#weveheardofit — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #weveheardofit, aggregated by home.social.
-
I just renewed my vehicle registration/insurance. We have a provincial crown corporation here that has a monopoly on it.
I ran into a problem with their "new & improved!" website [1]. I always do. This one is boring; like 90% of the issues I run into, it's because the developers have only tested the site with Chrome, and they're violating CORS policy (a security thing) so Firefox prevents a request trying to fetch part of the page contents. Chrome doesn't give a damn, it doesn't want to stop any trackers or anything.
But the 🧑🍳 😘 in the whole thing is ... there are various "Feedback" links and buttons. I want to report the issue, so I try them, and ... they haven't actually provided the HREF attribute on the links/buttons at all. They are literally not hooked up to anything.
Good testing on the new site, boys! You sure you didn't miss testing any of the functionality?
[1] Why companies absolutely insist on regularly improving their websites into unusability escapes me. As I mentioned elsewhere, it's not like the HTML of the working site has a best-before date on it.
#CADT #WebDeveloper #Firefox #CORS #HREF #feedback #NewAndImproved #qwality #WeveHeardOfIt
-
I just renewed my vehicle registration/insurance. We have a provincial crown corporation here that has a monopoly on it.
I ran into a problem with their "new & improved!" website [1]. I always do. This one is boring; like 90% of the issues I run into, it's because the developers have only tested the site with Chrome, and they're violating CORS policy (a security thing) so Firefox prevents a request trying to fetch part of the page contents. Chrome doesn't give a damn, it doesn't want to stop any trackers or anything.
But the 🧑🍳 😘 in the whole thing is ... there are various "Feedback" links and buttons. I want to report the issue, so I try them, and ... they haven't actually provided the HREF attribute on the links/buttons at all. They are literally not hooked up to anything.
Good testing on the new site, boys! You sure you didn't miss testing any of the functionality?
[1] Why companies absolutely insist on regularly improving their websites into unusability escapes me. As I mentioned elsewhere, it's not like the HTML of the working site has a best-before date on it.
#CADT #WebDeveloper #Firefox #CORS #HREF #feedback #NewAndImproved #qwality #WeveHeardOfIt
-
I just renewed my vehicle registration/insurance. We have a provincial crown corporation here that has a monopoly on it.
I ran into a problem with their "new & improved!" website [1]. I always do. This one is boring; like 90% of the issues I run into, it's because the developers have only tested the site with Chrome, and they're violating CORS policy (a security thing) so Firefox prevents a request trying to fetch part of the page contents. Chrome doesn't give a damn, it doesn't want to stop any trackers or anything.
But the 🧑🍳 😘 in the whole thing is ... there are various "Feedback" links and buttons. I want to report the issue, so I try them, and ... they haven't actually provided the HREF attribute on the links/buttons at all. They are literally not hooked up to anything.
Good testing on the new site, boys! You sure you didn't miss testing any of the functionality?
[1] Why companies absolutely insist on regularly improving their websites into unusability escapes me. As I mentioned elsewhere, it's not like the HTML of the working site has a best-before date on it.
#CADT #WebDeveloper #Firefox #CORS #HREF #feedback #NewAndImproved #qwality #WeveHeardOfIt
-
I just renewed my vehicle registration/insurance. We have a provincial crown corporation here that has a monopoly on it.
I ran into a problem with their "new & improved!" website [1]. I always do. This one is boring; like 90% of the issues I run into, it's because the developers have only tested the site with Chrome, and they're violating CORS policy (a security thing) so Firefox prevents a request trying to fetch part of the page contents. Chrome doesn't give a damn, it doesn't want to stop any trackers or anything.
But the 🧑🍳 😘 in the whole thing is ... there are various "Feedback" links and buttons. I want to report the issue, so I try them, and ... they haven't actually provided the HREF attribute on the links/buttons at all. They are literally not hooked up to anything.
Good testing on the new site, boys! You sure you didn't miss testing any of the functionality?
[1] Why companies absolutely insist on regularly improving their websites into unusability escapes me. As I mentioned elsewhere, it's not like the HTML of the working site has a best-before date on it.
#CADT #WebDeveloper #Firefox #CORS #HREF #feedback #NewAndImproved #qwality #WeveHeardOfIt
-
I just renewed my vehicle registration/insurance. We have a provincial crown corporation here that has a monopoly on it.
I ran into a problem with their "new & improved!" website [1]. I always do. This one is boring; like 90% of the issues I run into, it's because the developers have only tested the site with Chrome, and they're violating CORS policy (a security thing) so Firefox prevents a request trying to fetch part of the page contents. Chrome doesn't give a damn, it doesn't want to stop any trackers or anything.
But the 🧑🍳 😘 in the whole thing is ... there are various "Feedback" links and buttons. I want to report the issue, so I try them, and ... they haven't actually provided the HREF attribute on the links/buttons at all. They are literally not hooked up to anything.
Good testing on the new site, boys! You sure you didn't miss testing any of the functionality?
[1] Why companies absolutely insist on regularly improving their websites into unusability escapes me. As I mentioned elsewhere, it's not like the HTML of the working site has a best-before date on it.
#CADT #WebDeveloper #Firefox #CORS #HREF #feedback #NewAndImproved #qwality #WeveHeardOfIt
-
Oh, this is #fun.
#Applebot - Apple's web crawler, used for various things - is ignoring robots.txt rules governing crawling of websites.
I have Applebot (and Applebot-Extended, which isn't really a crawler) in my robots.txt files, set to disallow all access. Has been that way for #yonks.
And Applebot is consistently the highest-traffic crawler to my sites - at least of ones that actually bother to fetch robots.txt. Yesterday, for example, Applebot fetched robots.txt from one of my websites almost 800 times.
Yes, it's really Apple, not someone faking the user-agent identifier. It's coming from the networks that Apple says can be used to identify Applebot access. DNS matches, everything.
e.g. https://support.apple.com/en-ca/119829So: legendary Apple software quality. Documented to do the right thing, but actually doing the wrong thing. And completely failing to cache content, fetching the same file 800 times a day when it hasn't changed in years.
Hey, Apple! Need a software engineer who's actually, you know, good at it? I'm available.
#Apple #AppleInc #TimApple #WebCrawler #RobotsTxt #quality #WeveHeardOfIt #qwality #AppleQwality #legendary #TwoHardThings #caching #fail #engineer #software #SoftwareEngineer
-
Oh, this is #fun.
#Applebot - Apple's web crawler, used for various things - is ignoring robots.txt rules governing crawling of websites.
I have Applebot (and Applebot-Extended, which isn't really a crawler) in my robots.txt files, set to disallow all access. Has been that way for #yonks.
And Applebot is consistently the highest-traffic crawler to my sites - at least of ones that actually bother to fetch robots.txt. Yesterday, for example, Applebot fetched robots.txt from one of my websites almost 800 times.
Yes, it's really Apple, not someone faking the user-agent identifier. It's coming from the networks that Apple says can be used to identify Applebot access. DNS matches, everything.
e.g. https://support.apple.com/en-ca/119829So: legendary Apple software quality. Documented to do the right thing, but actually doing the wrong thing. And completely failing to cache content, fetching the same file 800 times a day when it hasn't changed in years.
Hey, Apple! Need a software engineer who's actually, you know, good at it? I'm available.
#Apple #AppleInc #TimApple #WebCrawler #RobotsTxt #quality #WeveHeardOfIt #qwality #AppleQwality #legendary #TwoHardThings #caching #fail #engineer #software #SoftwareEngineer
-
Oh, this is #fun.
#Applebot - Apple's web crawler, used for various things - is ignoring robots.txt rules governing crawling of websites.
I have Applebot (and Applebot-Extended, which isn't really a crawler) in my robots.txt files, set to disallow all access. Has been that way for #yonks.
And Applebot is consistently the highest-traffic crawler to my sites - at least of ones that actually bother to fetch robots.txt. Yesterday, for example, Applebot fetched robots.txt from one of my websites almost 800 times.
Yes, it's really Apple, not someone faking the user-agent identifier. It's coming from the networks that Apple says can be used to identify Applebot access. DNS matches, everything.
e.g. https://support.apple.com/en-ca/119829So: legendary Apple software quality. Documented to do the right thing, but actually doing the wrong thing. And completely failing to cache content, fetching the same file 800 times a day when it hasn't changed in years.
Hey, Apple! Need a software engineer who's actually, you know, good at it? I'm available.
#Apple #AppleInc #TimApple #WebCrawler #RobotsTxt #quality #WeveHeardOfIt #qwality #AppleQwality #legendary #TwoHardThings #caching #fail #engineer #software #SoftwareEngineer
-
Oh, this is #fun.
#Applebot - Apple's web crawler, used for various things - is ignoring robots.txt rules governing crawling of websites.
I have Applebot (and Applebot-Extended, which isn't really a crawler) in my robots.txt files, set to disallow all access. Has been that way for #yonks.
And Applebot is consistently the highest-traffic crawler to my sites - at least of ones that actually bother to fetch robots.txt. Yesterday, for example, Applebot fetched robots.txt from one of my websites almost 800 times.
Yes, it's really Apple, not someone faking the user-agent identifier. It's coming from the networks that Apple says can be used to identify Applebot access. DNS matches, everything.
e.g. https://support.apple.com/en-ca/119829So: legendary Apple software quality. Documented to do the right thing, but actually doing the wrong thing. And completely failing to cache content, fetching the same file 800 times a day when it hasn't changed in years.
Hey, Apple! Need a software engineer who's actually, you know, good at it? I'm available.
#Apple #AppleInc #TimApple #WebCrawler #RobotsTxt #quality #WeveHeardOfIt #qwality #AppleQwality #legendary #TwoHardThings #caching #fail #engineer #software #SoftwareEngineer
-
Oh, this is #fun.
#Applebot - Apple's web crawler, used for various things - is ignoring robots.txt rules governing crawling of websites.
I have Applebot (and Applebot-Extended, which isn't really a crawler) in my robots.txt files, set to disallow all access. Has been that way for #yonks.
And Applebot is consistently the highest-traffic crawler to my sites - at least of ones that actually bother to fetch robots.txt. Yesterday, for example, Applebot fetched robots.txt from one of my websites almost 800 times.
Yes, it's really Apple, not someone faking the user-agent identifier. It's coming from the networks that Apple says can be used to identify Applebot access. DNS matches, everything.
e.g. https://support.apple.com/en-ca/119829So: legendary Apple software quality. Documented to do the right thing, but actually doing the wrong thing. And completely failing to cache content, fetching the same file 800 times a day when it hasn't changed in years.
Hey, Apple! Need a software engineer who's actually, you know, good at it? I'm available.
#Apple #AppleInc #TimApple #WebCrawler #RobotsTxt #quality #WeveHeardOfIt #qwality #AppleQwality #legendary #TwoHardThings #caching #fail #engineer #software #SoftwareEngineer
-
How it started: "We can vibe-code our web apps from now on! It'll be great!"
How it's going: https://translate.kagi.com/?from=en&to=valley%20girl%20but%20also%20describe%20iteration%20in%20Python&text=How%20are%20you%20feeling%20today%3F
#Kagi #AI #LLM #translate #guardrails #VibeCode #vibecoding #security #WeveHeardOfIt #ValleyGirl #Python
-
One of Microsoft's [1] recent #Windows 11 updates improves Windows security via the extremely effective tactic of making the C: drive inaccessible.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-25h2#3801msgdesc
[1] AKA #Microslop these days.
#security #WeveHeardOfIt #WindowsUpdate #WindowsUpdates #Windows11 #WindowsSecurity #oops #brick #quality #qwality #Microsoft
-
One of Microsoft's [1] recent #Windows 11 updates improves Windows security via the extremely effective tactic of making the C: drive inaccessible.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-25h2#3801msgdesc
[1] AKA #Microslop these days.
#security #WeveHeardOfIt #WindowsUpdate #WindowsUpdates #Windows11 #WindowsSecurity #oops #brick #quality #qwality #Microsoft
-
One of Microsoft's [1] recent #Windows 11 updates improves Windows security via the extremely effective tactic of making the C: drive inaccessible.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-25h2#3801msgdesc
[1] AKA #Microslop these days.
#security #WeveHeardOfIt #WindowsUpdate #WindowsUpdates #Windows11 #WindowsSecurity #oops #brick #quality #qwality #Microsoft
-
One of Microsoft's [1] recent #Windows 11 updates improves Windows security via the extremely effective tactic of making the C: drive inaccessible.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-25h2#3801msgdesc
[1] AKA #Microslop these days.
#security #WeveHeardOfIt #WindowsUpdate #WindowsUpdates #Windows11 #WindowsSecurity #oops #brick #quality #qwality #Microsoft
-
One of Microsoft's [1] recent #Windows 11 updates improves Windows security via the extremely effective tactic of making the C: drive inaccessible.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-25h2#3801msgdesc
[1] AKA #Microslop these days.
#security #WeveHeardOfIt #WindowsUpdate #WindowsUpdates #Windows11 #WindowsSecurity #oops #brick #quality #qwality #Microsoft
-
In the last week or so, #Microsoft's CEO Satya Nadella announced that they were going to pull back from doing new feature work for #Windows for a bit, and focus on bug fixes and other quality-of-life improvements for users and administrators. Windows' already shaky reputation has taken a beating over the last year as it seems that every monthly rollup #patch, and many out-of-band #patches, introduce new problems at the same rate as they fix previous ones.
Is this giving you deja vu? It should. Remember a couple or three years ago, when the same guy announced that Microsoft was going to focus on security? They were in the middle of a long spell of brutal security holes found in all their products. Remember how they told their #engineers "If you have to choose between doing a feature and doing security, choose security"?
Remember how you never heard about that initiative again?
It's the same thing here. #PR garbage in service of a narrative that no, Windows' horrible security, usability, and #stability aren't actually that bad, so that MS can focus on their core competencies of buzzword promotion, stock market analyst manipulation, and monopoly abuse.
Perhaps someone in Microsoft management actually believes these refocusing efforts are genuine - but if you don't change the incentives, they won't actually take hold.
#PR #marketing #buzzword #MSWindows #SatyaNadella #security #WeveHeardOfIt #stability #crash #rollup #monopoly #MemoryHole
-
In the last week or so, #Microsoft's CEO Satya Nadella announced that they were going to pull back from doing new feature work for #Windows for a bit, and focus on bug fixes and other quality-of-life improvements for users and administrators. Windows' already shaky reputation has taken a beating over the last year as it seems that every monthly rollup #patch, and many out-of-band #patches, introduce new problems at the same rate as they fix previous ones.
Is this giving you deja vu? It should. Remember a couple or three years ago, when the same guy announced that Microsoft was going to focus on security? They were in the middle of a long spell of brutal security holes found in all their products. Remember how they told their #engineers "If you have to choose between doing a feature and doing security, choose security"?
Remember how you never heard about that initiative again?
It's the same thing here. #PR garbage in service of a narrative that no, Windows' horrible security, usability, and #stability aren't actually that bad, so that MS can focus on their core competencies of buzzword promotion, stock market analyst manipulation, and monopoly abuse.
Perhaps someone in Microsoft management actually believes these refocusing efforts are genuine - but if you don't change the incentives, they won't actually take hold.
#PR #marketing #buzzword #MSWindows #SatyaNadella #security #WeveHeardOfIt #stability #crash #rollup #monopoly #MemoryHole
-
In the last week or so, #Microsoft's CEO Satya Nadella announced that they were going to pull back from doing new feature work for #Windows for a bit, and focus on bug fixes and other quality-of-life improvements for users and administrators. Windows' already shaky reputation has taken a beating over the last year as it seems that every monthly rollup #patch, and many out-of-band #patches, introduce new problems at the same rate as they fix previous ones.
Is this giving you deja vu? It should. Remember a couple or three years ago, when the same guy announced that Microsoft was going to focus on security? They were in the middle of a long spell of brutal security holes found in all their products. Remember how they told their #engineers "If you have to choose between doing a feature and doing security, choose security"?
Remember how you never heard about that initiative again?
It's the same thing here. #PR garbage in service of a narrative that no, Windows' horrible security, usability, and #stability aren't actually that bad, so that MS can focus on their core competencies of buzzword promotion, stock market analyst manipulation, and monopoly abuse.
Perhaps someone in Microsoft management actually believes these refocusing efforts are genuine - but if you don't change the incentives, they won't actually take hold.
#PR #marketing #buzzword #MSWindows #SatyaNadella #security #WeveHeardOfIt #stability #crash #rollup #monopoly #MemoryHole
-
In the last week or so, #Microsoft's CEO Satya Nadella announced that they were going to pull back from doing new feature work for #Windows for a bit, and focus on bug fixes and other quality-of-life improvements for users and administrators. Windows' already shaky reputation has taken a beating over the last year as it seems that every monthly rollup #patch, and many out-of-band #patches, introduce new problems at the same rate as they fix previous ones.
Is this giving you deja vu? It should. Remember a couple or three years ago, when the same guy announced that Microsoft was going to focus on security? They were in the middle of a long spell of brutal security holes found in all their products. Remember how they told their #engineers "If you have to choose between doing a feature and doing security, choose security"?
Remember how you never heard about that initiative again?
It's the same thing here. #PR garbage in service of a narrative that no, Windows' horrible security, usability, and #stability aren't actually that bad, so that MS can focus on their core competencies of buzzword promotion, stock market analyst manipulation, and monopoly abuse.
Perhaps someone in Microsoft management actually believes these refocusing efforts are genuine - but if you don't change the incentives, they won't actually take hold.
#PR #marketing #buzzword #MSWindows #SatyaNadella #security #WeveHeardOfIt #stability #crash #rollup #monopoly #MemoryHole
-
In the last week or so, #Microsoft's CEO Satya Nadella announced that they were going to pull back from doing new feature work for #Windows for a bit, and focus on bug fixes and other quality-of-life improvements for users and administrators. Windows' already shaky reputation has taken a beating over the last year as it seems that every monthly rollup #patch, and many out-of-band #patches, introduce new problems at the same rate as they fix previous ones.
Is this giving you deja vu? It should. Remember a couple or three years ago, when the same guy announced that Microsoft was going to focus on security? They were in the middle of a long spell of brutal security holes found in all their products. Remember how they told their #engineers "If you have to choose between doing a feature and doing security, choose security"?
Remember how you never heard about that initiative again?
It's the same thing here. #PR garbage in service of a narrative that no, Windows' horrible security, usability, and #stability aren't actually that bad, so that MS can focus on their core competencies of buzzword promotion, stock market analyst manipulation, and monopoly abuse.
Perhaps someone in Microsoft management actually believes these refocusing efforts are genuine - but if you don't change the incentives, they won't actually take hold.
#PR #marketing #buzzword #MSWindows #SatyaNadella #security #WeveHeardOfIt #stability #crash #rollup #monopoly #MemoryHole
-
Another #Fortinet critical security hole, so it must be a day that ends in "Y".
-
Another #Fortinet critical security hole, so it must be a day that ends in "Y".
-
Another #Fortinet critical security hole, so it must be a day that ends in "Y".
-
Another #Fortinet critical security hole, so it must be a day that ends in "Y".
-
Another #Fortinet critical security hole, so it must be a day that ends in "Y".
-
"To serve you better, we're raising the price of your home internet plan by $5 per month"
Thanks, #Sasktel !
(This is a company I already pay $3,200 / year for internet, TV, and landline)
#WorseIsBetter #ToServeYouBetter #CustomerService #WeveHeardOfIt #ripoff #internet
-
Breaking localhost network functionality is an impressive achievement.
Pushing that breakage out undetected in a general availability update of your current mainstream OS is even more impressive.
But the real WTF is why it was even possible in the first place. Quoting The Register's coverage:
> The bug, introduced in build 26100.6899, has been traced to HTTP.sys,
> the Windows kernel component that handles local HTTP traffic."the Windows kernel component that handles local HTTP traffic" is a phrase that has no reason to exist in the English language. I can only imagine how many security vulnerabilities having HTTP/2 in the kernel makes possible.
#Windows #security #breakage #broken #localhost #networking #Windows11 #Microsoft #qwality #QualityWeveHeardOfIt #WeveHeardOfIt #HTTP #kernel
-
Breaking localhost network functionality is an impressive achievement.
Pushing that breakage out undetected in a general availability update of your current mainstream OS is even more impressive.
But the real WTF is why it was even possible in the first place. Quoting The Register's coverage:
> The bug, introduced in build 26100.6899, has been traced to HTTP.sys,
> the Windows kernel component that handles local HTTP traffic."the Windows kernel component that handles local HTTP traffic" is a phrase that has no reason to exist in the English language. I can only imagine how many security vulnerabilities having HTTP/2 in the kernel makes possible.
#Windows #security #breakage #broken #localhost #networking #Windows11 #Microsoft #qwality #QualityWeveHeardOfIt #WeveHeardOfIt #HTTP #kernel
-
Breaking localhost network functionality is an impressive achievement.
Pushing that breakage out undetected in a general availability update of your current mainstream OS is even more impressive.
But the real WTF is why it was even possible in the first place. Quoting The Register's coverage:
> The bug, introduced in build 26100.6899, has been traced to HTTP.sys,
> the Windows kernel component that handles local HTTP traffic."the Windows kernel component that handles local HTTP traffic" is a phrase that has no reason to exist in the English language. I can only imagine how many security vulnerabilities having HTTP/2 in the kernel makes possible.
#Windows #security #breakage #broken #localhost #networking #Windows11 #Microsoft #qwality #QualityWeveHeardOfIt #WeveHeardOfIt #HTTP #kernel
-
Breaking localhost network functionality is an impressive achievement.
Pushing that breakage out undetected in a general availability update of your current mainstream OS is even more impressive.
But the real WTF is why it was even possible in the first place. Quoting The Register's coverage:
> The bug, introduced in build 26100.6899, has been traced to HTTP.sys,
> the Windows kernel component that handles local HTTP traffic."the Windows kernel component that handles local HTTP traffic" is a phrase that has no reason to exist in the English language. I can only imagine how many security vulnerabilities having HTTP/2 in the kernel makes possible.
#Windows #security #breakage #broken #localhost #networking #Windows11 #Microsoft #qwality #QualityWeveHeardOfIt #WeveHeardOfIt #HTTP #kernel
-
Breaking localhost network functionality is an impressive achievement.
Pushing that breakage out undetected in a general availability update of your current mainstream OS is even more impressive.
But the real WTF is why it was even possible in the first place. Quoting The Register's coverage:
> The bug, introduced in build 26100.6899, has been traced to HTTP.sys,
> the Windows kernel component that handles local HTTP traffic."the Windows kernel component that handles local HTTP traffic" is a phrase that has no reason to exist in the English language. I can only imagine how many security vulnerabilities having HTTP/2 in the kernel makes possible.
#Windows #security #breakage #broken #localhost #networking #Windows11 #Microsoft #qwality #QualityWeveHeardOfIt #WeveHeardOfIt #HTTP #kernel
-
Between this and the "Recall" debacle, I think we can put a pin in the idea that anyone at Microsoft is doing security reviews of designs before they're built. Or before they're deployed. Or pretty much anytime.
So much for "If you have to choose between a feature and security, do security" from not very long ago, eh?
#security #MS #Microsoft #SecurityWeveHeardOfIt #WeveHeardOfIt #Recall