Also Nine Sols. It's becoming increasingly popular as games are moving the complexity/flashiness of interactions with enemies to the enemy's side.
Rather than learn and perform complex combos like Devil May Cry, the enemies now are the ones with very flashy movesets and now you simply parry/dodge.
I've seen a few organizations consider moving from ADO to GitHub (only repos and CI/CD pipelines) due to the new fancy AI features, but this frequent downtime has been a constant in meetings.
I do see one Googler in the Twitter chain saying "Sorry. This will be fixed." but I wonder how these Google projects get insights from customers if they can't get through the AI support barrier to a proper human.
Or is the current expectation that everyone needs to shout on Twitter to get their Google problems solved?
Reminds me of Telegram that forces you to pay premium to login to a new device depending on the country. Login, not registration. This is all due to the cost of SMSes of course.
You can bypass this if you have a passkey, but phone and password isn't enough. No idea why they opted to do that, it's not like passkeys are indicative of any device binding.
The obsidian vault is to already have the chosen plugin pre-selected and is part of the social engineering effort, that's not the main problem.
The issue is that this could happen to anyone who just searches the malicious plugin's name and installs it. Worse if it's a popular one that gets compromised.
The pop-ups and "social engineering" in question are things that any users in HN likely already accepted, which is to enable community plugins.
These community plugins are the backbone of Obsidian and where a lot of the meat is behind its fame come from.
There's no protections beyond that, community plugins can do whatever they want. Thankfully, the vast majority of them are open-source.
As someone who doesn't use shared vaults - would the warning popup, 'to enable the "Installed community plugins" synchronization feature', not be on a per shared vault basis? Is trusting a single shared vault for plugin sync going to mean I sync my plugins for every shared vault?
IMO that's an issue in and of itself, but it doesn't read that way in the (very unclear) original article.
reply