jffry

If this seems too long to read, it's about a domain name registration dispute between RedHat and a volunteer who registered wemakefedora.org (RedHat was seeking to gain control over the domain).

The arbiter not only found against RedHat but also made a declaration that the dispute was brought in bad faith.

The condensed excerpt is:

"Accordingly, the Panel finds that the Respondent has rights or legitimate interests in the <wemakefedora.org> domain name both because Complainant consented to Respondent’s use of the domain name so long as the website followed Complainant’s trademark guidelines and because Respondent is making a legitimate noncommercial or fair use of the domain name, without intent for commercial gain misleadingly to divert Internet users or to tarnish Complainant's FEDORA trademark."

and from the conclusion,

"In light of these circumstances the Panel finds that Complainant brought this proceeding despite having clear knowledge of Respondent’s rights or legitimate interests in the domain name and that the proceeding was brought primarily to harass the domain-name holder."

Weird quirks of language (English and others) usually have interesting histories too.

Sanction is such a strange word. It can mean both "giving permission or approval" as well as "giving a penalty for noncompliance with a rule or law"

I also misread the headline as the latter instead of the former, likely because of the latter type of sanctions being in the news as of late.

Why wouldn't you just run a vanilla nginx image and mount in the folder of site content? Then a deploy would be as simple as rsyncing the built folder from your laptop to the server, no need for sending a whole image every time

What do you mean by "walkable Arlington"? If you mean a more house-and-sidewalk residential neighborhood, then neither Pentagon City nor Crystal City meet that mark. And Crystal city is fairly walkable even before you account for the underground part.

They're both mixed-use urban developed areas with large towers, although Crystal City actually seems to have more of those. Both are in the same place, south of Interstate 395 and west of the airport (the Pentagon is just north of 395).

edit: and for reference Wikipedia says: "Crystal City includes offices of numerous defense contractors, the United States Department of Labor, the United States Marshals Service, and many satellite offices for The Pentagon. It is also the location of Ronald Reagan Washington National Airport."

Good luck actually provisioning such an instance though. At least for the past month I have been unable to actually provision one of the free-tier instances due to no available capacity in the regions I tried.

There is a highway near Washington DC (I-66) that has dual-rate HOV lanes like this. During peak rush hour times, the lanes are free to vehicles with 2+ people, but solo drivers can also opt to pay to use them.

They wanted to ensure that the HOV lanes move fast enough that the people who are carpooling will actually be rewarded for doing so. This meant that there had to be a dynamic toll for solo drivers.

Imagine the outrage when on a particularly busy day, this dynamic toll exceeded $20 for a ten-mile journey. The reality is plenty of people were cheating and using the HOV lanes as solo drivers, and now the tolling mechanism means they can no longer get away with it.

Adding onto this: I was able to use https://github.com/cathugger/mkp224o to generate my own v3 address with chosen 7-character prefix in just under 1 hour on my i7-8700k

I imagine an implementation that leverages a GPU could go much faster.

It must've been brute-forced. According to this one old brute forcer I found [1] but have not thoroughly vetted, it would've been one CPU-day of effort on 2012-era hardware

[1] https://github.com/katmagic/Shallot

In this case, the username and password are NOT your Google credentials. When you set up a dynamic DNS subdomain in Google Domains, it autogenerates a username/password pair that is unique to that subdomain, and that's what you use.

https://support.google.com/domains/answer/6147083?hl=en&ref_...

Yeah and if your system allows an attacker to sustain one attempt per second into perpetuity, then you need to improve your system. Just be wary of DOS attacks against users when considering things like per-user limits (versus per-IP limits)

> I enjoy working within the Chromium ecosystem

Curious what you mean by this. If you're talking about devtools, Firefox dev tools are also great, although there's nothing to say you couldn't use Firefox as a daily driver and pop open Chrome for developer work to avoid learning a new set of browser devtools.

I'm not OP, but yes it is possible to import arbitrary music into the Apple Music app with whatever cover art and other metadata you want. It's as easy as dragging in a folder of normal, tagged FLAC or MP3 files and it will use the metadata in them to group into albums etc.

It's also user-configurable whether the app will move your files into its folder and organization scheme or just leave them alone where you put them.

edit: I have been thoroughly schooled about not immediately recognizing a quote from the turn of the millenium presented out of context not as a quote. Sheesh

This is absolutely something to ask your lawyer. If you just leave this in limbo and hope it goes away, it could cause huge problems for you down the line.

In particular it might be problematic that you have actively worked to prevent the investor from paying you. You definitely need to talk to your lawyer about how to resolve this in a way that protects your company from an ugly, messy lawsuit down the road.

Coincidentally, if the idea of spending two days making a single cheeseburger from scratch is appealing to you, check out Alvin Zhou - https://www.youtube.com/c/AlvinZhou1

His videos skew meditative - generally little to no talking, just relaxing music, the sounds of cooking, and beautifully cinematic shots of every step in the process.

> But a lot of piracy happens with publicly downloadable files, which MEGA can definitely decrypt and search for copyright violations

How would MEGA do this, without crawling the web looking for links + keys? Which is certainly something they'd have no interest in doing.

Naturally, I'm sure that third party "rights enforcement" companies might trawl for these links and look for infringing content and issue a takedown notice to MEGA, but there must be an ongoing arms race between people sharing links+keys and the bots crawling for them.

I found the Missouri Department of Public Safety's list of State Law Enforcement Agencies [1] and it does seem like an awkward fit no matter where you would try to put this investigation. That said, I can imagine that in many states, the largest and best-developed law enforcement agency is by necessity the one that spans the entire state for the purposes of enforcing traffic laws.

[1] https://dps.mo.gov/leagencies.php

Yes, and what the parent post was suggesting was that GitHub would have you use a CNAME to point your DNS entry to a unique FQDN (that it can tie back to your specific repo) instead of an IP, which would centrally prevent this issue without relying upon every single user to act perfectly.

Cloudflare pages, right now, seems to be both the actual hosting, as well as a system for continuous deployment, bundled into one product. You push updates to GitHub, it runs your build (can be any arbitrary script) and then you tell it the folder that contains the built site at the end.

So you could totally build everyting locally and commit the site into a Git repo and use it in that way. It would be nice to have a non-GitHub way to just shove my built website into CF Pages but I don't know if that is on the roadmap.

But not in that order. Hire the attorney, and ask them about whether and how and where to report.

An attorney will know how to navigate this in a way that protects you.

Congratulations!

(EDIT: links got fixed) For clickable links, remove the leading spaces so it doesn't get formatted as plaintext, and make newlines double to avoid them all being on one line

I misunderstood what URL we were talking about. What I am seeing:

https://marginalia.nu = https://crt.sh/?id=6046506678 (includes wildcard but NOT apex)

https://search.marginalia.nu = https://crt.sh/?id=6125359537 (includes both wildcard and apex)

It seems like a bad cert is being served at the redirect; the LE cert at https://search.marginalia.nu DOES have both the wildcard and apex domain

See https://news.ycombinator.com/item?id=30301015

There may be some type of caching problem. When I visit https://marginalia.nu directly, I'm served with this cert, which does not include the apex domain: https://crt.sh/?id=6046506678

When I visit https://search.marginalia.nu I'm served with this different cert, which does include both wildcard and apex: https://crt.sh/?id=6125359537

The cert I am seeing [1] does include both the wildcard subdomain AND the apex domain

[1] https://crt.sh/?id=6125359537

> why did fibre, agora, and pupal get pulled

No idea for fibre, but agora and pupal have repeated letters. Are there other words in the accepted wordlist with repeated letters?

At present, it still functions like the original - the wordlist is present in the JS bundle served from https://www.nytimes.com/games/wordle/index.html

I could imagine that having periodically changing loads like rush hour traffic could cause a critical failure state. The slow flexing between day and night eventually causing something to deform/crack/shift to the point that the next big traffic load causes a collapse.

If prior NTSB reports are any predictor, we'll eventually learn all about the confluence of things that led to the collapse.

My reading: Dock display output was flawless, other aspects of the dock (overheating, USB port reliability) were shit