Ah it makes more sense that way, I didn’t read the title as if they were talking about all the extensions that they found summed together. This does make it really clear that you should always check extensions when installing them, and not just install extensions with a low install base from an unknown author.
That headline is quite misleading … the malicious extension only had a few hundred installs, not millions. They just copied an existing extension that does have 7 millions installs. They did went quite far by registering a URL. Of course it is bad that stuff like this manages to get on the store, but as long as you check what you are installing, you should be fine.
This sounds like a difficult problem if he wants to continue browsing the Reddit community for pathfinder. I have seen these kind of people on D&D subreddits too, and it also put me a bit off trying pathfinder during the OGL drama.
Maybe there are other communities outside of Reddit that are able to provide the answers to questions, but I doubt you will escape this hate on the larger TTRPG subreddits.
Although this feature sounds helpful, it really looks like they went too far with this. They should probably look for a way to sell these Copilot+ pc’s in another way if they can’t get this secure enough and probably keep it disabled for companies…
I’m surprised they didn’t make sure that the part that should help you hide sensitive information worked well before letting the first testers get their hands on the feature. All this bad news about the future doesn’t help convince people to turn it on.
Great article, I’m currently rebuilding a legacy website with SvelteKit myself and alread had issues with the lack of third party components. Luckily it really is not to hard to write your own components around third party plain html/js implementations.
The $: was quite confusing at the start. But overal working with SvelteKit makes me feel way more productive compared to developing for my previous projects in Angular.
They already made the mobile site practically unusable by constantly reminding you to use the app. The mobile browsing experience was just terrible. They can just show the same adds in the mobile browser…
Maybe we have some bias on this topic, but I had the same thought. Maven is such a well known tool in IT, that I’m surprised they just created a social network with the same name. Until they get a bit famous this won’t be good for SEO.