Simon Fraser et al. (Hacker News):
When enabled by a user, Safari adapts light websites and presents them as dark.
[…]
At the core of Adaptive Dark Mode is the transformation of color. Sometimes colors are simply decorative, while other times they have semantic meaning. Adaptive Dark Mode determines when to invert colors so elements remain visible or when to leave colors unchanged.
While creating Adaptive Dark Mode, we developed a color matrix to invert the luminosity of colors while preserving hue. It’s used to make light backgrounds dark, and dark text light. When transforming text color, Adaptive Dark Mode aims for sufficient contrast as defined by the WCAG 4.5:1 contrast ratio. Light CSS gradients are also transformed to dark.
[…]
It takes the same care with images. Most are left unchanged, preserving their integrity. But many icons and logos can lose contrast when the background color behind them is inverted. So Adaptive Dark Mode inspects SVG images and transforms colors when needed. For bitmap images, it analyzes the pixel histograms and inverts simple black-and-white logos.
See also: NSTextView.usesAdaptiveColorMappingForDarkAppearance (WWDC 2019).
Federico Viticci:
If this sounds familiar, it’s because so many third-party Safari extensions for this very task already exist, including the very popular (and a MacStories favorite) Noir.
Previously:
Color CSS Dark Mode iOS iOS 27 Mac macOS 27 Golden Gate Safari Web WebKit
Jason Snell (MacRumors):
In recent years, numerous browsers have experimented with re-orienting the traditional top-of-the-page tab bar into a vertical stack, and now Safari is joining the parade. (It makes sense, when you think about it, because most of our screens are much wider than they are tall, putting vertical space at a premium.
Vertical tabs aren’t a default, but they are now a new option. The tabs sit on the left sidebar as a strip of icons by default, but if you prefer you can resize the tab bar to also show tab titles. On the Mac, Apple has built a hover effect reminiscent of the macOS Dock that displays the name of the tab when you move the pointer over its icon, and if you pause and hover, it’ll display a floating window with a visual page preview.
John Gruber:
I got an advance demo of this last week and I’m really looking forward to trying it. I’ve gotten very used to horizontal tabs over the years, but a long time ago I was a devoted user of the Omni Group’s OmniWeb browser, of which one of my favorite features was its vertical tabs. That was so long ago, the tabs went in a drawer.
I liked this in OmniWeb and also in NetNewsWire 3, which had vertical thumbnail tabs on the right side of the window.
Ron Stewart:
Hopefully, allowing the vertical stack of tabs to be positioned on right side isn’t far off, too. Chrome, Firefox, Vivaldi all support it, and - as a right-handed user - it feels much more natural to me.
Brave also added vertical tabs a few years ago (Hacker News).
Adam Engst:
But now that I’ve become a complete convert to the wonders of vertical tabs, I’m seeing them everywhere. Or perhaps the industry has hit some sort of intersection between users clamoring for the option and browser makers gaining the gumption to brainstorm better interfaces. Whatever the reason, if you’re not using vertical tabs now, I’d encourage you to try them, either in your current browser or one of the newcomers mentioned below.
Francisco Tolmasky:
Every app should have both vertical and horizontal tabs. Neither one is better, they’re for different things. Vertical tabs display “everything” in the current context, while horizontal tabs show your “current focus”. IDEs get this right, just about everything else doesn’t, from browsers to Messages to Slack. Messages is a great example, it would be so much nicer on the Desktop app to have my “favorites” just as horizontal tabs instead of pinned bubble faces in my “every conversation ever” list.
Previously:
iOS iOS 27 Mac macOS 27 Golden Gate Safari Web Browser
Rafael Nam:
The massive $6.3 billion cyber heist suffered by crypto exchange Binance last week may have taken place in only about twenty minutes — but the attacks were months in the making.
That’s according an initial assessment released by Binance on Tuesday about how it suffered the world’s biggest-ever cyber heist by hackers the FBI has identified as being a North Korean state-sponsored unit.
Molly White:
At least $5.5 billion of these were liquid assets. Tether announced they had frozen at least $1.567 billion of the stolen USDT, and Circle has frozen around $800 million of stolen USDC. World Liberty Financial froze the $27 million in USD1 stolen by the attacker, and the Arbitrum ethereum layer-2 network froze an additional $30.5 million that had moved to its network. The attacker is estimated to have made off with between $2.4 billion and $3.4 billion.
Binance founder Changpeng Zhao, who is legally not allowed to have any active role with the company [I98] yet still has remarkable amounts of inside knowledge into its inner workings, posted on Twitter less than an hour after the theft that “User funds are safe!”, adding early estimates of how much Tether and Circle had frozen.
[…]
Binance keeps an emergency insurance fund in case of exploits or other crypto disasters. Its most recent balance report puts it at around $1.3 billion. Unless more is recovered, Binance will either fail to make users whole or dip into its own balance sheet — potentially to the tune of 10 figures.
Jessica Lyons (Hacker News):
In September, another software engineer was contacted via a “legitimate job-hunting platform” by someone purporting to be a project director who arranged a series of job interviews for the Binance engineer with the fake company. During the first round - a live video interview with the engineer and a fake HR rep - the interviewer “shared a social media account with him, including personal photos and videos posted on the platform, in order to build trust,” according to the report. “This was more advanced and deceptive than previously seen social engineering approaches.”
The second interview with someone purporting to be the CEO of the phony company was conducted on a “popular social chat app,” and toward the end, the CEO instructed the engineer to download an “assignment” containing a malware-laced code repository. The code executed on his work computer during the setup process, which kicked off a series of unauthorized activities.
According to Binance, the malware replaced a legitimate development tool component with a malicious version, which executed commands and established communication with an attacker-controlled external server. The attackers also took steps to hide the malicious script and evade detection, and it worked. Binance’s endpoint security tools did not immediately detect the malware.
gandreani:
A lot of people are focusing on how irresponsible the engineer was about using the work computer. That’s obviously an issue but the bigger failure mode to me is the Engineer C’s container deployment token.
That’s a huge red-flag. In a company of this size, the deployments should be via CI only. CI isn’t just to increase the speed and reliability of deployments but also to provide a clean room to build the software! Even if it’s a token that was copied and pasted temporarily, the systems in place should not have to require this type of 1. copy 2. paste 3. remember-to-delete the token from my PC.
Bitcoin and Cryptocurrency Breach Federal Bureau of Investigation (FBI) Financial Hiring North Korea Security Web
Carly Page (Reddit):
Password manager mSecure has warned customers to change their passwords, reset two-factor authentication, and potentially remove their passkeys after detecting suspicious activity, but it has not explained what happened or whether anyone’s secrets were exposed.
[…]
For anyone with hundreds of passwords stored in mSecure, that’s potentially hours of work. And without knowing what happened, customers have no way of telling which credentials they actually need to replace.
The warning has understandably gone down poorly with customers, who have taken to mSecure’s support forum demanding answers.
Previously:
Breach Mac Mac App macOS 27 Golden Gate mSecure Passkeys Passwords
