Post B48LjhOq6FphXUqsJk by ariadne@social.treehouse.systems
 (DIR) More posts by ariadne@social.treehouse.systems
 (DIR) Post #B47s7CniWHKYxpmTRo by ariadne@social.treehouse.systems
       1 likes, 0 repeats
       
       very cool.  this is why i hate the modern web.
       
 (DIR) Post #B47sNXznU9ttKeDvPs by rpgwaiter@based.zone
       0 likes, 0 repeats
       
       @ariadne trying to imagine any reason why a webdev would need this information, I got nothing
       
 (DIR) Post #B47sVMoYwO5myFhIjw by whitequark@social.treehouse.systems
       0 likes, 0 repeats
       
       @ariadne anti-fingerprinting feels like a pyrrhic victory to the extent it can be achievedsure, random webpages probably don't need to know how many cores you have (and thoughtful design could keep this available to those few which maybe do). but the thing that made me conclude this is Accept-Language:, a feature that is intentionally made worse for bilingual users in service of reducing fingerprintability. i think i'd rather have that than a (in practice) false promise about privacy
       
 (DIR) Post #B47thxnPN2GN5zjBYG by lina@vt.social
       0 likes, 0 repeats
       
       @whitequark @ariadne At some point we need to start legislating these things instead of trying to patch over them with technology.Like, there is zero legitimate reason for fingerprinting to uniquely identify individual users at scale. It should simply be illegal. This does not preclude stuff like identifying bots. Ad stuff should just use cookies where allowed.
       
 (DIR) Post #B47thxykgrKxfB2FEW by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @lina @whitequark agreed, but also why do websites need to know i have a fucking threadripper
       
 (DIR) Post #B47u0Q17BSyJpmwHk8 by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @lina @whitequark like that is my point here, i cannot think of any reason why a website needs to know i have 128 threads
       
 (DIR) Post #B47uA3B0xUcLtNA7Ye by whitequark@social.treehouse.systems
       0 likes, 0 repeats
       
       @ariadne @lina i ship an FPGA toolchain in the browser. it can* use multithreading. it needs to know how many threads to run to not contend on resources uselessly* currently not built in that configuration for a variety of reasons that is not specifically tied to the web
       
 (DIR) Post #B47vm5EfqqfHEiZcJc by whitequark@social.treehouse.systems
       0 likes, 0 repeats
       
       @ariadne @lina it's not a reason to expose information useful to, like, 1 site you might maybe use, to every of them, and frankly i am not aware of any material benefit from running more than 4 of p&r threads in parallel so it could probably be capped to that. but i think this is a legitimate reason
       
 (DIR) Post #B47vm5Rn459ltOi5lA by mcc@mastodon.social
       1 likes, 0 repeats
       
       @whitequark @ariadne @lina a problem is we use the web browser for two totally separate purposes: as a way of looking at transient text/image/video content; and as the only surviving application platform. we want two totally opposite things out of these two different platforms ("control the computer" vs "touch nothing"), but insist on not delineating the two website metacategories. and microsoft/apple/android are only gonna keep making it harder to offload applications back onto "computers"
       
 (DIR) Post #B47vm5lHtakirrpf9M by mcc@mastodon.social
       1 likes, 0 repeats
       
       @whitequark @ariadne @lina The era where Flash was the "escalated privilege" layer of the web, and click-to-flash plugins were common, was the only time either the developer or user permissions model here made sense
       
 (DIR) Post #B48GFfSoEYS94oZMae by sertonix@social.treehouse.systems
       0 likes, 0 repeats
       
       @ariadne I think as long as web browsers are multi threaded it would be possible to fingerprint the sheduler which probably exposes the number of cores through some timing attacks. So I don't think the modern web caused an extra metric to exist (as long as you don't try to spoof the value)
       
 (DIR) Post #B48LjgmYObCxckwIds by sabrina@fedi01.unicornsparkle.club
       0 likes, 0 repeats
       
       @mcc @whitequark @ariadne @lina I want to know if anybody is working on separating the web into those two things. It can only make things better for everyone. We can get hypertext documents that load fast and look better than ever, and network-sourced applications with runtimes that are performant on a potato.
       
 (DIR) Post #B48Ljh3DOeXGSQjbc0 by iyashikei_kris@mstdn.social
       0 likes, 0 repeats
       
       @sabrina @mcc @whitequark @ariadne @lina I mean for all intents and purposes #geminiprotocol is a great attempt at having a "markdown only web". We can debate how much regular folks actually want two webs, one for documents and one for runtimes
       
 (DIR) Post #B48LjhFceWSb4uXVx2 by sabrina@fedi01.unicornsparkle.club
       0 likes, 0 repeats
       
       @iyashikei_kris @mcc @whitequark @ariadne @lina I think the problem with Gemini isn’t that nobody wants two webs, but that most people don’t want a second web that is only a minimalist plain text web. I think a hyperdoc web should still have all the styling features anybody could want. It can shed (most of) the scripting and the features in CSS that only exist for apps.
       
 (DIR) Post #B48LjhOq6FphXUqsJk by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @iyashikei_kris @mcc @whitequark @lina @sabrina the problem is Gemini doesn't have any content except for personal sites. I can't read news, for example from CNN, on Gemini.Until it has content that people want to consume it just isn't worth it to me to be interested...