It’s clear that Safari is not a top prio at Apple, even though it’s probably the most important app on their operating systems. Contrast with Google that needs Chrome to exert their control over the web.
[deleted]
Exploiting IndexedDB API information leaks in Safari 15
41–50 of 99 posts
Re: Exploiting IndexedDB API information leaks in Safari 15
#42Apple’s tight-fisted control of browser engines on iOS leads to worse security and privacy for the whole platform.
Re: Exploiting IndexedDB API information leaks in Safari 15
#43Earlier quoted context omitted.
It would seem I’m not alone in thinking that many web features are too implicit. “Dialog fatigue” or “ok-click syndrome” are real problems, but for many features I think the correct behavior is probably not a silent grant. Anything that consumes the user’s resources after navigating away from the page should probably require direct user consent in some form or another.
Yep... look at just the cookie prompts,.. they suck, the users just click "agree", and if they want to disagree, they have to invest sometimes literal minutes, to unheck all the cookie providers. The default should be always to delete everything after a website/tab is closed. Want to store a login? Set up a button next to the url bar to enable persistant storage for that specific webpage, and you're done.
Cookie dialogs are set up that way because they know people will agree. A website I visit regularly (and have a subscription for, soundonsound.com), had a very easy cookie dialog. But no longer. Now you must accept their cookies (it’s quite a lot, really). One can only guess why.
Re: Exploiting IndexedDB API information leaks in Safari 15
#44Safari 14 had this nasty IndexedDB bug last year: https://bugs.webkit.org/show_bug.cgi?id=226547 and I had to add https://github.com/jakearchibald/safari-14-idb-fix to all my sites using IndexedDB. Now this. Why the hell are they messing with IndexedDB? Last IDB shitstorm was discussed at https://news.ycombinator.com/item?id=27509206 .
IndexedDB on Safari has had issues it feels like since day one. IIRC there was a full rewrite somewhere along the way too, and still problems seemingly every Safari release. My favorites were the iOS upgrades that simply deleted all IDB data.
Super frustrating, makes me glad I’m not currently building anything that relies on significant local storage.
The web could fill so many needs instead of using apps, but with crap like this it’s no surprise that it still doesn’t.
Re: Exploiting IndexedDB API information leaks in Safari 15
#45It's sad how buggy IndexedDB is in Safari, and in general how much pain Safari causes to web developers and consequently their users.
I hope regulators will eventually force support for other browsers (that can install apps) in iOS, I don't understand how Apple is allowed to have such a tight control on the market.
Re: Exploiting IndexedDB API information leaks in Safari 15
#46I rarely (never?) see Apple engineers posting in these threads. With other big tech organizations some kind of insider insight is occasionally provided. Is Apple’s culture of secrecy that strong? Is it a sense of superiority? Is it embarrassment? Are they just not here? As a mid-career engineer with highly marketable skills and an inbox stuffed with job offers the only two companies I would never entertain an offer f…
Why does (near) silence equate to incompetence?
Re: Exploiting IndexedDB API information leaks in Safari 15
#47I rarely (never?) see Apple engineers posting in these threads. With other big tech organizations some kind of insider insight is occasionally provided. Is Apple’s culture of secrecy that strong? Is it a sense of superiority? Is it embarrassment? Are they just not here? As a mid-career engineer with highly marketable skills and an inbox stuffed with job offers the only two companies I would never entertain an offer f…
>I rarely (never?) see Apple engineers posting in these threads.
You mean on HN? Oh they do, From JSC to Webkit Engineers. Mostly on technical discussions.
Re: Exploiting IndexedDB API information leaks in Safari 15
#48I rarely (never?) see Apple engineers posting in these threads. With other big tech organizations some kind of insider insight is occasionally provided. Is Apple’s culture of secrecy that strong? Is it a sense of superiority? Is it embarrassment? Are they just not here? As a mid-career engineer with highly marketable skills and an inbox stuffed with job offers the only two companies I would never entertain an offer f…
Why does (near) silence equate to incompetence?
My perception of Apple’s (software) engineering capabilities comes from being their customer and using their products daily.
This might be different if I had some perception of what was happening internally or how problems are approached. But from what I see nobody at Apple cares. So the silence contributes to the perception of incompetence by not counter-acting it.
Re: Exploiting IndexedDB API information leaks in Safari 15
#49I rarely (never?) see Apple engineers posting in these threads. With other big tech organizations some kind of insider insight is occasionally provided. Is Apple’s culture of secrecy that strong? Is it a sense of superiority? Is it embarrassment? Are they just not here? As a mid-career engineer with highly marketable skills and an inbox stuffed with job offers the only two companies I would never entertain an offer f…
>I rarely (never?) see Apple engineers posting in these threads. You mean on HN? Oh they do, From JSC to Webkit Engineers. Mostly on technical discussions.
Maybe I’m just not reading the right threads then. It’s all a perception.
Re: Exploiting IndexedDB API information leaks in Safari 15
#50I rarely (never?) see Apple engineers posting in these threads. With other big tech organizations some kind of insider insight is occasionally provided. Is Apple’s culture of secrecy that strong? Is it a sense of superiority? Is it embarrassment? Are they just not here? As a mid-career engineer with highly marketable skills and an inbox stuffed with job offers the only two companies I would never entertain an offer f…
I believe it’s considered a durable offence to give out secret information at Apple. Similar, with few exceptions, Apple employees are not allowed to contribute to open source projects.
It’s a shame really, because otherwise I think I’d quite like working at Apple. Their laser focus on product is right up my street.