RKearney

Yes

https://caniuse.com/?search=svg

Unless something has changed, Walmart does not want its suppliers to use AWS to mitigate that very risk.

https://www.cnbc.com/2017/06/21/wal-mart-is-reportedly-telli...

This is true of any mail service and is not at all unique to Fastmail.

Wasn't SolarWinds compromised for 6+ months? 7 days doesn't sound like enough time. Although maybe that's not a good comparison as this was open source and SolarWinds is closed source.

I remember watching a Walmart talk on Node.js and how they vet every single update to every single module before they pull it into their internal repository for internal distribution. Perhaps the answer is to stop blinding pulling down dependancies from the internet?

I've never come across a device that supports permanent summer time. You can typically opt out of daylight saving time and stay in standard time, but you can't stay in summer time.

These devices will either need to pick the standard timezone of the timezone to the east and disable daylight saving time, or we will have to change the offset of every timezone in the US, or devices will need to add an explicit summer timezone.

I don't see how any of this is easier than staying on standard time and disabling daylight saving time, which every device that tells time that I've come across seems to support.

They would need a unique IP for every single repo. While this isn't a problem for IPv6, it is completely unrealistic for IPv4.

When github.example.com is configured as a CNAME to my-gh-page.my-repo.github.com, the IP that is returned will have no idea that it's my-gh-page.my-repo.github.com that is being requested as github.example.com will be what is sent in the Host header and part of the TLS SNI.

EDIT: I misunderstood what OP was suggesting. Pointing a CNAME to a repo specific domain name would work only if that name is removed after the repo goes away. As previously mentioned, this should not be Github's responsibility and it is a domain owners responsibility to properly maintain their records.

Their cloud platform doesn't even fully support IPv6, so I doubt they would do this before at least getting their own public offerings on board.

That "workaround" instructs you to use "v=DMARC1; p=none;" for your dmarc record. I'm not sure if Microsoft actually requires this, maybe it's because it doesn't support DKIM, but setting your dmarc policy to none disables SPF checks and is an extremely bad idea.

> "HTTPS is difficult to set up and maintain."

> It just works if Caddy is your web server.

I wonder what percentage of people who thinks HTTPS is difficult to set up and maintain are able to run their own VPS and properly install and configure caddy.

I am not the OP. The terms indicate you cannot use it to proxy traffic to bypass bandwidth costs. The grandparent comment suggested using Lightsail to do this, and it is a violation of the TOS. The parent comment, however, stipulated that you are not allowed to use Lightsail at all, which is indeed wrong. I was just posting the relevant portion of the TOS which applies to the grandparent comment, and clarifies on the parent comment (which is inaccurate)

AWS Service Terms[0]

51. Amazon Lightsail

51.3. You may not use Amazon Lightsail in a manner intended to avoid incurring data fees from other Services (e.g., proxying network traffic from Services to the public internet or other destinations or excessive data processing through load balancing or content delivery network (CDN) Services as described in the Documentation), and if you do, we may throttle or suspend your data services or suspend your account.

[0] https://aws.amazon.com/service-terms/

You can still download the repo off archive.org

https://web.archive.org/web/20211231094826/https://github.co...

Click the green Code button, then Download ZIP.

I’ve never seen invoices or receipts without some kind of unique identifier on them that could then be verified. My receipts from Chipotle are even uniquely identified by the store number, register number, date, and incrementing order number for the day.

Letter of Authorization

Since your master password is stored in another password manager, would it be accurate to say you copy/paste it into LastPass? If so, something running on your machine could be scraping your clipboard.

This of course assumes that it wasn’t really you from an IP that was just misidentified as being from Brazil.

For what it’s worth, I stopped using LastPass after they sold out to LogMeIn and would recommend others stop using it as well.

Yes but this role did not add the necessary privileges for it to use customer KMS keys. You can’t get an S3 object that’s encrypted with a KMS key if you don’t also have permission to decrypt with that key.

Of course Amazon could just give themselves access to decrypt with your KMS keys too, but that didn’t happen here.

Depends how big you are. Apple has been known to give special privileges to big players like Hulu[0].

[0] https://www.theverge.com/2021/5/6/22423410/apple-hulu-subscr...

What do you think would happen if MarkMonitor completely shut down Google.com, Microsoft.com, or Amazon.com because of a user submitted image hosted on one of their subdomains?

Obviously some images are more harmful and illegal than others, but Namecheap has absolutely no business acting as judge, jury, and executioner when it comes to something that in no way passes through any part of their infrastructure.

If they’re not hosting the DNS or web servers hosting the offending image then they should stand down. They took down Imgur for not deleting an image within I believe it was 2 hours of notice. Completely unprofessional.

I never said they contained them. I literally said "used to test the vaccine."

Religions that oppose abortion typically don't have a statute of limitations on when the cells from them are okay to use to grow cell lines to use in testing.

This ignores the fact that there are other religious reasons to oppose it, such as the fact that fetal cell lines from aborted fetuses were used to test the vaccine.

Do you have a source for this claim?

Considering almost everything public facing at Google supports IPv6 and almost no GCP services support it outside of a few regions (1 in the US), I’d guess none of it.

I would think it would fall on the zone operator to properly configure a CAA record to restrict issuance by an unauthorized CA.

> it's always our goal to ensure that domain pricing is as accessible as possible to our customers.

Then why not charge $30 for an .io domain like CloudFlare does instead of $39.98/yr?

This would likely do more damage to Quad9 than to Sony as it would just accelerate the pace at which people remove Quad9 from their list of resolvers because they’re unable resolve the sites they’re trying to visit.

"Desktop.ini" and "thumbs.db", or, "how to tell if a ZIP file was created by a Windows user".

Other cloud providers like GCP only just recently started to adopt IPv6. Today, you can only use IPv6 in asia-east1, asia-south1, europe-west1, and us-west2[0].

The cynic in me believes Google only did this due to the US Government's IPv6 only memorandum issued last year[1] requiring networks operate as IPv6-only.

[0] https://cloud.google.com/vpc/docs/vpc#ipv6-regions

[1] https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-0...

Then you'd be happy to hear AWS and Azure had support for IPv6 on inbound load balancers years before GCP.

Google is by far the worst cloud provider when it comes to IPv6 support. They only support IPv6 on VPC networks in asia-east1, asia-south1, europe-west2, and us-west2, you cannot access the metadata service over IPv6, and IPv6 on load balances just left Alpha last year I believe.