '123456' password exposed chats for 64M McDonald's job applicants bleepingcomputer.com/news... · Posted by u/nan60
Using numeric IDs on an outward facing object is, for the most part, totally fine. It's a serious tradeoff to ditch the nice properties of numerical IDs and the legibility they provide in order to cargo-cult a "we must reveal nothing" approach, as you would here via UUID. It also misses the point of the actual security lesson: no matter the identifier, you need to be applying access controls to your data. Even if your UUIDs were generated via 100% airtight cryptographically random sources, you have to, y'know, communicate with them. That means you'll probably leak them, expose them, or other folks will collect them (often incidentally via things like system logs). If all it takes to gain access to a thing is knowing the identifier of that thing, you've blown it in a huge way. Don't stress about the theoretical benefits of something like an opaque identifier and then completely neglect the necessary real world access control.
Can you tell I've been scarred by discussing designs with folks who focus on the "visible" problems without thinking about the fundamental question of "is this secure"?
Yes it makes very little difference if I can see all your public published blog posts on a WordPress site by iterating the number.