332 private links
The project is active again. It's an alternative to Nextcloud: Etherpad to edit document, file storage with Davros, task and project management with Wekan and chat with Rocket.chat.
Sandstorm supports many other apps. It should be as easy as . The project sandboxes every document created in one of the app.
It's main difference is usability and designed for humans (as they describe it).
Les différentes stratégies:
- types côté serveur via tRPC
- types via un contrat ts-rest (un package dédié)
- types via OpenAPI
- types via un schéma GraphQL
- typage via Protobuf
- server functions
A quick-reference list of tools and guides for naming just about… well, anything, in one place:
- Naming buttons → NN/g on UI copy
- Naming classes → classnames.paulrobertlloyd.com
- Naming colors → parrot.color.pizza
- Naming design tokens → Intuit’s design token taxonomy
- Naming features → Shopify Polaris naming guide
- Naming icons → Iconography guide
- Naming layers → goodpractices.design
- Naming products → guide.onym.co
- Naming UI components → component.gallery
- Naming UI behavior → namethatui.com
- Naming variables → Vodafone UK Variables Taxonomy Map and naming-cheatsheet on GitHub
- UI terminology → Moccu’s naming convention framework
An AGENTS.md for students
Für Anbieter, die Kunden identifizieren müssen oder wollen, gibt es gängige Wege, die deutlich weniger Risiko erzeugen:
- Online-Ausweisfunktion (eID) statt Foto oder Scan: Es werden nur die Daten übertragen, die das Berechtigungszertifikat des Anbieters erlaubt.
- Video-Ident oder Prüfung vor Ort, danach nur ein Vermerk („Identität am … anhand Personalausweis geprüft durch …“) statt einer gespeicherten Kopie, sofern keine Aufbewahrungspflicht besteht.
- Wenn es doch eine Kopie sein muss: verschlüsseltes Upload-Portal statt E-Mail-Anhang, klar begrenzter Zugriff, dokumentierte Löschfrist.
- Transparenz: Rechtsgrundlage, Zweck, Speicherort und Löschzeitpunkt vorab nennen. Das ist nicht nur Pflicht, sondern schafft Vertrauen.
Was ich dir rate, wenn jemand deine Ausweiskopie will
- Nachfragen: Wofür genau, auf welcher Rechtsgrundlage, wie lange wird gespeichert, wer hat Zugriff?
- Alternativen anbieten: eID, Video-Ident, Vorzeigen vor Ort.
- Schwärzen, was nicht gebraucht wird, mindestens Zugangsnummer (CAN) und Seriennummer, sofern keine gesetzliche Pflicht zur vollständigen Kopie besteht.
- Kennzeichnen: Gut sichtbar „Kopie“, Zweck, Empfänger und Datum auf das Bild schreiben. Das erschwert die Wiederverwendung.
- Nicht per unverschlüsselter E-Mail versenden. Wenn der Anbieter kein sicheres Verfahren hat, ist das ein Warnsignal.
- Im Zweifel ablehnen und bei Bedarf die zuständige Datenschutzaufsichtsbehörde einschalten.
One thing is it seems easier than tmux to use
Un fil permet de suivre la veille à plusieurs, et aussi de trier les publications d'un flux RSS unique.
Ce qui me frappe, c'est le chemin parcouru. Il y a vingt ans, c'était une astuce pour éviter d'écrire du HTML. Il y a dix ans, c'était notre format à nous, dans les repos. Aujourd'hui, mes clients en reçoivent sans le savoir, et je rédige des fichiers .md pour expliquer mes projets à des agents IA.
On the other hand: what passwords have going for them is that they’re very intuitive, everyone knows how they work, people have been using them since time immemorial, and you can choose where you store them and who you share them with. Keep this in mind.
What’s neat about TOTP is that it doesn’t rely on text messages or email or even the internet at all. Your authenticator software simply generates a random-looking number every 30 seconds based on the current time (and a random starting number called a “seed” or a “key” that is unique to you), and this is all that a website needs to verify you’re you.
Similar to passwords, TOTP can be stored the way the user want.
In fact there are many different things called “passkeys” and the FIDO Alliance has intentionally named all of them the same thing. I believe this was done in order to deliberately confuse users and encourage them not to look too closely at the fine text.
There are multiple properties for a passkeys:
- copyable or not copyable
- transferable or not transferable
- hardware-backed or software-backed
- user present or non-user-present
- user verified or non-user-verified
- attested or non-attested: They’re called authenticator data flags in the WebAuthn standard.
A platform can now say: "sorry, we only accept the User-Present User-Verified Non-Copyable Hardware-Backed varieties of passkey here" or just: "unfortunately your passkey isn’t secure enough; download our app.” But it’s an open standard, isn’t it?
Attested passkeys is the glitch (authenticator data flag AT, if you were wondering). This is the feature that means you no longer get to make the calls about your passkeys. "Critically, remote attestation requires the co-operation of your cryptoprocessor, your passkey manager software, your device’s operating system, and your device’s firmware to all pass the remote attestation check".
My expectation is that the industry will start off with very few constraints on your passkeys, and gradually add more and more, not all at the same time, but staggered on different sites, and then in a few years people will forget that they were ever offered a choice in which security measures they want to enable on their passkey.
For intelligence agencies, and for corporations like Microsoft, Google, Apple, Facebook, Amazon – giving you convenience and security is likely not their primary goal. I think they have an entirely ulterior motive. They can use passkeys to prevent you from running unapproved software.
Selon le fabricant, la majorité des unités concernées sont des produits anciens, notamment des modèles AK-SM800 et AK-SC355, arrivés en fin de vie et qui ne reçoivent plus aucune mise à jour logicielle ni correctif de sécurité.
Selon le fournisseur, il fallait donc changer le matériel. Du point de vue des supermarchés, pourquoi changer tant que les réfrigérateurs fonctionnent ?
On ne parle cependant pas de la gestion financière de l'État.
OpenAI submissions on math related topics