I like the idea of requiring extra work to get notification access. But really what all these scams pray on are time sensitivity, take that away and you solve the problem in many ways. For example, your bank shouldn't let you drain your account without either being in person or having a mandatory 24hr waiting period. Same could be done with side loaded apps getting notifications, if it's side loaded and wants to read notifications, then it needs to wait 24 hrs. Mostly it won't ever matter.

Alternatively reading notifications could be opt in per app, so the reading app needs to have permission to read your SMS message app notifications, or your bank notifications, that would not be as full proof as that requires some tech literacy to understand.

But you can use InnerHTML to set HTML and that's not safe.

At this point that API has been around for decades and is probably impossible to deprecate without breaking fairly large amounts of the web. The only option is to introduce a new and better API, and maybe eventually have the browser throw out console warnings if a page still uses the old innerHTML API. I doubt any browser vendor will be gung ho enough to actually remove it for a very long time.

I would love to see LLMs start to ask clarifying questions. That feels like it would be a step up similar to reasoning

Claude Code has an entire tool for the LLM to asking clarifying questions - it'll give you three pre-written responses or you can respond with your own text.

What I want is to be able to use AI to modify the software we already have. Granted I've wanted to do that long before AI, but now maybe plugins will get more popular again now that AI could write them for us

I’m imagining a world where everyone was using emacs/lisp or Smalltalk VMs, and what kind of world-improving insanity we could be sharing through LLMs.

So are people

I don't think they were scrolling. They were recording, which I think is a very very different thing from doom scrolling addiction.

But man that sucks, there should be a phone free zone in the concert.

Which would prevent prevent people from snapping 1-2 pictures per band in a 4h concert, which I would kinda not like. Maybe it would improve the experience enough though, or you'd have to move to the bar area and take your one pic there.

Yeah I don't mind people taking their "I was there" pic. Sometimes I just want something to be in my camera roll to prompt a memory in 5 years. What I don't understand is 200 people all holding their phone up to take the same terrible quality video as each other of an event that will be recorded professionally from every angle anyways. Certainly no way would I ever watch back a 1 hour DJ set if I recorded that on a personal phone.

It looks really cool, but all the numbers jiggle around when I pan the map on my phone (Android, Chrome)

No you're thinking of SAML.

SAML is the devil. If it weren't for its XML aspects we'd probably not have bothered as much with alternatives.

SAML is bad semantically too, not just because of XML. SAML is arguably the worst cryptographic standard ever created.

> SAML is arguably the worst cryptographic standard ever created

The PGP packet has entered the chat.

Works fine for me, FF Win11

It's true that it's a problem, but it can be easily fixed in the future. For example they could just change the app to work on any old android fork. You still get the benefit of no longer having transaction data run through the US.

But right now many of us are concerned with not being able to run e.g. GrapheneOS without locking ourselves out of all basic digital infrastructure. We shouldn't wait until it gets untenable for the EU to lock us into Google and Apple, we want independence from the start.

Not to mention that we are essentially forced to give up accsss to all of our private data stored on our phones to either google or apple because you have their rootkit (Google Play Services in the Android case) installed