NPM (well Microsoft) forcibly took guy's package to give the name to this company: https://www.bbc.com/news/uk-45568276

Since then the name is basically squatted?

Whether you use left-pad or not is up to you... but this Kik story is just a bad look for Microsoft all around.

You're aware this happened way before the Microsoft acquisition right?

> You're aware this happened way before the Microsoft acquisition right?

you phrasing implies that you would say what I said if you knew that acquisition happened later. Weird but OK.

Anyway then let's just say it is a bad look for NPM and any future buyers who decided this is a worthy company

What is weird? Your phrasing implies that this happened under the stewardship of Microsoft (and is somehow related to Microsoft policies or leadership)

Could you not spoil things?

> for human eyes only - anyone who lets any AI train on, or even consider, any text in these ranges goes straight to jail. Fnord, "that doesn't look like anything to me".

Won't work because on day 0 someone will write a conversion library and apparently if you are big enough and have enough lawyers you can just ignore the jail threat (all popular LLMs just scrape internet and skip licensing any text or code. Show me one that isn't)

Is GSAP still widely used today?

Yes it is! It was acquired by Webflow a few months ago. They made all its extra features free. I specialize in GSAP. It's common to see it used with three.js or SVG on high-profile sites.

Didn't know, cool.

I think it's also just ugly to be honest. Completely opposite of Apple's values of focusing on one thing at a time and even basic grid alignment. And I am an Apple fanboy....

> they could exfiltrate your data through the same connection that they're using for their legitimate purpose.

their traffic can be monitored. They can secretly exfiltrate if they hide it, use pin certs or use some custom encryption. This should be a red flag

> Should password managers just store all of your passwords in cleartext instead of encrypting them, since you should be using FDE?

Better analogy, should every random app bundle own custom crypto and encrypt all files and ask user for password just in case some user does not set login password?

An app should do what it does, if secure storage is not its task then it probably should leave it to the os and if it's not DNS resolving then it shouldn't DNS resolve. Is very annoying

How do you deal with pinning which most apps do now?

i hate it. hsts mixed with doh exist to take control, and transparency away from users, because most users never knew they had the option to begin with.

I just noticed that OP actually noted GLP in a later comment.

Just more evidence that HN downvotes/flags often mean actually you're right and people just feel too butthurt about it.