Hacker Newsnew | past | comments | ask | show | jobs | submit | dento's commentslogin

Requiring a fullscreen window stops almost all possible abuses, though, as you cannot do this from a background process.


When working remotely, you're often allowed to pick between employment and b2b contracts, which is essentially the same thing.


And in countries such as Germany you are legally required to be an employee if you only work for one company. The government will sue the company or if not reachable, they will sue the employee.

So deel.com is a usual choice.


And when I have to access a 2FA protected account, like my bank or email, I do what?


> Europe's GDPR makes the entire EU two-party consent

False. A business might be required to inform you that they are recording, but many EU member states have one-party consent laws otherwise. For instance, Finland, Sweden, Latvia, Denmark, Netherlands, Poland and Italy.

https://en.wikipedia.org/wiki/Telephone_call_recording_laws


I should suggest warptorio here: https://mods.factorio.com/mod/warptorio2


You should try Warp Drive Machine: https://mods.factorio.com/mod/Warp-Drive-Machine


Again, you're confusing models here. "source of trust" is a technical term, and not a judgement about trustworthiness.


Secure boot also doesn't rely on Microsoft...

It's always amusing how much people don't understand either of secure or trusted boot and start rambling about it.


In theory it doesn't, in practice it does. New hardware only trusts the MS first party CA out of the box (not even the 3rd party one for booting e.g. Linux distros!) and many systems do not allow removing the MS CAs from the trust store.


>Secure boot also doesn't rely on Microsoft...

OTOH, once the original Microsoft-signed SecureBoot keys for both Windows and Linux became compromised in recent years, triggering the need to blacklist those keys in everyone's firmware which requires an unprecedented worldwide need for a timely firmware update only if available from the original motherboard manufacturer, along with corresponding OS updates to match, neither of which has been fully accomplished yet, there was no-one to rely on other than Microsoft to mitigate the snafu.

More than just amusing, to "quote" Ballmer: "This is by design."


You're the one who is confusing threat models - namely the threat model I care about and the one Microsoft cares about. One has microsoft as the source of trust and one has them as an adversary.

> "source of trust" is a technical term, and not a judgement about trustworthiness.

No, its both. And when there is a mismatch then you have a problem.


This is an open source game from my childhood which is somewhat similar: https://github.com/suomipelit/ultimatetapankaikki/


> I bet some of y'all blocking YT ads are paying for Spotify. That's just bad planning [..]

Because it's trivial to block youtube ads. There are no decent free Spotify alternatives or ways to get it for free, that I know of.


Ublock origin (on firefox) appears to completely block spotify ads in my browser. At least I assume that's what's blocking it. Have never heard an ad on a free account...


RIP Grooveshark


18? That's ridiculous. I'd understand 14, but at 18 it's not too rare to live alone and have a full time job. And even before, access to maps or Wikipedia is generally quite useful. It's the social media that's the main issue, and not the other features.


This is called Server Sent Events, SSE for short.

https://developer.mozilla.org/en-US/docs/Web/API/Server-sent...


SSE is cool, but as others have pointed out, this isn't that. I also wouldn't call this Comet: almost unilaterally, Comet referred to using it in concert with JS/Ajax and usually was just a fancy way of saying long-polling (though I admit it's a bit broader than that in truth). What CGI:IRC did was different: it streamed HTML directly. More to the point, it didn't use chunked encoding or any kind of framing in the body. It just kept the connection open and kept sending HTML in realtime. I don't think this ever had a term associated with it, or at least I was never aware of one.


Looks like 'Comet' got coined in 2006. The CGI:IRC approach.. I had a smile and an "aha" on seeing the term "forever frames" :-)

I think the wiki page is wrong that it involved chunked encoding


Woah! I completely and entirely forgot the term "forever frame" existed.

Another term you don't see too often these days is the "holy grail" layout. I definitely remember the days of messing with negative margins and clearfix to get my page layouts to look nice while still working in IE 6 :)


Me too :-D

I think you're right that Comet refers more to the JavaScript techniques that came from those "forever frames".. but to me it was all about the streaming HTTP hack at the heart of it.

I guess it's academic now :-)

Regarding holy grail layout and IE6.. so you're telling me you're a masochist!


SSE came along much later. At the time it was common-ish to just slowly send HTML tags. I think at some point there was a gorgeous hack where they dynamically rendered and sent GIF frames with the messages of the chatroom.


The broader technique became known as Comet: https://en.wikipedia.org/wiki/Comet_(programming)

CGI:IRC used an early frame approach, no JS required.

At some point JSONP became popular, even for 3rd party APIs.

  <script src="http://dont-xss-me/please?format=jsonp&callback=lol">
Server writes:

  lol({ ... })

  lol({ ... })


That’s the modern variation. The original didn’t have any framing like they.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: