Update: this post generated some interesting discussion on Hacker News. Friendly fraud is the laundered name for something that the payment system is not really able to prevent. Even though I m pretty sure they can do way better. Particularly big and sophisticated payment providers like Stripe, with a mountain of signals. I had a customer The post Stripe is friendly to friendly fraud appeared…
Summary A critical Remote Code Execution vulnerability in WooCommerce Delivery Notes = 5.8.0 allowed attackers to inject PHP code into plugin settings. The malicious code executed when any admin or the backend printed an invoice via DomPDF, installing backdoors and creating unauthorized admin accounts. This vulnerability was publicly disclosed in December 2025 and is actively The post Security…
I ve been playing around with Kamal from Basecamp (previously called MRSK) for deploying simple apps on a single server. There s a lot to like about Kamal s ergonomics and principles. But there were a few things that I struggled with or that confused me. It mostly boils down to Kamal offering some kind of a layer The post Self-hosting with Kamal: Watch your ports when shipping. appeared first on…
An interesting yet not too uncommon UI/UX problem is to allow users to delete stuff, but prevent them from accidentally deleting things. There are several typical approaches: Just let users delete Ouch. Obviously this is the problem we re trying to solve here. NOT a solution. Are you sure? Show a confirmation dialog to The post Reversible irreversible deletion appeared first on Gingerlime .
One recent pet peeve of mine has been how companies make you jump through hoops just to report an issue to support. Trello is a recent one. I used to be able to just email support@trello.com Not anymore You ve emailed support@trello.com, which is no longer available for support. That s great! And the best part? The post jumping through hoops appeared first on Gingerlime .
A few months ago I wrote a post: Does Apple care about your privacy? In the post, I looked at Apple s IDFA ID For Advertising, and how it s abused by companies like Facebook and many more to track you. I believed then, and still believe now, that what Apple is doing is not ethical The post Does iOS 14 protect your privacy? appeared first on Gingerlime .
We recently made a landmark decision at my company. Starting from Friday, 1st January, 2021, all Fridays are now part of the weekend. We ll be working Mon-Thu all year round. This is still considered an experiment , because we don t know if it s something we can commit to long-term. But honestly, I can t imagine going back. The post How we switched to 4-day weeks appeared first on Gingerlime .
Going down the time machine rabbit hole I love the fact that MacOS comes with TimeMachine built-in, and I also really appreciate its simplicity. It makes backups easy and accessible even for non-technical people. It gets messy though if you also want to have real offsite backups however. TimeMachine works great with a USB external The post Protecting TimeMachine backups from itself appeared first…
I recently decided to get a wireless speaker for our Kitchen. Sonos seems like an obvious choice these days. The sound quality and aesthetics were very appealing. So I ordered a Sonos One SL speaker. In terms of sound quality and looks, I was very pleased. I m not an audiophile but the sound quality seemed The post Sonos is spying on me (and you) appeared first on Gingerlime .
This is a follow-up to my previous post: hey.com is onto something with its tracking-pixel blocker. I mentioned contacting Backblaze about their email tracking there. I didn t think too much of it at the time, and honestly (or naively?) was expecting some kind of a Oh, yes, you re right, there s no need to track those The post Why is Backblaze tracking me? appeared first on Gingerlime .