But why this one?
>I don't force you to use SSL/TLS to connect here. Use it if you want, but if you can't, hey, that's fine, too.
What is wrong with redirecting 80 to 443 in today's world?
Security wise, I know that something innocuous like a personal blog is not very sensitive, so encrypting that traffic is not that important. But as a matter of security policy, why not just encrypt everything? Once upon a time you might have cared about the extra CPU load from TLS, but nowadays it seems trivial. Encrypting everything arguably helps protect the secure stuff too, as it widens the attacker's search space.
These days, browser are moving towards treating HTTP as a bug and throw up annoying propaganda warnings about it. Just redirecting seems like the less annoying option.
Also, something I often see non-technical people fall victim to is that if your clock is off, the entirety of the secure web is inaccessible to you. Why should a blog (as opposed to say online banking) break for this reason?
Spruce lets users control their data across the web. We are creating the world’s best open source software for user-centric digital identity. Instead of users logging into platforms, we think platforms should request to access data vaults controlled by users.
We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO/IEC, IETF, and OpenID), and custom backend libraries.
Select roles:
Senior Product Manager: Help drive the growth of a new product family which empowers government agencies and enterprises to manage the entire lifecycle of digital credentials for a wide range of use cases. This role will be responsible for developing product vision, roadmap, user stories, timelines, and implementation strategy.
Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.
See all roles here: https://jobs.lever.co/sprucesystems/
Hi, my name is Marius and I am the CTO at AREO (https://www.goareo.com - placeholder because we are still in stealth).
We are a young but quickly growing software startup based in Germany that specialises in the development of Augmented Reality (AR) solutions for supermarkets and grocery retail stores.
Our B2B SaaS AR platform helps store employees by providing real-time access to inventory, product information, and POIs. The founders (me and Eike) have more than 10 years of experience with grocery retail and startups.
We are currently looking for seasoned Android and Rails developers with at least 6 years of experience, a knack for crafting clear, well-documented code, a passion for comprehensive testing and an appreciation for beautifully designed products.
For the mobile devs familiarity with AR apps, AR frameworks (AR Foundation, ARCore, ARKit) and AR glasses is a big plus. For both roles being able to understand at least a bit of German would come in handy but is not a must-have :) However, you have to be located in the EU.
Backend Stack: Ruby / Rails (7.x), StimulusJS / Hotwire / Turbo, AlpineJS, Redis, Postgres, Docker, Sentry, DigitalOcean, OpenAPI
Mobile Stack: Kotlin, Room, Jetpack Compose, ARCore, Hilt
Perks: Work when and where you are most productive, potential for leadership role, sizeable equity in a rapidly growing company, work with cutting-edge AR tech.
Apply here: marius[here comes the at sign]goareo.com and mention “HN” in the subject.
We’ll respond to every application.
!!! We are not interested in working with agencies or recruiters !!!
Don't want to spoil anything, but locked down phone doesn't always mean it's a brick :-)
My thinking was, all I do is browse HN, hn.algolia, and lobsters. Those should work, right? Well lobsters works perfectly, including collapsing comments.
HN loses the ability to collapse comments. But algolia is the worst. Not only does it require JS, being an SPA, but it refuses to work until you enable cookies! My theory is that it reads the settings (popular, 24-hour) from a cookie, and plain dies if they're not there.
On another note, and to a pleasant surprise, a lot of the web works perfectly fine, and feels a lot snappier, including even google search. And many of the annoying cookie and paywall popups never appear, since they appear to be implemented in JS.
So yes, if you haven't tried it, I recommend you do. You can always whitelist sites you trust or really need to use.
How is this not the case for Latvia and Lithuania (not to mention Estonia), which are both NATO members directly bordering Russia, and in fact separating them from their Kaliningrad exclave? On the other hand, if those countries _are_ an existential threat to Russia, then why is Russia "starting" with Ukraine?
More to the point, who gets to decide what makes for an existential threat? Doesn't "existential" mean "at risk of destruction from"? Does anybody really suppose that a Ukraine that is pro-west, or even belongs to NATO, poses a direct threat of invading/destroying Russia? This sort of language frustrates me, because it seems to carry more heat than light. To your specific hypothetical, I would not welcome a pro-Russia Mexico, but I would not consider it to be an existential threat to the US for precisely the reasons I suggest here - a pro-Russia Mexico does not mean a Mexico that is even somewhat likely to invade the US.
You're writing about desktop environments. Show pics.