Hacker Newsnew | past | comments | ask | show | jobs | submit | chinathrow's commentslogin

> so I only use CarPlay via a wired USB connection.

Wouldn't that also share your phones internet connection with the car?


Firefox.

is it as greedy as chrome for the ram?

In my recent experience: definitely yes, though not significantly worse. Unless you have [many] hundreds of tabs open (which I do as I have neither executive function nor organisational skills), or have a machine with very limited RAM, I don't think you'll notice a difference.

This is anecdata, of course, take with a pinch of your preferred flavouring powder.


Chrome on Windows is running with thousands of tabs "open" over dozens of windows, but it does practically max out on a certain number of tabs per window (not just the GUI, but something in the memory architecture), and it does stack fat cache which will crash the whole thing if it digs deeper than your available space.

Windows even runs (semi-playably) 2020's shooters in this condition, though you need to kill any windows close to the tab limit that are full of recently opened tabs.

[Yes, I know, the horror]


Yes: https://www.phoronix.com/review/firefox-chrome-2026/4

> Chrome also came in at slightly lower memory consumption across all the benchmarks with total memory usage on average at 4.67GB to Firefox at 4.83GB.


[flagged]


Yes, actually!

Well, it does require you to install an extension[0], but it can be done.

[0]: <https://github.com/mozilla/video-bg-play>


Thats good to know, but I am a "out of the box" person. I never want to have to manually install extensions as thats just more stuff to remember when setting up a new machine. Yea thats a me problem, but still.

It used to support it out-of-the-box as well, but it's technically against YouTube's ToS to allow this without paying for a premium, so now you need this as an extra hoop.

Why should a browser be policing YouTube’s ToS for them?

Agreed, this sounds strange indeed. Much more likely is that Google found a reliable way to detect the screen status using a standard feature and Mozilla just implements the standard neutrally

Wouldn't know, as I have never been in charge of one, but I imagine Google having the power to make your browser completely irrelevant would be a pretty strong incentive.

You want to have your cake and eat it too, I think the best solution in your case is paying for youtube

Or I just keep using brave and not pay for the biggest media corpo that just passed Disney in revenue.

Was Brave pre-installed on your computer or did you remember to install it?

You don't install software on your machines that didn't come pre-installed/configured?

They're literally asking for a paid YouTube feature to be free "out of the box". Lol wild.

Nah I want general media playback in the background. Doesn't matter if its Youtube or any other platform. I dont want giga corpos to monetize my attention. Youtube does well enough from ads anyway ;)

Even youtube's app itself doesn't allow that unless you pay. I suspect they've nobbled most browsers into not allowing it, either by technical measures or (more likely) the strong-arm tactic of saying “if you don't block this we'll find a way to make the entire of youtube practically unusable on your browser”.

I've been using Grayjay recently which does allow that, amongst a number of other useful features (integrating other media sources, lack of adverts every few minutes in some content). Might be worth considering as an option.


Kagi’s Orion browser on iOS is able to play YT vids in the background.

It allows you to play youtube without ads with ublock origin.

I used ublock origin for a while, but I kept having issues with it on Youtube due to Youtubes anti adblock measurements. Brave for some reason always had a fix for it pretty quickly, so I never experienced these issues with it. Maybe I could try a different browser again on my next machine.

In iOS kinda yes; you have to request desktop version, and once you activate the lock screen for the first time you have to press “play”. Then it just plays and auto plays in the background.

Don’t know about android, but there is also an extension there that blocks the visibility page api for YouTube.


Why not simply use NewPipe [0]?

You also get ad filtering and you can download Audio/Video streams from within the app.

[0] https://newpipe.net/


You can play yt video in firefox with locked screen but you need to use desktop mode

Yes. That's the primary reason I use it, but you have to install an extension called "Video Background Play Fix".

Tubular app does, and it blocks ads

Yes, that looks like an escape rope for pilots.

https://www.aviation-gadgets.com/photo/virgin-australia-boei...


I am glad you found that. Someone asked our guide, and I missed the explanation!

> Yeah, so, to be clear: I'm fairly sure Linux will also have its fair share of issues that I occasionally would have to repair.

Issues with account, login and passwords would be none of them. Sure, there are other areas of common issues at times, but I have never, ever had issues logging into any of the linux OS I ran for the last 23years or so.


I've had PAM break due to distro's ridiculous policy of updating the system in place allowing for invalid combinations of files to exist. I've had Linux distros break the booting process countless times.

This triggered a freeze with subsequent shutdown of my Lenovo X1 running Ubuntu.

It's also trivially easy to fix. 1 min delete and deploy.


I'm guessing it's not trivial to fix without breaking other things? The weakness seems to be that anyone can turn UUIDs into details like email. But I assume this functionality is necessary for other flows so they can't just turn off all UUID->email/profile look ups. And similarly hiding author UUIDs on posts also isn't trivial.

Conceptually, I agree it should be easy, but I suspect they're stuck with legacy code and behaviors that rely on the current system. Not breaking anything else while fixing this is likely the time consuming part.


This is a rendering artifact, nothing more. If you can tokenize and protect PII on your platform, you can protect PII on your public pages.

    if (metadata.is_public)
Simple fix.


But a user's email isn't always forbidden. The API endpoint which turns UUIDs into a user email presumably also has use cases where you do want to expose the user email. For example, when seeing a list of people you've already invited via email to collaborate with, or listing users within your organization, etc. So a user's email isn't always forbidden PII, it depends on the context.

The trouble is the UUID->email endpoint has no idea what the context is and that endpoint alone can't decide if it should expose email or not. And then public Notion docs publicly expose author UUIDs.

Their mistake was architecting things this way. From day 1 they should have cleanly separated public identifiers from privileged ones. Or have more bespoke endpoints for looking up a UUID's email for each of the narrow contexts in which this is allowed. They didn't do this, and they certainly should have, but fixing this mess is likely a non-trivial amount of work. Though I bet it could be done immediately if they really cared and didn't mind other things breaking.

I'm absolutely not defending their choice to expose emails in this way. They should have addressed this years ago when it was first reported, and I want them shamed for failing to care. But just trying to say it's likely not a one line fix.


A users email should always be forbidden…

It is not a public marker, it’s PII.


Of course they can fix it, come on.

They can easily withold information they put out intenionally.


The whole point of that comment is that it's not that easy. There are potential side effects and consequences that are difficult to architect around.


The fix IS easy. The side effects need to be dealt with accordingly. Why do you defend shit like this?


Except it is.

If you can't easily architect around it, then don't do what you're trying to do.

"Oh I needed to disclose user data in order to make more money" isn't an acceptable excuse.


No one's talking about excuses.


Looks like everyone does talk about excuses though.


> Oh I needed to disclose user data in order to make more money

hmm maybe they should've paywalled?


You literally don’t know that. Add this to the mammoth file titled “HN comments in which the author makes some completely unsubstantiated technical claim”


It literally is easy to fix. For example they could shut down the servers. Which is what they should do immediately if there is no faster fix for a privacy leak like that.

This is, as a notion user with public pages, beyond stupid.


Don't attribute to stupidity what can be explained by malice.


Yes! I’ve always maintained Hanlon’s razor needs to be reversed in matters of computer security.


Theres just a higher form of malicious stupidity, where the people who own these platforms can be selectively, maliciously stupid where it comes to security.


This phrase needs way more traction.


Middle ages, in 2026. Dubai hasn't changed.


The fun fact about PHP is that, there is no Pipeline problem at all. You can serve your scripts the hell you like to do. You can scale as you wish, either with vertical or horizontal. You can use Apache, nginx, etc, no one cares.


Yeah, PHP is very simple to deploy, once you have either apache/nginx/caddy/$webserver and also PHP-cgi/PHP-fpm/$php-backend and also understand unix + permissions + files and a whole lot of other things. Or alternatively, learn how to use cPanel as a user, or worse, learn what (s)FTP is, or whatever the really low end web hosters use nowadays.

I wish others learnt the "boring" way of managing your own servers, setting things up as they should, deploy processes and what not, but realistically, some people just want to run one command/click a button and have it updated, and probably that's for the better too. This Laravel Cloud thing are for those, not for people who want to/know how to run their own servers.


I think you're conflating a talent pipeline with ease of running PHP. Those are not the same thing at all


Wow Taylor, if you read this: as someone who just bought in to the Laravel ecosystem, how about no?


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: