ev1

> Amazon orders still arrive in two days.

Mine have been up to a week now. Prime stuff shipping 5-9 days, only very few select items show up in 2 days. Since 2020 or so the "FREE 2-day shipping" has been replaced with "Free Prime shipping" in the UI and I no longer see 2-day promises. Most "basic needs" items are often 3-4 weeks out or "in stock soon"

> My grocery store is still stocked full

I won't starve, but it's weird noticing a lot of holes in the shelves. They're stocked, but missing certain flavours or product lines. Sure there are lots of other energy drink options, but I can't find Mountain Dew Energy in cherry limeade and haven't been able to for 3 weeks now.

RvW is an interesting point here - I routinely saw people camped out recording every entry point of a Planned Parenthood for example, including separate cameras pointed lower to capture licence plates. I'm assuming they later post these online or run some kind of ALPR on it for harassment.

You can usually pick what domain you want to show up there when you buy an ad. It's common so you can use obnoxious chains of tracking links redirecting into each other and not show up as emjcd.com

so IS owns both "supersonic studios" and "supersonic ads"? (though unsure if there is a difference anymore since the latter redirects to supersonic.com)

Is this the same supersonic as supersonicads? If it is, the only time I have ever seen them is basically convincing children like me at the time to download malware in exchange for $0.01 in free to play mobile game credits...

The ads they served were absolute bottom of the barrel awful, no legitimate brands, not even like clash of clans or anything - half their 'offers' were lockscreen ad APKs that installed themselves as unremovable device administrators that would kill play store and settings if you tried to open them.

If you played F2P games, mobile games, korean free MMOs probably starting from a few years ago, maybe half a decade ago, you will likely eventually remember SupersonicAds, Peanutlabs, Tapjoy (also purchased by ironsource), Matomy.

Tapjoy (now IS) would not pay out even after you installed the shitware: https://www.ftc.gov/news-events/news/press-releases/2021/01/...

SupersonicAds would collect IMEI, ESN, etc as long as they could https://www.ftc.gov/system/files/documents/public_events/122... + wrote code bad enough and delivered their loaders over plaintext http to the point that google play was blocking apps including their sdk at one point

not if you serve ads first party and native.

i wouldnt be surprised if ads paid much better given the ultra high income first world country user base, frequently on work laptops that might not have adblock installed too

PyPI is correct 2FA: TOTP, WebAuthn etc

I watch Techmoan a lot and I rarely if ever think clickbait, they are almost all straightforward. It was apparently advertised as smart, having a personality, etc

Yeah, pretty much. I explicitly want 2FA with a real 2FA factor on all of my services and all of my machines, but my caveat is that it has to be in my custody - yubikey, totp (not ideal but I do hold an encrypted back up of my seeds that I physically refresh sometimes), fido2, smart card, etc.

Push no. Push on a personal device even more no. SMS and phone absolutely FUCK NO for any reason.

Another reasonable point here is that pypi is also offering package owners ~$75 (edit: didn't realise they were sold in 1-packs now) in modern usb-c fido2 keys if you have one that is now marked as critical.

I use Okta and it supports webauthn/fido just fine, seemingly by default, including touch id (or any standard USB key). If it does not, it's because your SSO administrator is intentionally turning it off.

Okta does not have my phone number or an app installed. I do not ever want to be pushed an approval, because I don't know who or what triggered it. I only want to proactively authenticate.

I host a lot of production there, but always some layers underneath - like a high CPU or backing storage layer or database, worker nodes that pick up tasks. Never the front user facing.

Do not let any user generated content be accessible from any hetzner IP or you are one email away from shutdown pretty much. Don't forget germany's laws on speech too; they are nothing remotely similar to US. I would host, for example, a corporate site just fine, but last thing ever would be a forum or image hosting site or w/e

I had to block 9 domains to get a reasonable view

150k is the actual housing and urban development definition of low income in San Francisco. You practically need assistance at that point.

So far my managers in engineering have been pretty good. I am what you would probably call a typical gen z "job hop for TC increase" bay area stereotype; I have had something like a dozen+ bosses so far and none were particularly terrible. The ones asking for impossible deadlines knew what they were asking for (and apologised for it, saying it came from higher up and was obviously dumb), I've written complete things then "oh we've changed direction", but nothing that would actually be insulting or anger management. This is just IC level though so I'm sure I'm missing out on some clown parties way higher up.

When I worked retail, almost every manager was an abomination. None would ever be willing to fight for you in any situation, most were abusive, and any time you told a customer some well documented policy and they screamed about it, your manager would be first in line to override policy and tell them how they were going to fire you for not putting the customer first. I had two supervisors punch holes through walls and one throw merchandise at employees. We were kids, but there was a sense of solidarity amongst the non-management that I don't think I frequently see in tech.

This is somewhat of the norm at large places isn't it? I've done interview rounds and was given example questions and more or less told to stick to it otherwise "liability" and "personal bias"

If this is HK/CN related stuff, I'd anticipate Hetzner to be drowned in torrential rains of fake abuse emails.

Trying to not get banned from social media probably

I hate that 2) is a thing, especially if you have a console that just does P2P matchmaking assisted by the server for NAT punching. My friends that play CoD or similar quite literally get attacked off the internet for winning rounds at least every single night they play more than an hour or so, it's that low of a bar of entry.

At several places I've seen they keep certain data such as phone, address, etc as a bullshit "business need" to "prevent abuse" and "prevent promo reuse" and keep forever even through CCPA.

Also they keep the record of the delete request, which contains the PII you ask to remove.

I had a very VERY short lived manager at one point that immediately agreed to a request from another manager that violated the laws of physics and said we could do it (SLO including FTL latency multiregion cloud related).

Sometimes I still think about this.

are you doing the correct standard of never enabling JS, canvas, webgl, and not maximizing your tor window? and resetting your session entirely (no persisting ANYTHING) between runs?

when i worked in asia fora short while drinking with coworkers was effectively mandatory.

"optional" but in practice mandatory

I use powerdns

If you're going to do the latter at the very least use the built in, included, free libsodium

> It's like visiting a physical pharmacy. In theory, somebody could be spying on the people who enter and leave the place

People do this in the US with Planned Parenthood clinics and parking 4K cameras outside/across the street and license plate recorders/scanners.

Many analytics and tracking pkgs will capture every single form field and upload them as a standard default, and only mask out things that match cc regexes etc

Yes it's immensely stupid

I haven't had an issue with it, you're basically just calling a function.

https://github.com/awsdocs/aws-doc-sdk-examples/blob/main/ja...

Don't forget 'was created for the purpose of filling in a box on "supplier registration" forms [.....] This document continues to be used for its original purpose - providing a reference to fill in the "code of conduct" box on supplier registration forms.'