Huh? Just to make sure I wasn't missing something, I checked and my GitHub account has only a TOTP app and hardware security key configured, no SMS/phone number.
As a matter of fact GH even has a red "Less secure" badge on the SMS 2FA in the settings discouraging its use, as well as the following text in the description: "We strongly advise against using SMS because it is susceptible to interception, does not provide resistance against phishing attacks, and deliverability can be unreliable."
The article author attemps to make a distintion between "burners" and "aliases" but I don't believe one exists for this usecase. Let's say for the sake of argument that you think blocking burner emails provides meaningful protection (I don't, but services using such a list obviously do). From your perspective, an "alias" is the same as a "burner". Both can be easily generated in bulk by a human or bots, cannot be resolved to an identity, and cannot be compared to determine if two emails are the same person.
This analogy is bad: Nobody is going to die or get food poisoning because their old browser doesn't work on a website.
A better analogy would be a restaurant deciding not to cater to the 1% of the US population that have celiac disease (cannot eat gluten), or the 2% that have issues with dairy.
Anything Chromium based is tainted. They will not be able to keep out all of Google's shitty decisions because they are not building a browser, they are building a skin on top of somebody else's browser.
I feel like root cause #2 should be titled "Our API is poorly designed".
If you pass nothing into the API, it doesn't give you an error? Is this even a valid use case - why is it even possible to express this request, should the important inputs not be some kind of required parameter?
If your attempt to use the primary purpose of your API silently broke until your database filled up, that should probably be a big red flag about how likely customers are to make mistakes using your product.
> Same with most people "doing a startup" or "opening a restaurant".
While I mostly agree with your sentiment, I think there is an important difference. Unless you are attempting advantage play (99.99% of gamblers are not, and casinos ban the few that are), there is literally nothing you can do at a casino to make it a positive EV activity. No amount of skill, drive, effort, or anything other than pure luck can consistently generate profit at a casino.
A startup/business, on the other hand, can be effectived by your actions. Luck obviously plays a large factor, but you have some level of control over the outcome.
I see a bullet point for "1.0 days of 1.3 days", and when I mouse over the previous day (Wedensday 2025-11-19), I see "7.8 hours of 1.3 days".
I haven't actually checked any sources to confirm there really was downtime on those days, but if we assume those numbers are true 7.8 hours + 1 day is about 1.3 days.
Anything on the site? Yes. Anything at all? No - Polymarket themselves make the markets (and I think they have some partners that can make markets as well, but point is some random user cannot make a market).
Do you have a link to the mastodon interaction where they threatened you with legal action?
I ask because I'd be pretty disappointed in GrapheneOS over that kind of thing and it'd probably at least partially change my opinion of them, but it's better to validate these types of serious accusations and get the full context.
So we're worried about cops violating civil liberties by not getting a warrant, but we'd rather they go harass random (potentially innocent) civilians to do investigations?
Why dodge the question? Clearly they care today, and I live in today.
If we're doing to defer to industry, does only the opinion of website operators matter, or do browsers and CAs matter too? Browsers and CAs tend to be pretty important and staff big security teams too.
Is massive capital expenditure not also required to enforce the GPL? If some company steals your GPLed code and doesn't follow the license, you will have to sue them and somebody will have to pay the lawyers.
I don't know for sure because I don't live in Tampa, but it is generally free (minus the opportunity cost of your time) for these types of tickets, no lawyer or other expense required.
As a matter of fact GH even has a red "Less secure" badge on the SMS 2FA in the settings discouraging its use, as well as the following text in the description: "We strongly advise against using SMS because it is susceptible to interception, does not provide resistance against phishing attacks, and deliverability can be unreliable."