scblzn

No, checked in PGP Directory right now and I still don't see anything issued in 2025

A reminder that Notion still operates under the .so TLD [1]

Why should you entrust them with your private notes and data?

[1] https://news.ycombinator.com/item?id=26113444

Last year thread about payment issues starting: https://news.ycombinator.com/item?id=41847953

However, be careful with the terms of non-commercial usage (Enforced heavy metrics)

"You agree that the product will send usage data to validate your compliance with the license terms and anonymous feature usage statistics..."

"The information collected under Sections 4.1. and 4.2. may include but is not limited to frameworks, file templates used in the Product, actions invoked, and other interactions with the Product’s features."

However, be careful with the terms of non-commercial usage (Enforced heavy metrics)

"You agree that the product will send usage data to validate your compliance with the license terms and anonymous feature usage statistics..."

"The information collected under Sections 4.1. and 4.2. may include but is not limited to frameworks, file templates used in the Product, actions invoked, and other interactions with the Product’s features."

Thread on Reddit: https://old.reddit.com/r/ChatGPT/comments/1fhhh6b/did_chatgp...

surely these ones for datadog: https://nitter.net/TurnerNovak/status/1654577231937544192

/s

"What happens though if namecheap goes out of business during that?"

.COM agreement between registrars and ICANN requires registrars to regularily store all registrant contact infos in IronMountain and set ICANN as escrow, therefore allowing ICANN to contact all registrants should a registrar fold and allow them to transfer to another registrar. Another reason to keep the domain ownership informations up-to-date. [1]

[1]: https://www.icann.org/en/system/files/files/rde-agreement-09...

The ICANN wholesale prices to registrars, from 1st of September are $9.59 per domain (+ $0.18 ICANN fee per domain) for registrations and renewals [1]

[1]: https://itp.cdn.icann.org/en/files/registry-agreements/com/c...

SERVICE NOTICE: Scheduled Production Maintenance Registry Donuts Inc.

Type: Scheduled Production Maintenance

Origin: Registry Donuts Inc.

Planned Start Date: 2023-02-13 22:00:00 UTC

Planned End Date: 2023-02-13 23:30:00 UTC

Implications: Total Outage

Affected Environments: Production Environment

Afaik it's bit more complex than a forwarding address as it allows replies from the user behind too (while still being protected) [1][2]

[1] https://developer.apple.com/documentation/sign_in_with_apple...

[2] https://support.apple.com/guide/mail/use-hide-my-email-mlhl4...

I don't know what is the deal using .SO/Somalian TLDs for these kind of business apps (same remark for Notion)

They already nearly lost their domain last year [1]

Wouldn't trust to put anything critical/business data in such when I see these kind of choices

[1] https://news.ycombinator.com/item?id=26113444

I do, it works great with their docker-compose install - processing a few billion events per day here. Installation and subsequent minor/major upgrades without any flaw so far, plus they have extensive documentation for the self hosted version which is to note.

Forensics reports would be nice indeed, but even Google doesn't send them to the RUF address. Never got one report in 4 years of DMARC. Only RUA. Maybe one day..

Hello,

I’m the author of the issue on Gitlab (small world, isn’t it ?)

Yes the message is confusing and I agree that .mov isn’t a MIME type but I was merely reporting the error message shown ( plus, they added .mov in their list of file types and had aliased it to .mp4 format, please see: https://gitlab.com/gitlab-org/gitlab/-/blob/master/config/in... )

I'm an EU customer but my Atlassian Cloud contract is still between me and Atlassian Pty Ltd in Australia.

So wherever the data is, the problem is still the same in my opinion.

Was more thinking about Confluence than Jira

Where there is troves of data and schematics about various companies infrastructures

Time to drop all Atlassian products.

Fortunately they removed Server licenses (you have to pay millions for the Datacenter ones or use Cloud) just in time for these new laws.

They were forced to rename

https://twitter.com/Poolsuite/status/1398007075435843592

As far as I recall, they were also heavily censoring and/or banning users from their integrated community system for who was critical of the update.

Had talked about it few months ago that it may be risky to use a .so (Somalia) domain for such a business

https://news.ycombinator.com/item?id=23240762

If it can help you, you should know that they test everything over a VPN that doesn’t support UDP. So if your app makes use of UDP you’ll need a fallback method.

I always used tld-list.com for this and that's the only one with a clean UI that I ever found (not affiliated, just liking the service)

It's the same with Telia Estonia.

And they use dropbear to connect to the router to do changes from remote/customer service/online customer portal, if you're curious (you can see it in logs of the router, Inteno ones)

I tried it around November 2019, really liked Notion and the UI/UX of the product for some note taking/personal knowledge base, however I had to contact their security team through their support because TLS 1.0 was still enabled at this time.

They say they are audited by NCC ( https://www.notion.so/Security-6c56b4854b624b0d8f36711018647... ) but I don't know how NCC missed this. They disabled TLS 1.0 few days after my message.

My second concern is that their .so domain is the TLD of Somalia (with all the risks it brings in case of malicious takeover), and .so zone doesn't even support DNSSEC, once again this is a big issue for me, especially for an app that hosts "personal data" (I see they also make calls on a .com domain, but the .so main domain issue still stands). Support told me they would change the domain in the future but still didn't happened.

It's only my personal security stance/paranoia, but my 2 cents of what happened with them.

Algolia got impacted too, apparently their Salt masters were opened to the whole internet: https://blog.algolia.com/salt-incident-may-3rd-2020-retrospe...

Nearly the same happened in France years ago : https://www.thelocal.fr/20130130/doctors-jailed-over-cancer-...

Kiwi Browser on Android (Chromium based) supports all extensions and has an intelligent dark mode : https://play.google.com/store/apps/details?id=com.kiwibrowse...

Made in Estonia as I see. Congrats ! Very cool project, I really like the GUI part.

Recently there was this too (made quite some noise on social networks) : https://www.androidpolice.com/2019/05/08/kiwi-browser-remove...

Ok, this story is more about Google Play Store but I feel like there is maybe (in my opinion) some conflict and abuse of dominant position here too.

Felt like it was relevant will all the other Google stories in the last days (Nest for ex.)