ev1

host -t TXT _spf.mailgun.org

host -t TXT _spf.eu.mailgun.org

covers all of them

Most of the world doesn't have this. If all of your visitor base is devs with M2 macs then by all means go wild, but in practice this isn't how things go.

Sites like (for example) new reddit or many things with infinite scroll on the typical phone in many countries is effectively a disaster.

Sites that like to have fancy scroll or background effects are generally awful if you don't have a graphics card. I browse on a Celeron J4105 or a Pentium Gold sometimes (I use it to build some x32 bins) and JS-heavy sites cause full tab lockups that take minutes to resolve until anything is usable at all.

Think of devices like this: https://www.bluproducts.com/devices/studio-x10-2022/ This is a 2022 model, with 1 GB ram. On a Samsung Galaxy A03 if I swap between tabs in browser, HN will appear near instantly, I assume because it hasn't been evicted from memory, but anything heavier will take a few seconds and be a full page reload.

Are you on a new-ish machine?

Also yes, in the case of collecting, the point is "acquire bragging rights about an old object just because it's an original copy"

If you wanted to just play it you'd just play it in an emulator.

I will point out that the history of video games is not that old in itself, meaning a several decade old game is falling into the "one of the first games made" vintage tier.

The content on the cassettes is random recording noise and not a playable game.

The content on the disks are cracked copies that contain missing or modified data and are not the original game.

Firefox mobile can turn off images and web fonts and JS, that's more or less it unless you have a faster host somewhere else that can download and compress for you.

PHPSESSID :)

They do list users and provide joins and parts if you request the IRCv3 CAP. I've never used IRC before (well before my time) outside of implementing some Twitch overlay stuff for a friend though.

There isn't one. PHP stopped sending X-Powered-By by default years ago.

2) is basically going to be attempted on nearly every single kid with an iOS device (see "free fortnite skins / robux just follow these instructions and paste these in, also turn off firewall and av")

- fake data at every layer/canaries

- a lot of randomly seeded accounts with easily breakable password hashes and a very unique but believable email (like firstlast@company "admin" account) that will effectively trigger equivalent of SEV0 if someone tries to log in with it in production

- mtls everything + devs cannot log in to prod.

- have previously seen something interesting in that the same internal IPs were routed differently depending on where you originate and whether it was a protected server to server route: if you compromise a dev machine and use the credentials inside to connect to "prod", it would actually connect, but to a staging db. the same ip/hostname only reaches prod from a server machine w/correct certs+tls+etc

- same place as above would also tcp fingerprint clients connecting passively, so would set off alerts trying to connect via psql or mongo from another device not running an identical stack (including waiting for the right incrementing uptime modulus(!) - it knew what the uptime of the machines that were supposed to be connecting were) even if you successfully stole the mtls certs and were on the right network path. this was traditional finance, not startup/fintech/web3.

- same place as above also did very aggressive anomaly detection on average bandwidth use and consumption or in/out and would automatically terminate connections that seemed "off", someone trying to dump the db would near immediately drop the socket. this was done with multiple facets, so things like incremental s2s backups were unaffected but if you tried to pgdump from your dev machine it would terminate the connection shortly.

- security would also randomly "accidentally" leave quite a few tasty sounding credentials laying around in confluence/slack/equivalent of slack/etc; people do not have any reason to be randomly looking for these, but if someone is searching for things like copypastable creds, db logins, etc, virtually any common keyword combination will find these. using them triggers high severity page + someone to question you rapidly.

amazing but also absolutely cursed

lol i remember when jira and confluence.. 10 users $10, 11 users? 50k and sign a contract?

It depends on. If you are filming for tiktok then 99%+ of your consumers will be viewing vertical holding it vertical.

If you are making programming videos to be viewed on desktop and somehow make it vertical people will hate you exponentially more.

yes, this website loads the full adtech parade.

The point of it is same-registrar push not requiring a confirmation: you can't do this with Njalla bc they probably don't use Njalla.

At least he doesn't have to do much, most of engineering is probably leaving.

only if i get something out of it. no cost if i don't save anything?

> I'd like to use a dedicated one with a low limit that will start rejecting charges quickly.

You are aware that if you were legitimately billed for overages that you didn't catch, you are still liable for them, even if your cards refuse the transaction with insufficient funds, correct?

There is less success than you would expect, but it's mostly just there to tick a box, not really used much.

Nah this is all just fake whois entries announced elsewhere. Has no connection to IN outside of that.

I think parent is referring to that Türkiye is now the requested English term. https://www.trtworld.com/turkey/turkey-to-use-t%C3%BCrkiye-i...

You are going to be tapped at the ground station trunk lines regardless.

Yes, that is the 1:1 copy. I don't know German capitalisation rules. Was on mobile though.

Here's an interesting thing that might be due to their ML or whatever:

Try:

- de kalkoen bezoekt Turkije

- De kalkoen bezoekt Turkije

- de kalkoen bezoekt Turkije.

- De kalkoen bezoekt turkije.

- De kalkoen bezoekt turkije[space] with an extra trailing space

i get "der Truthahn besucht die Türkei" with google.

I only find a 64% https://www.cnbc.com/2022/04/28/64percent-of-workers-would-c...

It appears to hash the file locally, then look it up on a number of aggregators (or local scanner such as clamav), see: https://github.com/pandora-analysis/pandora/tree/main/pandor... for list. For example, check the "usual" sites like virustotal immediately, and do local inspection into embedded document objects.

You will need to be subscribed to those services that are not free and have API keys for each one.

There are some modules that also analyse the MSOffice XML format for bad code, that check OLE (don't know what is OLE? https://threatpost.com/like-macros-before-it-attackers-shift...) and macro deobfuscators.

CIRCL is the Luxembourg CERT, more or less.

MBA is for people running Facebook Messenger and Instagram to use in coffeeshops, obviously :)

I was permanently banned within a week of using Ripcord, with no other odd activity. I'm wondering if there are some lag times or picking a bad start point where Ripcord was slightly out of sync with newly released API calls or similar.

Unappealable, of course.