@asadotzler @bobbydigitales @samsaffron @firefox @discourse @googlechrome @MicrosoftEdge On my machine https://t.co/Ily3kiXmQT gives 131.6 in Chrome, 100 in Firefox. That's over 30% slower.

@asadotzler @bobbydigitales @samsaffron @firefox @discourse @googlechrome @MicrosoftEdge Anyone can run speedometer 2.0 benchmark — consistently much slower in Firefox.

@ftrain cc @waxpancake note screen lol

@jongalloway Brown ZunePhone 4 Lyfe

Speaking of, finally unlocked the dreaded CHROME DAZZLE TANK in BF1. You can't even see it, can you? Keep looking! It's there! https://t.co/Kpk45d3aJp

@tqbf awful

@samsaffron @JohnONolan I'll never forget the war of slightly_smiling

@Adys GET OUTTA HERE WITH YOUR CONSTRUCTIVE POTENTIAL SOLUTIONS!

@Supermathie @NintendoAmerica @NintendoDads due its nintendo this is SOP

@arcaderage Dazzle wasn't really used in WW2 though. There are a number of Dazzle skins in BF1 https://t.co/rBGW5uV72F

And here's the 2014 version, also by Ruben Bolling https://t.co/3kPwSF3w4r https://t.co/wfvArLHxXV

@pfinette @johnolilly Yes but ye olde A11 was already so absurdly far ahead of Qualcomm’s Android perf, this is like dunking on the act of dunking

@mathur_anurag @Carnage4Life @migueldeicaza I said I was logged into chrome

@Carnage4Life @migueldeicaza yeah it's enabled (presumably default on?). But I see no website history on https://t.co/evohriOHeh

@MartinDoms @cjbush @f0da (in the background, I chug a cold mug of Dr Perky)

@Carnage4Life I'm logged into Chrome, yeah.

@Carnage4Life hmm, no repro, I only see search history and youtube history

@tobermatt that's.. not weird .. at all.. (runs away)

@kevindente and watches

@kevindente Mac isn't cool. You know what's cool? SMARTPHONES, BAYBEE

@kevindente Mac was never cool.. iOS only

@deadprogrammer https://t.co/wuRUp2Vebh

@SparkyRobot I will come at you

— TO RESPECTFULLY REQUEST A DELICIOUS SLICE OF YOUR DELICIOUS PIZZA

@Pinboard I suspect a Y Combinator startup could solve this problem tout suite

@pekkagaiser needed IPMI backdoors in the long run. otherwise they worked fine

@splattne @_Tomalak This is why I like videogame audiences (moooostly). They embrace change rather than fight it.

@mnewberg SuperMicro 5019S-L

@Supermathie @Pixipea I just wish we could convince our kids to reliably flush afterwards..

@Massdrop dual USB-C seems .. rather.. overkill

@drob bad things happen to bad people

@wavyknife I had forgotten Weird Al has a cameo in that video!

@cwodtke 🖐

@cwodtke they aren't afraid -- they just don't care (enough). Sometimes caring enough means being borderline obsessive though.

@cwodtke yes, but this is why you are awesome

more black comedies should integrate interpretive dance scenes https://t.co/bODyt1wYBv

@Pinboard can you be the new Democratic party? No pressure

@rands Make sure you've seen Lady Bird as well https://t.co/7tS2LAsibo -- I think this was the best movie I saw in 2017

These are claimed via https://t.co/eUb6q6I3kF , thanks!

@LordPK_ I'd prefer not to ship internationally at this time

@ShawnWildermuth @CodeOutInc sounds appropriate, email me!

no OS will be installed, of course, bring your own OS, monitor, keyboard, and mouse and you're off to the races!

@tobermatt another sad case of misandry

@tobermatt are you guys gonna.. eat.. this lamb?

@Pinboard I will eat a bug if democrats don't sweep everything!

@kevinmontrose it's not your fault, you have a man cold https://t.co/msS2buLaon

@tobermatt dang, I forgot to photoshop bugs in there

@tobermatt https://t.co/fZTJH6YWCz

@textfiles bed 'til yer ded

@saeedwkhan @PropCazhPM you may wish to refer to this https://t.co/u3OrfVEP9g

@SamuelHulick define "playing"

@scottwasson you need to sell me some of your rejects, you have too many keyboards!

@SamuelHulick progressquest! https://t.co/hvRgczQsHr

@peswani_manohar no, these were definitely all people. I thought maybe on mobile, but it looks like there aren't bots in the game from my searching, search for yourself: https://t.co/DAGfEHXQPe

it's gonna get so Angry Birds level that even @textfiles will have to play Fortnite

closeup of those sweet, sweet llamadollars.. you may laugh now but mark my words soon the entire economy will be based on v-bucks https://t.co/8mkAy2saZA

skate to where the puck is going, that's what I always say

@chetfaliszek the revives were stupid in previous games, immediate one-tap revive (even with a cooldown) ain't right and leads to much in-game stupidity. So I support the change but it needs tweaking

@chetfaliszek it's wayyy less spammy than BF1 was, and does feel more "battlefield-y" overall. My main complaint is that nobody revives any more (because it's much riskier, takes add'l time) and thus the enforced long "bleeding out" times are annoying.

@patio11 @sehurlburt yeah this depends heavily on age. When you're young, take crazy risks. It's about the only time you can.

@chriscoyier the death penalty is too good for this transgressor!

@ericlaw @taviso @tqbf @thenthj never heard of it

@ericlaw @taviso @tqbf @thenthj try writing a proxy for Discourse login, then get back to me ;)

@taviso @tqbf @thenthj I hope you have Tim Cook on speed dial then 🤔

@taviso @tqbf @thenthj it's fair, it just paints a rather dark picture since the odds of many people using hardware 2fa on smartphones in 2018 and 2019 is basically nil due to difficulty of setup and use. So you have to bank on lazy / cheap criminals for now

@taviso @tqbf @thenthj I strongly disagree that successful real time proxying is a "basic programming ability". And since a proxy would be highly site specific, that also raises the bar. It is absolutely fair to note that a prebuilt kit could be released per targeted site though.

@taviso @tqbf @thenthj we know they can "steal and write to local file" but not "steal and proxy to target site in real time". So that in fact demonstrates a capability they did not previously have.

@taviso @tqbf @thenthj I *guarantee* you that statistically you have reduced attack surface and attack success rate with authenticator apps. Will you ever prevent mossad from logging into your GMail if they reeaaaalllly want to? Nope.

@taviso @tqbf @thenthj "hassle people about u2f" plus "give up on literally everything else in security that offers incremental improvements" is not a winning combo in my book. Cue "why not both gif girl" 😉

@taviso @tqbf @thenthj it's only valid security if you can actually get people to do it. I am supremely unconvinced hardware 2fa on a smartphone, and *particularly* iOS -- crosses that threshold today. In five years? maybe.

@tqbf @taviso @thenthj the other option is "hey, everyone, please stop using smartphones and only ever use desktops or laptops with proper 2fa hardware support". Is *THAT* realistic? In the meantime, someone should be actively suplexing people at Apple until they get better iOS support for 2fa hardware

@tqbf @taviso @thenthj it's fair, but you're describing "we just need people to do this really difficult thing and they'll be safe" with hardware 2fa on a smartphone. Is that realistic? Until Apple gets their 💩 together, I'm comfortable with 2fa auth apps sufficiently raising the bar for '19

@taviso @tqbf @thenthj proxying 2fa fields (or captcha) plus running a real headless browser is *FAR* more complex than a simple "present fake form, save entered form data to database" .. like 2 orders of magnitude harder, it is also extremely site specific & brittle if they update login form

@taviso @tqbf @thenthj Apple's lack of rational support for hardware security keys is currently a dealbreaker, so they should be leaned on heavily by whatever means are available. For most humans, the smartphone is their primary computer; any security system that doesn't account for this is gonna fail

@taviso @tqbf @thenthj I guess my argument is that it's a process, and moving the bar to auth apps raises that bar. You don't need to outrun the bear, you just need to outrun the people behind you ;) That plus Apple needs a far better nearfield / bluetooth key story

@taviso @tqbf @thenthj nobody's arguing in favor of SMS 2FA, but an intermediate step of "get people to use authenticator apps". Login pages should indeed prevent trivial scripting though, perhaps forced captcha (or opportunistic "gee where's your javascript interpreter / DOM" captcha) on all?

@taviso @tqbf @thenthj that's interesting because it implies all login forms should be forced captcha to prevent this

@taviso @tqbf @thenthj oh, you're assuming there is fakebankpage.php server code that is attempting realbankpage.html passthrough login at the actual time of form submission? Possible, unless the login form is captcha'ed

@tqbf @thenthj you can still get phished via a fake login webpage URL on a phone, so I'm not following

@tqbf @thenthj the problem is we live in a world of 24/7 smartphones, not desktops and laptops with USB ports

@tqbf @thenthj yeah but most of humanity does "everything on the phone" these days so the hardware keys need to work seamlessly there or basically game over. So pray for Apple to get on board with iOS hardware key support

@tqbf @thenthj kind of a non-starter until Apple gets fully on board via nearfield / bluetooth / whatever though

@tqbf @thenthj they'd have to be phished in near real time to work. ~2 minute window? I'd say that moves the bar up quite a bit over "valid forever" username/password only

@thenthj @tqbf I just hate every person and every email I get equally. It's on brand for me.

That said, I agree with the central point: hardcore two factor auth, 100% of the time, everywhere... is the real defense here.

@jf @tqbf this reminds me, didn't Twitter add support for 2FA recently? I need to turn that on

@tqbf @patio11 @emerose @kevinriggle @tetrakazi 🤫

@patio11 @emerose @kevinriggle @tqbf @tetrakazi Still waiting for someone to target me. I dare anyone reading this: try to phish me! (I believe strongly in the Starfighter model of "make it a game to learn more", even though that business sadly failed)

@tqbf What I'm implying is the fallacy "they'd never get me", which I also believe to be true. But I also understand I'm a totally unrepresentative superfreak, unlike the people on HN ;)

@tqbf that said, I agree that once Mossad-level state agents decide you are a valid target, it's not going to end well no matter your background

@tqbf this should be a game mode, like Starfighter. I'd like for someone to try to phish me. I regularly delete email from close relatives without reading it ;)

hi @splunk! I'm sure the ghosts of logs past haunt your .. er .. cubicles .. as well https://t.co/7Jv9zTMvWH

@spies_please @elonmusk Have you considered a vacation in Thailand

Also the @splunk offices are _literally_ across the street, so clearly San Jose grew up around this place (built in 1884, originally an "unfinished farmhouse"). It only survived the 1906 earthquake as it was built on a floating foundation.

The artist clearly used pictures of the Winchester house, here's a pic I took from upstairs, note resemblance to first panel. Info at https://t.co/jnkIGliEgb https://t.co/iUWMbBX7KP

@mattcutts https://t.co/1gbz2ZrMkU

@textfiles "and this is officially the twenty sixth and LAST time I will give them the benefit of the doubt again!" -- Jason Scott

@Pinboard "He fancied himself to be hiding in plain sight." 🤦‍♂️🤦‍♀️🤦‍♂️🤦‍♀️🤦‍♂️🤦‍♀️🤦‍♂️

@tobermatt Golang was "initial released" in 2012; Ruby was created in ~1995

@tobermatt it depends. Ruby is a solid decade behind the state of the art here. And that's being a little generous.

@uberbrady Only by accident

@Pinboard Look not everything can be political fundraising