Lightnews — Scholar-powered news

Benjamin Marwell ☕ @bmarwell.de · 9h

Da kommt man im Kindergarten nicht drum rum. Zum Glück sofort entdeckt, zwei Tiere per Kamm entfernt, am gleichen Tag u. 9 Tage später mit Spezialshampoo und Kamm behandelt. Nichts gesehen. Ab Tag 2.

Kind hat quasi nichts gemerkt.

1

Benjamin Marwell ☕ @bmarwell.de · 19h

Hafermilch ist auch Verbrauchertäuschung.
Scheuermilch nicht, das nur nebenbei.

1

Benjamin Marwell ☕ @bmarwell.de · 3d

Because it is not asking for consent. That's the difference between opt-in and opt-out.
Second, transparency. Documentation is not enough, GDPR requires ACTIVE information of users.
Third, proof that the user consented.

IANAL, but I don't think this would hold in court (Europe).

2 1

Benjamin Marwell ☕ @bmarwell.de · 3d

A typo!

1

Benjamin Marwell ☕ @bmarwell.de · 3d

Thanks! Will take a look!

Benjamin Marwell ☕ @bmarwell.de · 4d

I think it is one, because it's opt-out and you don't get a prompt. Would need to look up, but collection of data which is not needed for operation is a problem, and you'd need to sign something, most probably.

Wonder what happens if I created a GDPR inquiry.

1

Benjamin Marwell ☕ @bmarwell.de · 4d

Liquidbase. 🤷🏻‍♂️

1

Benjamin Marwell ☕ @bmarwell.de · 4d

For a year now if you use the #OSS version:

www.liquibase.com/blog/product...

#gdpr #violation #telemetry

2 3

Benjamin Marwell ☕ @bmarwell.de · 4d

bsky.app/profile/bmar...

Benjamin Marwell ☕ @bmarwell.de · 4d

I stopped caring when they illegally enabled telemetry by default with opt-out instead of opt-in. I wonder I haven't heard of anyone going to court over this. Iirc it was even in a minor version bump...

1 1

Reposted by Benjamin Marwell ☕

joschi @joschi.xyz · 4d

I'm surprised that there wasn't more noise around the license change of #Liquibase from Apache License 2.0 to Functional Source License (FSL) in Liquibase 5.0.0.
github.com/liquibase/li...

Is just nobody using it anymore? 😅

#Java #OSS #licensing

Release Liquibase v5.0.0 · liquibase/liquibase

Liquibase Community 5.0 is a major release See the Liquibase Community 5.0 Release Notes for the complete set of release information. ⚠️ MAJOR CHANGES IN COMMUNITY AND COMMERCIAL DISTRIBUTIONS Liqu...

github.com

3 10 13

Benjamin Marwell ☕ @bmarwell.de · 4d

I stopped caring when they illegally enabled telemetry by default with opt-out instead of opt-in. I wonder I haven't heard of anyone going to court over this. Iirc it was even in a minor version bump...

1 1 4

Benjamin Marwell ☕ @bmarwell.de · 4d

I did read the docs multiple times and let AI autocomplete. But really, it's not hard.

It's more about design choices and my impression of SMUI.

1

Benjamin Marwell ☕ @bmarwell.de · 4d

No, just browsed through it to the first ~60 pages or so. Nothing surprising, I find svelte pretty easy to use if you like Vue.

Didn't look at transitions, but everything until svelte.dev/tutorial/sve... which doesn't work on mobile 😕

Binding to component instances • Svelte Tutorial

svelte.dev

1 1

Benjamin Marwell ☕ @bmarwell.de · 4d

Ah. Looks promising, if you know tailwind. But it's way more to type then Vuetify. I can see it's purpose, but for a small project, the configurability by having tailwind separated is overkill, sadly.

1

Benjamin Marwell ☕ @bmarwell.de · 4d

So every time there's a SMUI name clash change the name? So the same component has a different name depending on the svelte file? Urgh.

But yes, I know I can import "Card, { Content as CardContent }".

1

Benjamin Marwell ☕ @bmarwell.de · 4d

I meant importing of components for use as a child component (sorry, still learning)!
I think both Card and something else in SMUI can have a Content component, and Icon is also defined more than once IIRC.

1

Benjamin Marwell ☕ @bmarwell.de · 4d

Not saying it's not good, but some decisions in Vue just seem more evolved over time and more polished. I don't think svelte is "bad", the regret is more about "I never tried it before, I could have known, I'm slower now".

Benjamin Marwell ☕ @bmarwell.de · 4d

I seem unable to pass method references to subcomponents.
I can't put CSS classes on Svelte components.
Stores are built in, but they confuse me because of the runes - but that's only because I never used it before.
TS doesn't seem to be a first class citizen, rarely mentioned in docs.

4

Benjamin Marwell ☕ @bmarwell.de · 4d

Don't take my word for it, I'm a Java dev.
What I miss:
SMUI seems incomplete and underdocumented compared to Vuetify.
There is no router with a global hash setting.
{} directives seems like an extra template language compared to v-for.
Subcomponents names can clash, not with Vue templates... (1/x)

6

Benjamin Marwell ☕ @bmarwell.de · 4d

Used Svelte for a new side project.
Instant regret.

2 1

Benjamin Marwell ☕ @bmarwell.de · 5d

Official docs:
maven.apache.org/resolver/exp...

Helpful SO answer:
stackoverflow.com/a/78746428/1...

#Java #maven #security #maven4 @cstamas.bsky.social

How to use Maven Resolver "Trusted Checksums" to ensure artifact integrity?

Recent Maven Artifact Resolver versions have a "Trusted Checksums" feature. As mentioned for example in this Reddit comment it seems that feature can be used to ensure artifact integrity ...

stackoverflow.com

1 3

Benjamin Marwell ☕ @bmarwell.de · 5d

100% agreed. Whenever I touch npm or pip, I see why Maven (and Gradle) and the Java ecosystem are good the way they are.
We're even getting trusted checksums in Maven 4! Like a "proper" package-lock...

2 2 4

Benjamin Marwell ☕ @bmarwell.de · 6d

So, plugins cannot do net requests? Because if they can, they could send any local data anywhere. Or download anything in the background. But I may be missing something?

1

Benjamin Marwell ☕ @bmarwell.de · 6d

Great news! However, I fear this might open the gate for CVEs. I hope, there is some user confirmation of permission implementation?

1 1

Benjamin Marwell ☕ @bmarwell.de · 7d

🙈 I prefer portafilter... 😋

1