"Closed source software is inscrutable, impossible for me to fix, impossible for me to review the source" is absolutely a distinct statement from "it is impossible to hide malware in open-source software". I've literally never heard someone claim the latter.

(edit for coherency, thanks graemep)

(I was rolling my eye wading in, thinking that Thunderbird was doing XDG and maybe some distro just wasn't setting XDG_CONFIG_HOME correctly, etc, but alas, no it's a TB bug)

I don't really get it. I click Install in Firefox. I get an app icon. It works, :shrug: ?

This has guaranteed I will not even consider NYTimes for the foreseeable future. So disrespectful.

This just seems to be a way (in Chrome) to trigger the already existing PWA install flow but from some styles element on the page, rather than the user knowing how to trigger the install flow (usually multiple clicks).

Edit: I wonder if you could do some click-jacking attacks here...

In fact, Uber on Android does use these notification channels. I just have "All Promotions & Recommendation notifications" disabled, and then "Taking a ride" channel enabled.

But it seems the clean, sustainable, long-term way to do this was to have the akismet plugin simply self-register. Why was this hack easier than just doing that?

God I love this place, a simple fking question gets downvoted.

When I did OSS work paid for by my employer, I was careful to note and credit who paid for the PR.

I wish you folks could understand how clownish you sound.

I generally sympathize, I also don't like when apps block screenshots (or even more stupidly, they can block Android's amazing "select text from anywhere" feature...). But I don't think there are similar concerns for Signal allowing me to hide notification content from the OS.