tombrossman

For the avoidance of doubt, NoScript version 10 shipped a few days after FF57 was released, and it is an update to that combination which is not working for me. I uninstalled & reinstalled the extension, and clicking on the settings icon instantly crashes the browser. It is totally unusable for me.

No, I'm using Firefox 57 (sure you are still on 56? 57 should be in the repos) and after a shaky start with NoScript 10, whatever the latest update did has badly broken the extension for many users. I am hopeful it will be as good as it used to be some day but today it really is badly broken and unusable. See the reviews from the last 24 hours, it's a mess: https://addons.mozilla.org/en-US/firefox/addon/noscript/revi...

OK, so the issue is unpaid customs fees, which you can pay the courier to sort out for you. I thought they were demanding extra postage or something like that.

Can you contact the sender and tell them to sort it out? They are the courier's customer so really it's their problem to resolve. Just say "I never received my parcel" and let them figure it out.

I'm using Firefox and I need an easy way to toggle JS on for specific domains, which NoScript used to allow and uMatrix does, but I think I'll have to do some further experimentation and get used to the new add-on.

Long time NoScript user here, and I had to remove it today as it is completely broken and unusable. I cannot even get the preferences to open so I can export my whitelisted domains to uMatrix, which I'm testing as a replacement.

I would like to combine uBlock and uMatrix, but I'm not sure I can replicate the functionality I want. Your mention of dynamic filtering is interesting and I wonder if others are using it and can make a recommendation?

I need all JavaScript off by default (including first-party) and the ability to block both ad-serving domains and filters such as /ads/ that work across all domains. Is this possible to do entirely within uBlock Origin?

Fellow Linux users, please keep the snark in this thread to a minimum. Here's just one recent example why, there are more: http://www.omgubuntu.co.uk/2017/05/ubuntu-guest-sessions-log...

Many of the custom images you can find on XDA Developers do not require that you install Google Play Services.

CopperheadOS is a good choice if security is a priority.

If you need proprietary apps without using Google, you can install and use Amazon's app store app, and download them from there instead.

Getting pulled over by a trooper is rare, even if you are speeding (unless it's flagrant). It does happen but they tend to focus on cars and I think this is because the ticketing and inspection is easier for them. I've had to get out of the truck and help them find the trailer registration documents in the nose box for example, and I could tell they were a little embarrassed by this.

Weigh stations are simple, you just idle slowly over the scale plate(s) and there is an illuminated sign board ahead telling you to go, stop, or pull around for inspection. New Mexico is the only state I encountered where you actually rolled up to a trooper in a window up at your eye level and had to interact with them, but this was just to hold up a copy of your permit and they waved you through. You didn't have to speak.

> A mirror is harder to take out with a single splash of mud.

Never mind mud, what about the ice? I drove trucks for a while and the entire front of my truck was routinely coated with snow, slush, and ice. If it was heavy enough I'd have to pull over and tap at it with a 'tire thumper' to knock huge chunks off periodically. Keeping the windshield clear was a constant battle. I wonder what kind of camera or sensor could be used that wouldn't ice up. Traditional mirrors have heating and most are enclosed in a front-facing housing. They get really hard to see out of too, because the salt and sand spray kicked up by the vehicle in front of you sticks to the heated glass of the mirror and collects there. Visibility in winter driving is a difficult problem but perhaps that can be improved.

Could be wrong but it is my understanding that the Omnia either does not support it or it needs additional configuration, which I wasn't interested in performing. Since I was using Pi-hole anyway I stuck with that. Fair question though, not sure about the down-votes you've received.

Here's the Turris documentation on how it handles DNS: https://www.turris.cz/doc/en/howto/dns

After recently setting up Pi-hole on my Turris Omnia I had to choose between using Google's DNS (which supports DNSSEC) or sticking with OpenDNS (which does not...yet?), so I gave up using DNSSEC. The submitted IBM site is really slow to load but I did manage to grab a screenshot of the FAQ page[0] which confirms they do support it. And the privacy policy looks pretty good also[1].

I tried to archive the pages with archive.is but it did not appear to be loading for them either.

Hopefully the site comes back up soon but I have to say I expected to see yet another surveillance capitalism service and I was pleasantly surprised. I'll try it out for a week and see how it goes.

[0]https://screenshots.firefox.com/LiNdj97Ck3qaLXze/www.quad9.n... [1]https://screenshots.firefox.com/YEsWa5TwhGYQDZFZ/www.quad9.n...

Desktop with an ad blocker (which is my typical use case) returns their official site first, then Wikipedia, etc... .

https://i.imgur.com/c8THJcm.png

If you reserve (just book, no need to pay in advance) a popular class of vehicle in advance the pick-up location will often not have one available so you get a free upgrade to whichever superior class they do have ready. Also, look for 'off-airport' locations because these do not assess an airport surcharge fee. Off-airport locations are even less likely to have popular classes in stock. Doesn't matter if you just flew in, (remove your airline luggage tags, try not to be obvious) take a taxi to the location. It will frequently be cheaper this way. Off-airport locations are often near airports.

As an American living in Europe, I found that some US insurers will issue a 'driver only' policy that covers you while driving rentals in the USA on your European license. I'm paying $24/year for mine which has generous limits and is much cheaper than the coverage rental agencies offer.

Also slightly unrelated but don't dare call British Airways to enquire about changing your flight or you will not be able to check in online and you will get the worst seats when you show up for your flight. This is true even if you make no changes, your booking is put in to some kind of frozen state and the phone agents are unable to reverse this. You must visit the BA desk at an airport in person to have this corrected. Bizarre, but this was confirmed by multiple people at BA who I spoke to after having it happen to me.

This comment highlights the problem with calling disclosure 'responsible', because the word is used subjectively.

What you as a commenter, or a company (usually prefers to quietly fix this), or the wider user base (usually prefers a 'heads up' immediately), all have different opinions about what they see as responsible.

Also, it doesn't seem fair to dismiss this disclosure as a 'hit piece' unless it is factually incorrect.

Appreciate the quick response. That's a very good list, and I would only add "all user data will be deleted if service is sold to another company" to it.

Closed source means users unable to verify your marketing claims about tracking. Privacy conscious users like myself would prefer an open-source commenting platform, even one with tracking, since we could verify how it worked (and also take it a step further and circumvent tracking by examining the source).

Also, what's to prevent a provider from double-dipping? If you can sell the product plus your users data you can presumably generate even more income. For example, mobile phone carriers sell monthly plans to users and some sell users location and usage data (usually "anonymised") to advertisers.

I don't mean to imply that you are doing these things, or that you ever would, but without independent verification by a trusted third-party, all the users have to go on are your marketing claims. What's your plan for dealing with sceptical users?

The theme is "Hyde", and that's the default favicon. https://github.com/poole/hyde

No problem, and this is a good reminder to test critical systems periodically. Same goes for backups! Good luck.

Glad to hear you are ok. The largest car I ever owned was a 2006 Lincoln Town Car, which was a great car to drive if you aren't in a hurry. Built like a tank, with old-school 'body bolted onto frame rails' construction. My mom had a Miata for a while and I always felt safer in that. Driving one does require that you pay constant attention to your surroundings (performance is no good if you don't use it) but its ability to manoeuvre was just amazing.

Your Golf probably had decent performance too, but we are discussing your statement about the relative merits of a Miata versus a SUV and there's no comparison, safety-wise. The stats are very clear.

> Additionally, you can control the type of vehicle you are in. A Miata is a deadly vehicle. A large modern SUV is safer.

This is inaccurate. SUVs have a vastly higher rollover rate compared to traditional sedans, and the Miata's handling is far superior.

When a collision between an SUV and Miata is imminent, the Miata driver can take evasive action while maintaining control of their car, but the SUV driver often loses control and rolls the vehicle over, with high risk of head injuries. What's worse, they may hit someone else while out of control and cause even more injury.

SUVs are dangerous to be in and dangerous to be around.

Using AWS's simple calculator[0] for S3, I get a figure of $97.82 for 250GB storage and 1TB data transfer out per month. DO's price is $5. I know AWS is considered more expensive but that's a huge difference - is my calculation wrong here?

[0]http://calculator.s3.amazonaws.com/index.html

Not necessarily, they can move to another police department if they get fired for wrongdoing at their current job. This happens frequently. An insurance company underwriting police malpractice policies wouldn't go for that, they would track the officer's claims history and deny coverage (or make it prohibitively expensive), same as if you kept wrecking cars, submitting claims, and switching car insurance companies.

When the state pays directly, there is no incentive for the individual to behave. If the state paid the officer's salary plus a standard 'allowance' equal to the cost of police malpractice insurance for an officer with no claims, then the incentive is to keep their record clean or pay higher rates out of pocket for misbehaviour.

> What do I have to do to trigger it? Just fail a bunch of SSH logins in a row?

Yes, that's what I do. If you have SSH login via password disabled (you should) then just temporarily move your private key(s) out of your ~/.ssh directory and try logging in a few times. "ssh user@machine && ssh user@machine && ssh user@machine" will do it if you have a ban set for three failed attempts. If it's working, your target machine should no longer respond at all, and connections will time out. If it's a web server the site should be unreachable with your web browser until after the bantime passes.

Is this server running a recent version of Ubuntu and using systemd? Also, have you verified that fail2ban actually blocks you by intentionally making bad login attempts to trigger a ban? I do this with every new machine and never assume it works until I can trigger it on demand. (test using a VPN or set a very short bantime so you don't lock yourself out)

I ask because systemd may not be writing the failed login attempts to the log file fail2ban monitors, which means fail2ban may not be responding to attacks. I don't recall exactly how I resolved this, but I think I had to set "backend = systemd" in my jail.local under the [DEFAULT] section header.

Tangential, but if Pro Fit International make a 'vehicle specific mount' for your model I highly recommend them. They require partial disassembly of your dash trim, which a car stereo installer can do for you. They bolt very solidly to the frame behind your dash and provide a mounting plate angled facing you, which you attach your phone/GPS/whatever to.

I found the best way to attach a phone to the mount was to buy a phone 'holster' - the belt clip type. Break the clip part off and grid down the back so it's flat, then use a 3M adhesive pad to attach the phone holder to the mount. Then you can easily snap the phone into place and see the screen while driving. It's more work than a cheap vent-clip type, but absolutely worth it.

No affiliation with the company, I just think they have the best product and I found them very helpful.

Title could be improved - this is for Google Chrome only. Anyone using an ad blocker can simply add...

  https://coin-hive.com/lib/coinhive.min.js

...to their custom block-list instead, no need for an extension.

On behalf of Linux users who use this to open Terminal... NOOO! I use this key combo constantly and it would take ages to unlearn it. Ctrl+Alt+T = open a terminal window, dozens of times a day every day.

With Nginx I've always used this for the first server block to defeat host header attacks, taken from the h5bp boilerplate server configs[0]:

  server {
    listen 80 default_server;
    return 444;
  }

Is something like this necessary for Apache as well? If yes, what are others using? (ignoring the non-standard but effective 444 return code)

[0]https://github.com/h5bp/server-configs-nginx

No idea, but I asked the same thing on the expats Stack Exchange site earlier today[0]. No responses yet, maybe we have to wait until Monday and call them? You might also contact the US Embassy in your country and ask.

I had a similar problem with signing up for an online "my Social Security" account, and learned that it is impossible. The US Embassy in London wrote back: "You must have a U.S. mailing address in order to create a my Social Security account and cannot open an account without one."

Having a credit record in the USA is no longer important as I do not plan to return, but you would think the credit reporting agencies should have some way of telling them "I'm long gone, if you see a credit application from the USA it's definitely fraudulent". Can't be done I guess.

[0]https://expatriates.stackexchange.com/questions/12104/how-ca...