tatersolid

Concur. My kids and watched a “small” Falcon 9 launch from the mainland park nearest the pad at Cape Canaveral. The noise alone was astonishing; bring binoculars to see detail.

FIPS-140 allowed encryption using 3DES up until Jan 1 2024, and allowed certification of modules containing SHA-1 through the end of 2025. There is some transition-timeline nuance involved, but those examples are in general pretty horrible from a security perspective.

The shortage of ATC staff dates back to the Clinton Administration. It’s just hard to attract people into a 5+ year training program for a very stressful job where you might get bounced near the end with no payout and no transferrable job skills.

> Unlike in sports/stocks there are no rules / punishment for insider trading.

Wouldn’t the good old-fashioned fraud laws present in basically every jurisdiction apply?

This article states higher per-capita horse deaths in 1900 New York City than automobile deaths in 2023. This stat does not account for the significant disease caused by all that manure mixing with water supplies. Its unclear if automobile pollution is overall worse from a public health standpoint than mountains of horse poo.

https://horse-canada.com/horses-and-history/the-poo-conferen...

> Before the introduction of cars, “poor road engineering practices” wouldn’t result in those deaths.

Death by adverse horse encounter was very common before the 1920s. Not sure how many of those deaths can be blamed on poor quality road engineering. But putting a bunch of humans, carts, and excitable half-ton animals in the same crowded streets seems like poor engineering practice.

Title has been modified by this submission. Actual title of article is Anonymous credentials: an illustrated primer.

This same scenario happened to me as well, and my “appeal” was instantly automatically denied.

[citation needed]

Please stop with the hyperbole. Shit is bad enough; more fake news from any direction doesn’t help.

Perhaps it was actually an authorized drone?

Here in the USA quad-copter drones are used to inspect powerlines and other infrastructure; I see them a few times per year in my area. I don’t see why they wouldn’t use drones to visually inspect train tracks as well. Very cost effective and energy efficient alternative to manual inspection in a vehicle of some kind.

Liquids are heavy. A large chunk of the retail cost in bottled drinks of all types is transport and distribution.

The same is true of liquid detergents and soaps and anything else you buy that is mostly water - even fresh produce.

Where do you store high quality original images in case future edits or recompression with better codecs are needed? Generation loss is a thing.

I view the high-quality originals as “source” and resized+optimized images as “compiled” binaries. You generally want source in Git, not your compiled binaries.

> you can just enable either scx_lavd or scx_bpfland from the kernel settings

So Linux is still nowhere near an option for non technical users.

You’ve never had a concussion, gone under anesthesia, or gotten older? Memory based passwords are not durable; I personally forgot my Google account password after a surgery.

I grew up in a rural township 50 miles from a major city in the 1980s. We were never isolated and there were in fact a diverse set of peers my own age with interests and heritage all across the spectrum. Yes there were a few racists or religious zealots but 99% of the folks got along just fine.

My own lasting impression is that this is the “American experience” that is not dead nor impossible to recreate in 2026. We just all need to learn to be decent Americans again.

> I know other people like reading LLM output.

I haven’t met any of these people; I’m sure some may exist but does anyone actually “like” rather than “tolerate” LLM writing? Anybody have a link to a decent study or survey on this area?

> What is the FIPS version of wireguard?

IPsec or TLS-based overlays which use AES encryption and NIST-approved ECC curves or (gasp) RSA for key exchange and authentication. They generally suck in comparison with wireguard, which is a clean-sheet modern cryptographic protocol.

> AWS designs and implements their foundational services holistically.

I’d say they implement their services circularly. The outage-inducing circular dependency between Dynamo and Route53 is not a “holistic” design.

SendGrid and their competitors are already the very definition of “sender pays” for email. “Sender pays” is how they make money. This isn’t a problem of monetary incentives.

The problem is that companies get their SendGrid credentials compromised via password re-use or phishing.

It never was FIPS-approved and likely will never be. The wireguard protocol used by Tailscale uses ChaCha20 for encryption which is not FIPS approved.

@dang how do I change “Spas” in the title back to “SPAs” as was originally submitted? It’s a misleading title after the automatic transformation.

We’re calling these organized criminals vendors now?

I can confirm terrible video quality on 1Gb/s Xfinity connection in Chicago area. The NFL streaming picture quality looks like RealPlayer on a 56kbps modem from 1998. The ball becomes invisible as soon as it is passed or kicked! Blocky and ghosting artifacts. Not a network issue, every other site/app working great, it’s simply Netflix falling over during a live event again.

You know you don’t have to give it permission to a whole zone right?

My DNS provider has per-record permissions, but you could delegate a subdomain even if your DNS provider lacks per-record permissions.

OCSP stapling adds two more signatures to the TLS handshake. Bad enough with RSA keys but post-quantum signatures are much larger. OCSP stapling was always a band-aid.

If the server must automatically reach out to retrieve a new OCSP response for stapling every 7 days, why not just get automatically a whole new certificate which is simpler and results in a lots less data on the wire for every TLS connection?

That might be from a Microsoft feature to prevent phishing that blocks display name spoofing. I get hit with that when I email from my personal to work email… the display name portion of the FROM address matches my work so it trips this filter.

Obviously they can only do this for unique-enough names and so this filtering could never work for “Joe Miller” but it does stop the dozens of phishes we see per day that are FROM our CEO’s first and last name but with a Gmail email address.

This is more about reputation than “custom domains”. I’ve had <realname>.com registered since 1996. Hosted at free Google Workspace account for 15+ years. They added SPF and then DKIM/DMARC as those thigs evolved. Never had spam reports in all that time; delivery is better than $dayjob’s 30-year-old domain.

Reputation is everything in email delivery.

> Of course I still bill the time it would have taken me but for a professional it can be a great improvement.

Isn’t this basically the definition of fraud?

> Proprietary VPN client that only runs on Windows

Out of curiosity, which one? I haven’t encountered a single-platform VPN client in years. Even Microsoft’s built in VPN client is just standards-compliant and interoperable IKEv2.

> maybe briefly booting up another 100k isn’t going to be the end of the world

Cloudflare doesn’t run in AWS. They are a cloud provider themselves and mostly run on bare metal. Where would these extra 100k physical servers come from?