Khalid

[Khalid @coder966]

{ لَا إِلَهَ إِلَّا أَنْتَ سُبْحَانَكَ إِنِّي كُنْتُ مِنَ الظَّالِمِينَ }

[Amazon Web Services @awscloud]

More AI-generated code doesn't make your team faster. It might actually slow you down.

[محمد علي ال رضي | Mohammed Ali Alradi @malradi]

الربيعة .. وزير التحوّل والملفات الطارئة

هناك قادة يديرون ملفات ، وهناك قادة إذا تعقّد الملف قالوا لك: افتح تذكرة ، وانتظر دورك ، وراجع الدعم الفني ، أما الدكتور توفيق الربيعة فله مدرسة مختلفة.

في حج هذا العام استضفنا 15 حاجاً من اليابان، وواجهتنا مشكلة تقنية كبيرة في منصة نسك، والتأشيرات لم تصدر، والوقت يركض أسرع منا نحو موسم الحج.

ورغم أنني لا أعرف معاليه شخصياً، أرسلت له رسالة SMS أشرح فيها المشكلة، كنت أتوقع أن يرد عليّ برقم خدمة العملاء أو رابط منصة الشكاوى.

لكن الرد كان كلمة واحدة فقط:
(أبشر)

حقيقة بعد كلمة (أبشر) كنت أراقب هاتفي أكثر مما أراقب منصة نسك! وخلال فترة وجيزة تمت معالجة المشكلة وصدرت التأشيرات، ثم بعد أسبوعين وصلتني رسالة أخرى من معاليه يؤكد فيها أن المشكلة حُلّت وأن التأشيرات صدرت.

هذه القصة القصيرة تختصر فلسفة قائد نجح في قيادة التحول في وزارة التجارة ثم وزارة الصحة واليوم في وزارة الحج والعمرة؛ قائد لا يرى المستفيد ( رقم طلب) بل
وزير التحوّل والملفات الطارئة

وبحمد الله أدى الحجاج اليابانيون مناسكهم بكل يسر وأمان، وعادوا بانطباع رائع عن المملكة وخدمة ضيوف الرحمن.

فشكراً لقيادتنا الرشيدة على ما تقدمه من جهود عظيمة في خدمة الحجاج، وشكراً للدكتور توفيق الربيعة الذي أثبت أن بعض المشكلات الكبيرة قد يبدأ حلها بكلمة واحدة فقط
(أبشر)

#مساء_الخـير #malradi @tfrabiah

[Microsoft Developer @msdev]

Intelligent Terminal - intentionally brings context-aware intelligence to your favorite agents directly into a terminal based experience to help debug errors and run multi-step tasks so you can stay in your flow

[Microsoft Developer @msdev]

Coreutils for Windows - a set of Linux-like command line utilities that run natively on Windows

[LEAP East @leapeast]

.@elm joins LEAP East as Business Solutions Partner.

As a leading digital solutions brand, known for building and enabling services at national scale, their backing adds real weight to the partner lineup behind LEAP East as we bring the global LEAP community to Hong Kong.

#LEAPEast #IntoNewWorlds

[« 2k2 » @peach2k2]

oh this ought to be good

[Khalid @coder966]

@eMoroor
السلام عليكم

تم سداد المخالفة المرورية رقم 6644154692 عن طريق بنك الراجحي قبل اسبوعين، ولم تنعكس الحالة في أبشر.

تواصلت مع البنك ومع أبشر، وكلهم قالوا تواصل مع المرور.

ارجو النظر في المشكلة

[سلمان بن عبدالعزيز @KingSalman]

نشكر المولى عز وجل أن شرّفنا بخدمة الحرمين الشريفين، ورعاية حجاج بيته الحرام، سائلين الله أن يتقبل من الحجاج حجهم ونسكهم وطاعاتهم.
ومع حلول عيد الأضحى المبارك، نهنئ شعبنا في هذا الوطن المبارك وأمتنا الإسلامية بهذه المناسبة، وندعوه سبحانه أن يجعله عيد خير وسلام واستقرار على أمتنا والعالم أجمع.
وكل عام وأنتم بخير.

[GrapheneOS @GrapheneOS]

Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API are very similar. Apple brought it to the web via Privacy Pass, which Google intends on doing too.

Google's Play Integrity API requires hardware attestation for the strong integrity level and is gradually phasing in requiring it for the more commonly used device integrity level. Apple already has it as a requirement. Over the long term, this will increasingly lock out hardware and OS competition.

The purpose of these systems is disallowing people from using hardware and software not approved by Apple or Google. This is wrongly presented as being a security feature. Banks and government services are the main ones adopting it but Apple and Google are encouraging every service to use it.

Apple's Privacy Pass brought hardware attestation to the web to help with passing captchas on their own hardware. Many people saw that as harmless since few sites would be willing to lock out non-Apple-hardware users. Apple and Google are both likely to bring broader hardware attestation to the web.

Google's reCAPTCHA is planning an approach where they use Privacy Pass on Apple hardware, their own approach on Google Mobile Services Android devices and a QR code scanning system to require an iOS or Google certified Android device for Windows and other systems:

https://t.co/7rQnioRa8A

Banking and government services increasingly require using a mobile app where they can use attestation to force using an Apple or Google approved device and OS. Apple's privacy pass, Google's 'cancelled' Web Environment Integrity and now reCAPTCHA Mobile Verification are bringing this to the web.

Current media coverage for reCAPTCHA Mobile Verification misunderstands it and the impact of it. They're bringing a hardware attestation requirement to Windows, desktop Linux, OpenBSD, etc. by requiring a QR scan from a certified smartphone to pass reCAPTCHA in some cases. They could expand it more.

Control over reCAPTCHA puts Google in a position where they can require having either iOS or a certified Android device to use an enormous amount of the web. Google defines certification requirements for Android which includes forcing bundling Google Chrome, etc. It's enormously anti-competitive.

Google's Play Integrity API bans using GrapheneOS despite it being far more secure than anything they permit. It also bans using any other alternative. This isn't somehow specific to an AOSP-based OS. You can't avoid this by using a mobile OS based on FreeBSD instead. You'll just be more locked out.

Google's Play Integrity API permits devices with no security patches for 10 years. The device integrity level can be bypassed via spoofing but they can detect it quite well and block it once it starts being done at scale. The strong integrity level requires leaked keys from TEEs/SEs to bypass it.

It doesn't provide a useful security feature, but it does lock out competition very well. Services requiring Apple App Attest or Google Play Integrity are primarily helping to lock in Apple and Google having a duopoly for mobile devices. Play Integrity is more relevant due to AOSP being open source.

Governments are increasingly mandating using Apple's App Attest and Google's Play Integrity for not only their own services but also commercial services. The EU is leading the charge of making these requirements for digital payments, ID, age verification, etc. Many EU government apps require them.

Instead of governments stopping Apple and Google from engaging in egregiously anti-competitive behavior, they're directly participating in locking out competition via their own services. Requiring people to have an Apple device or Google-certified Android device is anti-competition, not security.

reCAPTCHA Mobile Verification will currently work with sandboxed Google Play on GrapheneOS but it clearly exists to provide a way for them to start using hardware attestation on systems without it. People without an iOS or Android device will be locked out when this is required even without that.

This isn't about security or any missing functionality. GrapheneOS can be verified via hardware attestation. Google bans using GrapheneOS for Play Integrity because we don't license Google Mobile Services and conform to anti-competitive rules already found to be illegal in South Korea and elsewhere.

Services shouldn't ban people from using arbitrary hardware and operating systems in the first place. Google's security excuse is clearly bogus when they permit devices with no patches for 10 years but not a much more secure OS. It's for enforcing their monopolies via GMS licensing, that's all.

[LaurieWired @lauriewired]

Every operating system disagrees about what the right arrow key means.

In languages like Hebrew and Arabic, the caret might:

move right
move left
split in two (??)
do nothing

Think about it. Should the caret move logically, or visually?

Movement is actually undefined in Unicode, it’s up to the individual system / app. Windows + Linux tend to use logical order, older MacOS was visual. Microsoft Word is actually its own crazy hybrid.

It get’s *especially* gross at the boundaries of RTL (right-to-left) and LTR (left-to-right) text.

What happens when say, RTL Hebrew has an English (LTR) URL? In memory, the boundary is a fixed offset in the string. But visually, the caret can be in two different places, either the Hebrew side or the URL side.

Technically, modern systems deal with this via “caret affinity”, which is a hidden flag that keeps track of whether you came from the RTL or LTR text previously.

Selecting text between RTL/LTR of course is even more bizarre, and honestly I can’t even wrap my head around it.

If anyone has personal experience, I’d love to hear it. Considering mobile/desktop/browsers/terminals all act slightly differently, I’m sure it’s interesting!

[chloe 🐇 @SapphoSys]

world's first enterprise solution to reach zero nines uptime

[أخبار السعودية @SaudiNews50]

عاجل:

الملك سلمان:

نهنئكم بعيد الفطر المبارك.

-

[conduct|r @conductr_]

we are overstimulated and we don’t even notice. netflix while eating. reels in the bathroom. music while cooking. podcasts on walks. we consume by default, not by intention. you keep filling every gap, then wonder why you feel foggy and unmotivated. boredom and silence are the real growth drivers. they give you space to think and create. that’s when solutions show up for problems that have been stuck for months. leave some room

[Khalid @coder966]

@pureslop @dhh Can you explain how does this count as a win for the cloud?

Does "the cloud" make the downtime of independent services concurrent, so that this possibility is eliminated?

[مشاريع السعودية @SaudiProject]

🔴 عاجل

وضع حجر الأساس لإنشاء مصنع شركة هيونداي موتور في مجمع الملك سلمان لصناعة السيارات، بمدينة الملك عبدالله الاقتصادية

[Khalid @coder966]

@JamesRLandrum @TaeKahn @JonathanHeindl @salim4n_dev And yet, Rust Syntax is one of the most complex you will ever read.

Not to mention you're considering ternary operator an advanced/complex feature that a compiler shouldn't implement.

[Reynaldi @reynaldicher]

@theo “For this Court, there is no second bite at the apple.”

[Theo - t3.gg @theo]

Hard to put into words how huge this is. Epic really did it. Apple's monopoly on payment processing is finally over. 🫡

[DHH @dhh]

Our new GitHub extension for local CI sign-offs make it easy to prevent PRs from being merged until tests, linters, and security checks have all been run on the developer machine. Enjoy! https://t.co/yfhCqlkr1n

[سلمان بن عبدالعزيز @KingSalman]

نعتز بذكرى تأسيس دولتنا المباركة قبل ثلاثة قرون على الأمن والعدل والعقيدة الخالصة، ولازال نهجها راسخاً منذ ذلك الحين، في وطن يتقدم إلى الريادة في مختلف المجالات.