Belphemur

I have a full tutorial on how to setup DoH for yourself :

https://www.aaflalo.me/2018/10/tutorial-setup-dns-over-https...

Normal DNS use UDP protocol on port 53.

It's very easy to intercept, monitor and redirect. Which is what we think Comcast is doing.

DNS-over-TLS encapsulate the DNS traffic in a TCP connection with TLS. In other words, all request are encrypted and it's impossible (without installing root cert and MITM) to know what site you're consulting.

DNS-over-HTTPS decide to recreate the protocol as either JSON or dns-message (binary protocol akin to the original DNS protocol) and use an HTTPS request (with HTTP2 minimum and TLS 1.2/1.3).

Different way to achieve the same idea, encrypt your DNS data, the site you visit, only here to also make Comcast think you're consulting a normal website securely.

You're not redirecting all your traffic to a trusted source, just the DNS traffic. Moreover, you can easily setup your own DNS Encryption service or choose a provider you trust.

Quite interesting to see his other "works":

* Walking through walls training system * Internet accessible mail box system * Permanent magnet propulsion system * etc...

https://patents.google.com/?assignee=St+Clair+John+Q

We written piece reminding people that pledging money and donating it are two differents things.

Unsurprisingly all is about control and taking. The billionaire don't want to donate they want to invest, they want to own the cathedral.

As usual, the rich don't really care.

Even with those ridership number the company went bankrupt in 2014 and had to be bought by the city that made it non profit.

In other words, not really a profitable market.

Interesting, they are using Ethereum as a way to pay for reserving a user name.

It seems to use also ipfs as storage.

Quite interesting.

I agree that this should be the link for the post.

You also have all the different pictures in a nice slider.

It's not surprising, we're talking about the same company that want to remove net neutrality in Canada.

Not only that, but they want to create a "website police" to block any website that they deem "dangerous".

Of course they don't want people to use VPN...

I'm so happy that the idea of not shoving all your feature to the user is paying off.

I've been trying to make people at my workplace understand that. You don't want a complicate product, you want a modular one.

I really like your take on the "skill" page.

I could see a little toast with a text like "let us help you with your inbox" as a way to nuge the user to check your skill page.

Why it make it a string enum then?

You can do that in any typed language too.

The story is well written.

I like the take on the disease beeing some kind of family legacy even with all it encompass.

I couldn't imagine what the author went through, puberty at 4 years old.

Github repository of their Golang lib:

https://github.com/cloudflare/tableflip

Unfortunately it's the first one present in all DNS blacklist.

I don't think you'll find a dns server that block ads that have whitelisted Google Ads.

I've written the step I used to do the DoH part.

https://www.aaflalo.me/2018/10/tutorial-setup-dns-over-https...

Still need to document the PiHole part.

I've also disable all logging for Nginx and Pihole. The server is also listed on https://dnscrypt.info/public-servers

Also, if you're in the American Continent, you might want to use the proxy I setup on Google Cloud Platform:

https://dns-gcp.aaflalo.me/dns-query

I've been using Intra with my own DoH server for months already. It's stable and updated regulary:

https://github.com/Jigsaw-Code/intra

Also, if you're looking for a DoH server that block adverts, here is mine:

https://dns.aaflalo.me/dns-query

Using another company (amazon in this case) to do your SEO for you.

This is so phishy. Doing a landing page on Amazon S3 and having all the link redirecting to your real website.

I'm starting to wonder if shady SEO marketing companies aren't already doing this to promote their "clients".

I hope the Google SPAM team we'll do something about it.

Provides an API to generate, renew and revoke certificate.

Provides certificate for free that are accepted by all browser/OS.

Let the user easily generate wildcard certificate if you control the domain link to it.

In other words, remove the human interaction.

Server can now easily and automatically renew certificate. No need to go through weird interfaces and obscure settings to always have an up-to-date certificate.

I think they talk about it in "Why we sleep" by Matthew Walker, PhD.

Mostly about some people are biologically programmed to be night owl and other early bird.

The best sleep is not about what at what time you sleep but more if you follow what your biological cycle is telling you.

Mirror is the important word here.

I'm pretty sure it didn't impact anybody.

It's a job offer.

Telling people Stripe care about their employees, that the Stripes built together a platform at one of their Stripe hackathon Etc...

You see the picture. It's not about the platform, it's about interesting people to work for Stripe.

This is great !

I'm curious how does it perform in comparison of neo4j. Especially in memory usage.

I think it's not the cost the issue, but the peace of mind brought by the automatisation of the process of certificate renewal.

This where LE is for me different from usual cert providers.

We need also to compare the user base ...

The user's age on HN is in the ballpark of 25-40 years old, as it's a tech website.

The website in OP is a meme generator, and I'm sure the ballpack would be 12-18 years.

Now considering this, I agree with alkonaut.

The combo username password authenticate the person as much as it authorize them to access the service.

Different meaning but connected nonetheless.

It was quite useful to drive your teacher crazy when changing the volume randomly of the TV.

That was so fun when I was a teenager.

You can already type name your classes and even primitive type.

You don't have only "object".

Personally I replaced it by bitwarden.

Free and open source alternative to last pass.

Work flawlessly as a Firefox Android/desktop extension or as it's own app in Android.

Am I the only one that get "the stuff of nightmares" kind of results ?

Ubuntu 17.04 FF 57 & Chrome 59 with face and Udnie:

https://screenshots.firefox.com/4bMiETLnl1yx8NOx/reiinakano....

For European, if Uber is registered in Europe and is the service provider, it would be the taxes of the country of the client.

First step when getting an ip for a server that will be a mail server is to check if the ip is not already blacklisted.

You can always get it unlisted.

After that don't start to send hundred of email by day. You need to build a reputation for your domain and ip.

As the parent comment says, set up directly spf, dkim and dmarc (also arc if you can). Rspamd can help you do that.

I've been running a personal mail server for 5 years with simply following those rules.