amaccuish

Can confirm, did the form online in Berlin, super easy and quick.

So a lot will have in their contract with their processor that they actually can accept Visa/Mastercard, so the sign is there to put you off.

But actually a lot don't, and when you try to pay, even contactless, with a non-Girocard, it won't work.

Visa and Mastercard don't magically let you on their network because you have a card machine.

Before the war when I studied Russian, I had the unpleasant experience of having to get a Russian visa, which is usually subcontracted to "VFS Global", a private company. Didn't do anything to improve the experience at all.

Weird to think that Amazon's kindle format used to be based on .mobi, itself based on the Palm's database file type.

Kernel panic too...

Reminds me of BlackBerry and Opera, which used to do similar things (server-side rendering) on mobile to use less data.

> the krbtgt account should be rotated yearly but in practice, it carries a huge risk of outages for accounts

Bad example, since the krbtgt password needs to be rotated twice, since the old one is stored as well, precisely to avoid outages.

I love this guy but some of his sentences, as a native speaker, are phenomenally difficult to parse; or is this just me?

And for the documentary (watching it now, thank you!): https://archive.org/details/das-microsoft-dilemma

Given that they're moving to Libreoffice, I imagine the collabora integration with Nextcloud (which is, IIRC, a VNC like interface to Libreoffice), would be a better bet.

Excellent news, hopefuly a rollout to the rest of us at some point!

Directory server could be Samba4, but I guess if they aim for Linux on the desktop, FreeIPA would probably be the better bet.

Though the choice of email software is interesting; Grommunio from Austria is literally a drop-in Exchange server with support for MAPI, MAPI over HTTP, RPC over HTTP, ActiveSync etc. But again, I guess with a move to Linux you just need something support Cal/CardDAV and IMAP.

Even after Googling I can't find the answer: what would you show then at the boarder? On their website, the "share code" seems to only be for non-governmental use.

Is your passport number then linked to the visa? What happens if you get a new passport? Does it work for non-biometric passports?

Or is there some kind of stable "citizen" identifier in the passport that the visa is linked to? I can't imagine it being a simple name + DoB lookup.

> In both French and German the same word is used for the animal in the field and on the plate.

Ehh, in German we talk about Rindfleisch, which comes from a Kuh.

To add to this, the AusweisApp in Germany shows what information you're sharing to a website and asks you to confirm its ok

Moved from SOGo to Grommunio [0]. The ActiveSync support from SOGo was fairly flaky, plus Grommunio has EWS support.

[0] https://grommunio.com/

I've since moved from SOGo to grommunio[0]. It's Activesync support is great, far better than SOGo, and supports MAPI for Outlook and they'ved just released EWS support for Apple Mail / Outlook for Mac. Couldn't be happier. The other parts are fairly standard, rspamd, postfix etc.

[0] https://grommunio.com/

Google as an IdP is honestly terrible, and probably the one of the primary reasons why Okta is popular, especially amongst Google Workspace orgs.

In Germany, we have HBCI/FinTS, it's basically a standardised protocol to do "home-banking", and it works really well. I use an open source Java app, Hibiscus [0], and it connects to all my accounts and downloads the transactions. I can also make transfers in the software and they're pushed to the respective banks.

It's almost what I imagine client-server Open Banking could have been.

There's also the EBICS protocol, but that is more for B2B, server-server communication I believe.

[0] https://github.com/willuhn/hibiscus/tree/master

the required old version of libssl is no longer in Ubuntu's repos

AWS Client VPN and Ubuntu 22.04... Need I say more?

They're likely the "anti-terrorist" measures that have been announced. Not hard to say at all.

BlackBerry operated it's own GPRS APN, so all Blackberries registered directly with it from the tower, and so it always had their up-to-date location on the network.

BlackBerry had a working push system without hanging TCP connections. You made an HTTP call to BlackBerry, who then sent a UDP packet over the network direct to the device. It's a shame we've lost this architecture.

The one where you would go to click on the first result and it would expand seemingly perfectly timed in between and you’d end up somewhere else?

Now the IPP-Anywhere / driverless IPP, AirPrint, and driverless scanning is a thing, I think this is sadly too late.

Go to the Drivers page on Brother's website, and for any recent macOS version, the answer is, "just use AirPrint".

Such a bizarre app. Instead of implementing push notifications in the "Google Authenticator" app, Google decided to add the logic to all other apps like YouTube. Before we introduced Okta, our users would get notifications like "Open the YouTube app on your phone to approve this login".

Whilst clever for the people who don't have Google Authenticator installed, it's just bizarre to ignore it when it's there.

And as an an Admin, GMail is awful. Microsoft knows what admins need and give them to tools to do it. There is so much that can't be configured with GMail, and they don't even provide a proper cmd tool like Microsoft does with their powershell modules. The only option is "GAM", a third party not supported by Google project [0].

Another example, the default routing rules page in the admin console defaults to only showing 10 rules. Every time you add a rule, the pagination is reset, so you get lost where you are and can't even see the rule you literally just added.

And as an identity platform, Google is nothing compared to Okta or AAD. Whilst it's wonderful that Google login is everywhere now, I can't for example, request the user do 2FA for particular apps.

Even the admin console only requires 2FA once a month, it's ridiculous.

And don't get me started on "groups" still being attached to distribution lists out of the 60s [1]. Or the inability to have shared mailboxes.

No one should ever choose Google Workspace over Office 365.

[0] https://support.google.com/a/answer/10014088?hl=en

[1] https://news.ycombinator.com/item?id=35070618

> Network management is there for a purpose, and the people focusing on bypassing it are generally bad actors

I don't follow your reasoning. So you have the ability to block QUIC, but declare QUIC to be a "bad actor" trying to bypass your network management?

They switched from TCP to QUIC base, what can be done over HTTP3 can also be done over HTTP2.

I believe the Ubuntu title is purposely written to make this sound as boring as possible in the hopes of somehow avoiding the controversy this annoucement will inevitably cause.

IMHO the Phoronix title is more descriptive: "Ubuntu Flavors/Spins Will No Longer Be Able To Install Flatpak By Default" and the HN title should be changed.

Because that would effectively broadcast your browsing history to the LAN.