Hacker News .hnnew | past | comments | ask | show | jobs | submit | rpdillon's commentslogin

Nah, I suspect any app that's loading arbitrary JS from somebody's random GitHub page would get called out for that behavior. We're getting supply chain attacks daily.

The dependencies weren't vendored, meaning their behavior can change at any time if a malicious actor gains control of that third-party repo.

This is bad for security.


Yes, I agree. And it's sadly, as we can see, still fairly standard practice to ignore it.

If you're thinking about a period without power after a disaster, you're supposed to have a gallon of clean water per person per day, along with food that can be prepared in that environment. At least according to https://www.ready.gov/kit.

For me, it made a ton of sense to buy a couple of boxes of MREs and some Mountain House meals for this. They last decades, and they double as camping food.



The statistic isn't related to thrown weapons. It's how quickly you can close the space between you and your adversary, as well as how much bearing drift you can create as you do so.

I'm glad you're making this point. It's something that only people trained in combat would know, and it's very non-intuitive. But it has to do with reaction times, how quickly the person wielding the gun can pull the trigger, and how quickly the person wielding the knife can move. That 21 feet can close blindingly fast.

Well, Google is keeping the fees and the ID requirements for devs, while also vastly shrinking the population that will be willing to get permission to sideload from Google, decimating much of F-Droid's reach. They are basically attacking freedom on both sides, clamping down and extracting on the supply side, and creating friction and confusion on the demand side.

I'm extremely worried for the future of open source on mobile operating systems. We traded freedom for convenience.


Buried under a lot of complaints about fairness, Kagi mentions they are still using Google search results, just without authorization.

> Because direct licensing isn't available to us on compatible terms, we - like many others - use third-party API providers for SERP-style results (SERP meaning search engine results page).

So in one sense, yes, Kagi isn't quite Google, but in another sense, it very much still is.


That's Gen X. Google's founders were both born in 1973 and Notch was born in 1979. Zuckerberg was born in '84, so he's solidly a millennial.

Zuck was birthed in the pits of Isengard so he’s actually Gen I. That’s why it’s all about him!

And the police were wrong, which is why they're the culpable ones.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: