This is my biggest issue, it's such a bare-faced lie!
It's completely insane for the browser to need to trust the client. Instead, you implement zero-trust, and require authentication and authorization for anything sensitive.
The server absolutely shouldn't trust the client isn't malicious, instead it should assume it is malicious until proven otherwise
What are the "display" variants of the new fonts in that article? In the examples, they're the ones with a * appended. They look much narrower to me (which I like).
I'm not at my PC right now, so it may just be that there's an "Aptos Display" font or something 😅
The vegan milk part is so specific but so true!
It's very British, and so the humour's not to everyone's taste, but I used to listen to The Crate and Crowbar religiously.
They're a bunch of current/former games journalists/devs. It started out of the old PC Gamer UK podcast way back (that got cancelled and they created their own)
I think they're still going, although I've stopped listening as I no longer have time (I used to commute by train which was perfect for podcasts)
Ah, that's why it felt "wrong". I thought it just had some really weird style choices, and that it felt like a Xiaomi skin or something. But it's probably that it has sped the iOS style (I've not used an iPhone in many years)
Personally, I've found jerboa to be pretty good
I think the last sentence here is the killer for the opposing argument, really.
Personally (not knowing enough about economics and public borrowing), my common-sense view is "if it can make money for the private investors, why can't it make money for the government with their low borrowing costs?" People throw around a lot of counter arguments that have varying degrees of merit, but no arguments I've seen against public ownership deal with the "private ownership has demonstrably failed for the last 30 years" argument. Doesn't matter what your political/economic/social viewpoint is, that's just fact at this point
Yeah, I signed up yesterday (hi everyone!), and was very surprised at the lack of email verification for sign-up. Probably worth the owner adding it if they see this thread
I don't think that's true.
I think this is useful unless your threat model doesn't contain supply chain attacks by non-Google actors (which would be a pretty absurd position to take, there are plenty of malicious actors out there, Google aren't the only one!)
It clearly helps to mitigate against some threats, and so makes sense as a mitigation in your threat model.
I agree that you may still want a mitigation against Google acting maliciously, but that doesn't make this pointless.