Frequently the desktop app and the safari extension won't be in sync and missing a recently added password, or doesn't show up on my other devices hours later. I still have no idea how the extension vs desktop app actually work together, or if they do at all.

Sometimes 1password (safari extension) is "locked" - but the desktop app isn't locked? and No amount of clicking the little 1password icon, that's supposed to unlock it does anything. Just a completely no-op button. Quitting safari _and_ the desktop app seems to be what's required to fix it.

I've been thinking about just moving back to native macOS keychain, but I haven't bothered to check on linux+windows support.

The question is a matter of impact because of how used the software is.

If you have an algorithm whose sole purpose is to “engagement” with your own platform (by intentionally and purposely pushing clickbait, ragebait, and media that keeps reinforcing your clicks) you should no longer get section 230 protections - you are no longer a neutral party. These algorithms exist to create echo chambers and keep you clicking so you can consume more ads.

I would love to hear other ways of solving the problems of social media.

1. Does it work? Then ship it. This is great for early on, high-velocity where the goal is to get something working in the wild. AI and AI proponents love this option. It's easy to spot obvious problems, but very unlikely to lead to feedback on structural changes to abstractions and architecture to increase overall _long-term_ velocity.

2. We assume this works, but is it "correct"? This is where long-term code maintainability is created. The quality and effort put into a review like this is obviously far more involved than option 1. People working long term on a code base love this option.

We've been biased towards #1 for a long time, but I feel like we dont have enough people capable of doing #2.

Isn’t it the case anyway that if you add state, federal, local, property, capital gains, and sales taxes, add the money that you and your employer pays for healthcare, that you’re basically paying slightly more in taxes all-in?

DACA (https://en.wikipedia.org/wiki/Deferred_Action_for_Childhood_...) was an exec order specifically because those individuals were brought over (as children, with no agency over their fate) after they were born, not before, so of course they weren’t citizens via the 14th. You’re correct that It wasn’t a law passed by Congress, but it’s irrelevant. I’m not sure what you’re saying, talking anything about DACA in this context is irrelevant.

But I wouldn't exactly call "professionals trying to make high brow media" exclusive alternative to Reddit, Youtube, Twitter, TikTok.

A lot of the propaganda (and sane washing) is coming from mass media, too. I feel like the only "legit" media outlets are like Reuters, AP, and some international ones, I guess.

- The consolidation of media (& social media in general) is about making money from outrage (emotions)

- Anti Vax (& other) movements is about people only receptive to people saying what they already feel (feelings)

- Accountability is gone because people care about being on the winning team and being "right".

Reason, Logic, and Evidence seems completely replaced by propaganda and mistrust of experts (fueled by the propaganda), but it's all rooted in comfort in people's own emotional validation.

The authors thesis seems to be that it's preferable to rely on the programmer who wrote bugs to write even more bugs in tests in order to have some benefit over a compiler or type system that can prevent these things from happening in the first place?

So obviously it's an opinion and he's entitled to it, but (in my own opinion) it is so so so, on-its-face, just flat out wrong, I'm concerned that that it's creating developers who believe that writing so many tests (that languages and compilers save you time (and bugs) in writing) is a valid solution to preventing null pointer defeferences.

Comments URL: https://news.ycombinator.com/item?id=46887665

Points: 46

# Comments: 68

The actual videos do not support this conclusion at all. You’re being lied to.

Systems must be _structurally architected_ with security in mind.

Security is layered, using a random key with 128-bit space makes guessing UUIDs infeasible. But _also_ you should be doing AuthZ on the records, and also you should be doing rate limiting on API so they can't be brute forced, either.

Any recommendations?

At least President Dwayne Elizondo Mountain Dew Herbert Camacho cared about things enough to make things better for his people, hired the smartest person he knew and genuinely tried to fix things.

I replaced the tidbyts with a Dakboard, specifically a https://shop.dakboard.com/products/pixeltoptech