The main problem is that when you use the same tools that you use at work for your game, then your game starts to feel like work.

The real question you have to ask yourself is how long they can do that before it starts to affect their bottom line.

(Not intending to pick a fight, but intended for levity…)

But this is a vegan cat bringing you its prey.

This is what I always assumed the game root was like.

The network was a fun album, but like the rest of their spin off it’s really a personal thing. But its gotta be hard to play the same thing day in, day out, putting out album after album to the sound of people telling you: you sold out. Its fun to see the depth even if its not your thing…. Mother Mary slaps.

Depends on if you are a music fan or a green day fan.

chik-fil-a…

it’s almost like moving from pensions to 401(k) programs only benefited the employers.

I’m not surprised… I think people (‘the ones that care at least’) would be horrified to know how much of this stuff slips through, because it’s hard (there are so many other things that are pulling at developers that something falls through the cracks). Most of the time the right answer is to bring it up. Then thank them when they resolve the issue (with beer and pizza money at the very least).

Looks like it’s waiting for approval, https://github.com/signalapp/Signal-Desktop/pull/6933 for anyone else thats interested.

I think the issue that they are trying to make is that there are modern ways of protecting the keys with hardware level security, that aren’t being used. As someone who works in AppSec this is all too common. All it takes is one library in an application to be popped (doesn’t have to be signal), and security keys end up leaked. If it isn’t already, I’m sure that signals keys will be included in exfil scripts.

Tools like TPM and SecureEnclaves (TrustZone,etc) mean that malware, and other nasties have a higher bar that they need to meet.