1. 1

    Buggered SSL cert; at least FF on Android doesn’t accept it.

    1. 2

      Works now

    1. 0

      Should it be legal to rob a bank and turn yourself in?

      1. 4

        More like should it be legal to show customers of the bank that it has a hole in the wall covered up with some wallpaper.

        1. 1

          Too many defects can’t be uncovered, but must be used before anybody will think “maybe we should fix that.” So no, tedu made a good point. Just because the bank doesn’t lose doesn’t mean you didn’t wander into the vault then take things out as proof.

          1. 1

            I strongly disagree. As a customer of a product or a service I would want to know about the possible exploits against that service. Whether the exploits are made public or not, they’re still there and your data is still vulnerable.

            1. 1

              Agreed but proving a computer security vulnerability often involves getting either pre-placed data or a random person’s data, at least from the people I’ve read. It’s not quite holding up a bank at gunpoint, but it’s definitely going through the hole in the drywall.

        2. 2

          Basically, should it be legal to do a physical security pen test without a contract.

        1. 1

          Some political assumptions made in this piece only serve to discredit the author in my eyes, and lobsters is not the right place for discussion on the topic. Not downvoting, but I don’t like seeing content like this.

          1. 1

            As a developer who moved from Linux to the macOS platform, this made me think about how many non-native apps I use as replacements for the Apple version. The obvious ones I’m thinking of:

            • Alfred instead of Spotlight
            • iTerm2 instead of Terminal
            • Dropbox instead of iCloud
            • Chrome instead of Safari
            • Gmail instead of Mail
            • Google Maps instead of Maps
            • VLC instead of iMovie
            • Spotify instead of iTunes
            • Signal instead of Messages

            &c. This surely isn’t a good trend for Apple to allow to continue.

            1. 13

              That’s not what’s meant by “native” in this case. Alfred, iTerm, Dropbox, Chrome, and VLC are native. Spotify is Electron, and I’m not sure about Signal. I’m guessing it’s probably a native app that does most of its UI in a WebView.

              1. 5

                Signal for Desktops is Electron.

                1. 2

                  As it might be useful to describe what is meant by native, it means something on a spectrum between “using the platform-supplied libraries and UI widgets”, i.e. Cocoa and “not a wrapped browser or Electron app”, so it’s not clear whether an application using the Qt framework would be considered “native”. It could be delivered through the App Store and subject to the sandbox restrictions, so fits the bill for a “native” app in the original post, but it would also not be using the native platform features which are presumably seen as Apple’s competitive advantage for the purpose of the same post.

                  1. 2

                    I’d call QT native. It doesn’t use the native widgets, but then neither do most applications that are available on multiple platforms.

                    1. 2

                      It may be native, but it’s not Mac-native in the sense Gruber was talking about. You will find that all three uses of “native” in his article appear as “native Cocoa apps” or “native Mac apps”. He is talking about a quite specific sense of native: apps that integrate seamlessly with all of the MacOS UI conventions (services, system-wide text substitutions, native emoji picker, drag & drop behaviours, proxy icons, and a myriad more). Qt apps do not.

                2. 5

                  Why is it not a good trend? You are still using a Mac .. they sold you the hardware. Should they care about what apps you run?

                  1. 3

                    Apps with good experiences that aren’t available on other platforms keep users around. Third-party iOS apps do a better job of moving iPhones than anything else Apple does, because people who already have a pile of iOS apps they use generally buy new iPhones.

                    Electron is just the latest in a long series of cross-platform app toolkits, and it has the same problems that every other one has had: look & feel, perceived inefficiency, and for the OS vendor, doesn’t provide a moat.

                    1. 1

                      Counterpoint, their apps have always been limited and really for people who weren’t willing to learn and use more robust tooling. I mean how many professionals use iMovie.

                      1. 1

                        iMovie is a good example. I’m guessing a lot of us prefer VLC.

                    2. 1

                      It’s good for the end user but not a good trend for their business model, part of which is to have best-in-class apps. Don’t get me wrong, I like having choice and I think they shouldn’t force you into their own app ecosystem.

                  1. 12

                    Any interest in a crustacean private leaderboard?

                    1. 9

                      I guess competition is healthy, but I have an additional suggestion: crustacean private help board: I don’t know how we’d do it, one big “ask” story/thread would be difficult, we could set up a github project for it and have questions as “issues” perhaps? We could have a wiki on it too.

                      EDIT:

                      Also, the idea of a lobste.rs joint github additionally appeals to me because I know we all dabble in various esoteric languages and we could have a “rosetta code” type of project where we solve the problems in different languages, and it would be fun to compare these solutions across languages.

                      EDIT:

                      https://github.com/a-red-christmas

                      In case anyone thinks its a good idea … please join up

                      1. 4

                        Sounds like fun to me, I’m azdle on github too if you’re adding people.

                        I agree with @gerikson about not having a daily thread and I think one monster thread would quickly get unwieldy. I created a #lobsters-advent on freenode that we can for discussion.

                        1. 3

                          The AoC subreddit is a good place to look for help and tips.

                          I don’t like the idea of “polluting” Lobsters with a daily question thread.

                          I love the idea of a shared code repo.

                          1. 3

                            Please add gustafe on Github!

                            1. 3

                              yumaikas on github. I’d love to join.

                              1. 3

                                Count me in. trevmex on GitHub.

                                1. 2

                                  The github web interface doesn’t seem to have a ‘request to join’ button. I think you have to add people manually.

                                  1. 4

                                    JKowalsky on Github as well, I’d love to join as well!

                                    1. 4

                                      tftio

                                      1. 3

                                        daveloyall

                                        1. 3

                                          NattyNarwhal, not sure if I’ll do it, but I’d definitely consider it.

                                        2. 2

                                          Would you mind adding bpollack?

                                          1. 2

                                            Cool. I’ll add my Haskell solutions :)

                                            1. 1

                                              (Or at least I will if you add PhilArmstrong to the project :) )

                                            2. 1

                                              I’d love to join! My username is Vaelatern.

                                              1. 1

                                                I’ve invited you!

                                                1. 1

                                                  And I’ve contributed my clojure solutions!

                                            3. 2

                                              I’d be up for it!

                                              1. 1

                                                Post your ‘join code’?

                                                1. 1

                                                  Will do asap!