Average people don’t want to spend their lives managing permissions. You could go ahead and use Android or ChromeOS.

No average person cares about your side project, and most people prefer Apple’s product decisions over the ones you’d like them to make. Based on your history with technology, you are a Windows developer who would like to distribute apps on Apple’s platform without learning about what makes for a great app on that platform.

Browser vendors have been able to ship their own engines in the EU for almost 2 years now. What great benefit to consumers has that enabled?

You aren’t going to run a network connected 24/7 online agent from a laptop because it’s battery powered and portable.

OpenAI did not "bet" on Jony Ive. They bought his company io Products.

Is that not a bet?

It's certainly not a good way of explaining that this is a hire and not an acquisition!

The people complaining about Safari often are running enterprise crapware that requires some esoteric Chrome API or bug to operate correctly and should actually be an app on iOS but cannot be funded as such because its creators don’t care about its users.

Then again, if a company can't polish a web browser app, then the native app they'd produce will be even worse.

Now you have a crappy app that only works on some devices, and now with no tabs, no links, text you cannot select anymore because they used the wrong component, etc.

Ugh.

WebUSB is a giant gaping hole in the browser sandbox. Innocent use cases are really nice, I've used WebUSB to flash GrapheneOS on my device, but the possibilities for users to shoot themselves in the foot with nefarious website are almost endless.

Consider the fact that Chromium has to specifically blacklist Yubikey and other known WebAuthn vendor IDs, otherwise any website could talk to your Yubikey pretending to be a browser and bypass your 2FA on third party domains.

I'm conflicted on WebUSB because it's convenient but on the balance I think it's too dangerous to expose to the general public. I don't know how it could be made safer without sacrificing its utility and convenience.

It really isn't. Chromium (since 67) does USB interface class filtering to prevent access to sensitive devices. Then there is the blacklist you mentioned.

On top of that, straight from Yubico's site:

".. The user must approve access on a per website, per device basis .."

This isn't any more a security hole than people clicking "yes" on UAC prompts that try to install malware.

> ".. The user must approve access on a per website, per device basis .."

Of course, but a phishing website "fake-bank.com" could collect user's username, password, and then prompt them to touch their yubikey. This wouldn't trigger any alarm bells because it's part of the expected flow.

> This isn't any more a security hole than people clicking "yes" on UAC prompts that try to install malware.

Yes it is. The only reason why Yubikeys are immune to phishing and TOTP codes aren't is because a trusted component (the browser) accurately informs the security key about the website origin. When a phishing website at "fake-bank.com" is allowed to directly communicate with the security key there's nothing stopping it from requesting credentials for "bank.com"

Again, that exploit factor is irrelevant now because WebUSB is blacklisted from accessing, among other things, HID class devices. So no site, even with permission, can access U2F devices over WebUSB. There is no special blacklist needed per vendor or anything.

You are right that it was a security hole in Chrome <67. Which is almost a decade in the past by now.

> some esoteric Chrome API or bug

Or simple things like supporting 100vh consistently. Is that estoric?

It’s also strange because I highly doubt Google has manufactured a billion physical units of anything. Most of their consumer hardware is designed and built by partners, including Pixel.

>> I highly doubt Google has manufactured a billion physical units of anything

Technically, there are billions of transistors in every tensor chip manufactured by Google

Even all pixel and nexus models combined must be far off the billion. Apple just hit 3 billion iphones last year.

In case of a natural disaster, it’s guaranteed that human drivers will abandon their cars on the road and cause gridlock. It happens all the time. Emergency vehicles are built to handle it.

Waymo's performance in this outage was horrible. 6 hours into the blackout there were still many intersections where a Waymo was blocking traffic, unable to navigate out of the way. This should never happen again.

It took me a while to realize you were using "$WORK" as a shell variable, not as a reference to Slack's stock ticker prior to its acquisition by $CRM.

Now I'm imagining a world where all publicly traded stocks are identified by reverse-order domain names.