adiabatichottub

Text is wonderful, but note that the one keyword not found in this text is 'parse'. How much extra work is generated writing parers for text that would have been so much easier to deal with if it had just been generated in a structured binary format? You still get the pleasure of designing a new wheel with every format.

And then you add RFC2045 headers so you know what the encoding is...

I think a better resource is http://www.open-spf.org/

SPF doesn't check the reply-to address, only that the host sending the mail is allowed to send mail for the domain in the MAIL FROM: header.

See: http://www.open-spf.org/FAQ/What_it_does/

Edit: for those unfamiliar with the intricacies of SMTP, the first three lines sent are HELO, MAIL FROM:, and RCPT TO:. The From: address that you see in your mail client is actually another header that gets sent once the server provisionally accepts the message based on the first three headers. It's the difference between the return address on the envelope of a paper letter, and an address printed on the letterhead of the actual letter.

I'll have to ponder the method you describe. I know I could implement that on my own mailboxes and some automated endpoints, but not sure how that would work for other users on our domain.

Indeed. Ultimately we're still relying on blacklists, Bayesian filters, and hueristics to detect actual SPAM.

I recently tried bouncing mail during the header phase when DMARC didn't align, but it rejected more legit emails than SPAM. Most of the junk we've been getting passes DMARC and has an unsubscribe link.

We just have to make it the cool thing to run your own mail server. B-)

The big changes I've seen over my lifetime have been tooling and materials. I remember when framers did everything with a hammer, a circular saw, and a speed-square. Now we have nail guns and cordless impact drivers and miter saws. Fiberglass batt insulation is still a thing, but now there's also urethane spray foam. We have engineered beams and OSB sheathing pre-coated with a moisture barrier. There's a lot of things that all add up to better performance and less manual labor.

CADMV claims on their web site that they cannot accept a P.O. box as a residence address. I have yet to find anything in California state law supporting this policy, though IANAL. Their enforcement seems to be quite lax.

As I remember, standard operating procedure was to retry 4 or 5 times, then turn off the computer and walk away in frustration.

I'd accept that challenge, but I can't now because it's been edited out. For what it's worth, I remember somewhat agreeing with it.

> The "hacker spirit" doesn't require being a Luddite

Just to be pedantic, the Luddites weren't anti-technology, they were fighting against a means of production that they could never hope to own and which was ruining their livelihoods.

Or just forego the pin and put a countersunk machine screw, washer, and nylock nut in it's place.

Well... Wikipedia has content that some would consider offensive or unsuitable for children. I'm not in favor of limiting any access to Wikipedia, but I'd consider it a certainty that the day would come when Wikipedia had to decide whether to implement age restrictions or try to police content. I believe that event would change it's governance and social structure in a negative way and significantly degrade it as a public resource.

I consider such rights to be my natural rights, regardless of statute. This is a product of my personal ethics and philosophy. In that sense, it is a right that I have. Whether I can successfully exercise that right without proscription is what I am concerned about.

A decade ago I used to joke that Google should have it's own dating app. "NOTIFICATION: See that person at the other end of the bar? They share the same interests as you and like to frequent some of the same places. They share your political views. You even have some friends in common. They are recently single. Go over and say hi, here are some suggested conversation topics..."

It just seems too obvious now

It's just a different game. A web site is much easier to instrument than a physical place.

Say I go to a bar, I show my ID to the bouncer. My identity isn't recorded (unless they scan it with a device that records the scan data). Maybe they have cameras, my image isn't immediately associated with my identity, somebody would have to do a bit of work to connect the two. Maybe I pay with a credit card, now my name is stored in the point-of-sale system.

But I can still go to a bar with no scanner, no cameras, and pay in cash, and it's not a problem. Not suspicious at all. None of the above record-keeping is required, nor should it be.

Now, if a web site says I need to be provably 18+ to view their content, that's fine. I can take it or leave it. I have a choice.

When the law tries to mandate the software that can or must be run on my device, or tries to limit how I can communicate with my friends and family, now I have a problem. I consider my rights to personal computation and personal communication to be sacred. And I also believe in my right to privacy in these matters. I never needed an ID to send a personal letter, and my right to privacy regarding such communication is protected by law.

Finally, I see gathering of access data by a central authority (which I assume would eventually happen if social media sites started requiring validated ID) to be a concentration of power, and a dangerous one.

Ah, the plea for sanity dollar! Huge Market!

Sadly, he was never able to rid the world of all these fevered egos tainting our collective unconscious and making us pay a higher psychic price than we imagine.

If somebody calls you like this, immediately ask them for their name and supervisor in the calmest, most business-like tone you can muster. A good tactic is to tell them you can't talk just this second and ask for a name and number you can reach them at to discuss the matter further. If they're going to try to dox you then you should try to dox them right back.

Observing and recording law enforcement is generally not illegal, however threatening it might feel to them. It's unfair to compare that to an event where protesters broke into a government building, damaged property, assaulted law enforcement, and made violent threats against elected officials. As to the generosity of letting people know they might be added to an official list, it seems more calculated to intimidate than to inform.

Or they could make a zip gun with materials purchased from any hardware store, right down to the necessary ingredients for making black powder. In fact, if you make a muzzle-loading black powder firearm you're not even required to register it federally.

Luckily the California bill seems to only apply to additive manufacturing processes.

It's both sad and amusing to think of the thousands of legacy machines that will become legally untransferrable because their controllers are incapable of supporting the mandated controls.

A good friend of mine is a ferrier, or as he likes to say, "equine podiatrist". There's actually quite a lot to it. They are responsible for shaping the hoof and shoe in a way that corrects problems with the horse's gait. Each shoe is custom made and fitted to the horse, fashioned from a plain bar of steel. It takes years to become truly proficient at the craft.

Jones lost in a civil suit. If you lie about somebody repeatedly and cause them harm you can be held accountable. It's called defamation. That is not the same thing as government abridgement of speech.

That rot was the direct result of the ad economy that made Google all of its money. Now maybe if they hadn't done it then somebody else would have, but they did do it, and poisoned the well we all drink from.

I learned from a BSides presentation that Ukranian military are using Starlink trancievers placed in pits to beat ground-based signal detection. Do with that what you will.

I've had issues with this same chipset family for years running FreeBSD on some Hetzner hardware. Helps to turn off jumbo frames and checksum offloading. The actual OEM "open source" driver code is 44k lines of inscrutable register writes. Screw you Realtek.

My impression of FreeCAD as a project is that for much if its life it has suffered from a certain amount of developer churn and lack of focus. It's like somebody builds a workbench and gets it working just good enough using a workflow that makes sense to them, but then nobody ever really bothers to flesh out the rest of it, so if you try to do things in a different way that may be perfectly sensible to you the result is a broken mess. Eventually somebody decides they can do better, and maybe they do, but the replacement still has a lot of rough spots that never get finished and the cycle starts again.

It seems like the development team has gotten much more organized in the last couple years, so I have a lot of hope for the future. I think that good open source parametric CAD is something the world really needs.

We did as well for about 20 years. It is a very solid program and does everything it promises. Unfortunately it lacks modern features, and development is sparse to say the least, so we ended up moving to Knot. I'd still recommend tinydns for really simple deployments, though.