Wouldn't you then need to keep up-to-date backups but ensure the backups still stay secure? Learn all about and generate SPF, DKIM, and DMARC records but still regularly get sent to the spam folder or IP blacklists if your recipient has a big-provider email? Deal with self-rolled 2FA or passkeys and secure recovery methods. If you're self-hosting at your house, you're at the whims of nature, infrastructure, and creatures not disturbing the machine. You are the one patching security holes, or if you run someone else's containerized or easy-setup mail server, making the decision between daily updates that'll catch supply chain attacks and potentially introduce instability or new security holes; or monthly/annual/never updates that virtually ensure you have a few CVEs active at all times; or the lead maintainer quits/dies and you watch it deteriorate while users groupthink how to migrate their mail to a different container.
Sorry for the pessimism. I can't suggest a better alternative. I have one account on Gmail (for impersonal communication like shopping) and another on Fastmail and occasionally reflect on how annoying it will be to lose access to either.
>Learn all about and generate SPF, DKIM, and DMARC records but still regularly get sent to the spam folder or IP blacklists if your recipient has a big-provider email?
This is my biggest complaint when self hosting. You do everything right and they still send your mail to junk or just silently discard it while telling you 250-Ok for "reasons".
Although I recently had a legit Microsoft email also end up in the junk folder so I feel better that they can't even get it right themselves.
Microsoft have also recently kicked out self hosters from their "Smart Network Data Services" portal by only allowing the ASN owner (ie. your cloud provider) to access it.
I bought multiple ThinkPads with "official Linux support" that had diverse, show-stopping bugs. Because Lenovo is a difficult partner (for one, their service centers don't test against Linux) I don't hesitate anymore to instantly return a new computer if it has even minor bugs while running Fedora or Ubuntu. If ANY feasible alternative to Lenovo existed, I would've switched five years ago.
If you asked me to pick out bright bold blue (#0000FF) and told me the format was "Lightness Chroma Hue" with valid ranges, I would guess "0.5 1.0 240". Not only is this "not visible on any monitor" by a very large margin but the oklch.com calculator states the spec fallback color is Dell logo blue and not bright at all while browsers will render "vibrant purple".
There's not "120 degrees of red, 120 degrees of green, 120 degrees of blue", so blue is not 240. Actual bright blue is hue 264. The "0-255 RGB" bright blue is 0.452 lightness, and max chroma on a really good monitor is something like 0.33. The lightness mostly makes sense, right? 0.5 is halfway between totally dark and completely washed out.
"Ok, so chroma tops at at 0.33" not so fast. You can crank up the chroma to 0.40 and still get either magenta (where lightness is around 0.74) or green (lightness around 0.78). So now you need to know a valid, nonlinear lightness range for each band of colors, because midpoint blue is different than midpoint red which is different from midpoint green.
From greyscale luminosity calculations and knowing about subpixels and bayer filters, I would've been able to guess that green is the color with the highest chroma, but then there's bright magenta, neck-and-neck. Oh. Until I move the lightness slider down on the web color picker, and then everything (especially peaks) in the chroma channel shifts around dramatically... So much for intuition.
While OKLCH makes it really convenient to select colors with properties you like along a gradient, the nonlinearity means either memorizing a bunch of base colors, using a color picker, or converting from a system that is "actually" intuitive. I can't really look at a trio of OKLCH numbers and predict the output color like I'd be able to with RGB, although this is mindful that RGB is also not linear (for the exact opposite reason as OKLCH) and I can only do that from decades of experience.
I'll concede that magenta and bright green and bold blue don't really have a place on the world wide web other than in a company logo, so these are outliers. Still, the OKLCH format is not what I'd call intuitive to a total beginner.
(Also, I'd very much not like to implement OKLCH calculations on a microcontroller until lighting companies start selling OKLCH LEDs.)
Thank you for putting in words why I struggle with OKLCH. I found it non-intuitive to learn as a human being despite its "gradient" advantage. I still stick to HSL. (Though I wish web had adopted HSB)
They'd care for us but wouldn't give us total freedom or value our input. My dog has no say in the computer I buy and goes on walks and visits other dogs when I decide, but I still think it's cool to watch her ambush mice or catch a frisbee.
A superintelligent being would probably find intrigue in the uniquely human things we do and will keep us socialized and meet our basic needs because it's how to keep us pleasant companions.
My Thinkpad from the same 2022 timeframe (a Z13 Gen 1) was very awful all around, particularly w.r.t. sleep. Lenovo serviced it multiple times, never fixing it and refusing to complete a return under warranty. (Happy ending: Laptop got stolen. Insurance paid.)
I have the hope that Lenovo acquiring Phoenix will fix some of the awfulness.
There is a guide on Reddit, "How to enter advanced BIOS options on Gen 1 T15(g/p), P15(v), P17" which also applies to each generation of P16. It's possible a setting in there will finally cure your laptop's insomnia?
Corners and borders have been a pain since the beginning of GeoCities. I do wish fancy corners would go away---to the point that I actively make this happen with a global Stylus rule setting border-radius to 0.
Look: Three of these 10 "improvements" deal with corner shaping, and two more will inevitably need extending, as I imagine frontend devs get around to, "GPT make reading-flow responsively round only the outside corners," and, "Claude how to squircle the individual grid cell borders when using rule gap decorations."
I understand CSS wants to do all of the things and do them well, but then the eye candy gets overused on every webpage and web framework template to the point that practically no site feels different; it's all "logo, four links, giant-ass 'call to action' rounded button in the bold colored top nav, rounded corner cards in a grid layout 3 to 4 cells wide (or in a slider), gratuitous whitespace, rounded corner everything actually, maybe a gradient text or background or both, hamburger menu on mobile, all styles inlined in the HTML classes".
Going down the list of Fortune companies, three of the top 50 don't "round corner" everything: Berkshire, Exxon, Morgan Stanley. A few more would count if you permit rounded buttons only. Marathon is a weird outlier; they have hexagonally rounded elements buttons. (Also, some of these sites must be hosted on a Zune. It takes 50 full seconds to load Cencora's main page.)
I can't say that I do web dev any better, although I am disappointed by the looks of the modern internet, and I don't think more artistic flair will make it better, just as I don't think houses and cars and suits benefit from strange shapes and colors.
although maybe more choice will free us from the confines of everything looking like Tailwind? (Despite my complaints, I am grateful for progress and also am absolutely not looking forward to people misusing functions and dropping 18 errors and 11 warnings into console.log AHEM LENOVO because they can't be troubled to write good code/markup.)
That's a spot-on summary of all websites I see. It seems particularly annoying given that most landing pages seem to be identical LLM-output pages that require a lot of scrolling before you get to any "information" on the page.
The normal person will click the "Use password instead of passkey" link conveniently placed by the impersonator, who will then have an email address and set of user-provided password guesses that they can try on other domains.
Less than a week after this was posted, "Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites." (Source bleepingcomputer.com)
I get the sense this weakens the common argument that your 'passkey is bound to the domain it was created for'.
Sure, passkeys are still (on average) more secure (we assume) than strong passwords and TOTP.
I'll still take "email me when a login attempt is made (pass or fail)" and "I generate my own keys for something like Tailscale" and "2FA (especially single-use recovery codes, with email confirmation upon use) ONLY needed for account changes and banking". It's the right mix of convenience, recoverability, verifiability, and security.
Wouldn't you then need to keep up-to-date backups but ensure the backups still stay secure? Learn all about and generate SPF, DKIM, and DMARC records but still regularly get sent to the spam folder or IP blacklists if your recipient has a big-provider email? Deal with self-rolled 2FA or passkeys and secure recovery methods. If you're self-hosting at your house, you're at the whims of nature, infrastructure, and creatures not disturbing the machine. You are the one patching security holes, or if you run someone else's containerized or easy-setup mail server, making the decision between daily updates that'll catch supply chain attacks and potentially introduce instability or new security holes; or monthly/annual/never updates that virtually ensure you have a few CVEs active at all times; or the lead maintainer quits/dies and you watch it deteriorate while users groupthink how to migrate their mail to a different container.
Sorry for the pessimism. I can't suggest a better alternative. I have one account on Gmail (for impersonal communication like shopping) and another on Fastmail and occasionally reflect on how annoying it will be to lose access to either.
reply