efstajas

joined 1 year ago
[–] efstajas 4 points 4 months ago

Then we're very far away from the 21st century though.

[–] efstajas 6 points 4 months ago (4 children)

I don't really get this point. Of course there's a financial motive for a lot of software to work well. There are many niches of software that are competitive, so there's a very clear incentive to make your product work better than the competition.

Of course there are cases in which there's a de-facto monopoly or customers are locked in to a particular offering for whatever reason, but it's not like that applies to all software.

[–] efstajas 0 points 4 months ago

Absolutely not, time doesn't give a shit about humans, and would happily pass without any conscious observer at all anywhere in the universe.

[–] efstajas 2 points 4 months ago* (last edited 4 months ago)

Doing that would tell you nothing about whether the browser might have un-patched, known vulnerabilities elsewhere.

[–] efstajas 3 points 4 months ago* (last edited 4 months ago)

How do you know this? Of course there are lots of reasons for why they'd want to enforce minimum browser versions. But security might very well be one of them. Especially if you're a bank you probably feel bad about sending session tokens to a browser that potentially has known security vulnerabilities.

And sure, the user agent isn't a sure way to tell whether a browser is outdated, but in 95% of cases it's good enough, and people that know enough to understand the block shouldn't apply to them can bypass it easily anyway.

[–] efstajas 36 points 4 months ago (2 children)

I gotta say mRNA vaccines. It's not technically a 21st century invention, but much of the work to make them viable started in the early 2000s. The speed at which the COVID vaccine got developed and widely deployed was honestly incredible and a massive W for humanity. I remember thinking a vaccine would be years away.

[–] efstajas 9 points 4 months ago* (last edited 4 months ago) (1 children)

There's no reason your clients can't have public, world routeable IPs as well as security.

There are a lot of valid reasons, other than security, for why you wouldn't want that though. You don't necessarily want to allow any client's activity to be traceable on an individual level, nor do you want to allow people to do things like count the number of clients at a particular location. Information like that is just unnecessary to expose, even if hiding it doesn't make anything more secure per se.

[–] efstajas 12 points 4 months ago

I do think it's a problem when 100% of people seeing "made with AI" will assume the entire thing is AI-generated, even if all you did was use AI for a minor touch-up. If it's really that trigger happy right now, I think it'd make sense for it to be dialled down a bit.

[–] efstajas 24 points 4 months ago (4 children)

simply reading the browser agent isnt really security

It's not for their security, but for that of genuinely clueless people that are just running an actually outdated browser that might have known and exploitable security flaws.

[–] efstajas 18 points 4 months ago* (last edited 4 months ago) (1 children)

They sell AirTag location data? I honestly find that hard to believe. What's your source on this other than big tech bad?

[–] efstajas 7 points 4 months ago

Yeah, it's a feature on stock android. Should be in most android flavors

view more: ‹ prev next ›