yardstick

Who knew I’d need to do this? I’d never needed to do this either my emails in the decades prior.

You’ve also got no idea what was in those emails. Could be some valuable knowledge or logs about some crazy rare bug or scenario, and would be useful to review today.

We just turned on S/MIME by default, to “be secure”, whatever that means. There was no warning in the email client about losing access to the email if you lost your keys.

Citing BOFH is all well and good inside certain circles. In the real world, people don’t like spending time or effort on poorly thought out and implemented solutions.

The article wasn’t great at laying out the concepts at the start. As I understand it, the big idea is essentially a bloom filter as the first phase of a retrieval.

No idea if it’ll trigger a lockout, but if it does at least I have a copy of my photos already.

Been running it for a couple years without issue. But yes your milage may vary.

Yeah that’s the one.

I do have a Mac so it didn’t seem difficult to me, but I accept it will be for those that don’t.

I run a Synology NAS with a docker container that periodically downloads new iCloud Photos to a local directory.

I’ve got hundreds of emails from the early 2010s between a couple of coworkers and myself that I can no longer read because they were S/MIME encrypted and I’ve got no idea what happened to my keys or even if my current client supports it anymore.

I wish the client stored it decrypted once received.

They tried this years ago with ICRA and others. Long gone, but it worked by the webmaster adding metadata to self classify a site. Browsers and other agents could then allow/deny after inspecting the tags.

https://sk.sagepub.com/ency/edvol/childmedia/chpt/internet-c...

While this is likely what the op was suggesting,

I would like to point out that in Australia and NZ, it can be a massive pain to find someone who will ship internationally.

Normally this is for things like Amazon US, and other US-based companies. There are services[1][2] that advertise virtual postal addresses in your purchase-country where they’ll box and ship it to you.

So yes, a Chinese name based in Australia with a shipping address in the US isn’t immediately a red flag. Lots of Chinese in Australia and NZ, and lots of people here like to use shipping services like this.

1. https://www.nzpost.co.nz/tools/you-shop

2. https://www.choice.com.au/shopping/online-shopping/buying-on... (Scroll to bottom)

Note: Java compiler versions from 9 onwards have lost the ability to -target 1.5 and earlier.

Sometimes you still need Java 8 to compile for super old programs — think decades old IoT devices too small to handle newer JVMs that you still need to do the occasional minor update for.

But really sdkman is just nice to be able to quickly install and quickly switch jvms without worrying about any opinions the os package manager may have. If I want an old jre8, do I need to fuss around with finding the right package repo for my arch etc, or should I just use sdkman and be done with it.

And that’s what the IETF uses but djb doesn’t like.

Within the IETF it’s not 100%.

See section 3.3 of one of their RFCs for proof.

https://www.rfc-editor.org/rfc/rfc2418.html#section-3.3

“ Working groups make decisions through a "rough consensus" process. IETF consensus does not require that all participants agree although this is, of course, preferred. In general, the dominant view of the working group shall prevail. (However, it must be noted that "dominance" is not to be determined on the basis of volume or persistence, but rather a more general sense of agreement.) Consensus can be determined by a show of hands, humming, or any other means on which the WG agrees (by rough consensus, of course). Note that 51% of the working group does not qualify as "rough consensus" and 99% is better than rough. It is up to the Chair to determine if rough consensus has been reached.”

See https://news.ycombinator.com/item?id=46035639

A consensus isn’t always 100%

In practice, many gas stations have VPNs to various services, typically via multiple VPN links for redundancy. There’s no reason why this couldn’t be yet another service going over a VPN.

Gas stations didn’t stop selling gas during this outage. They have planned for a high degree of network availability for their core services. My guess is this particular station is an independent or the air pumping solution not on anyone’s high risk list.

I call them Wise now, have for at least a year. I first joined years before they renamed. Wise is a lot quicker to say.

Correct. This is not something Wireguard does, which was the original comparison.

tinc: One public node, thousands of private nodes, with NAT punching. That's fine and typical in my experience.

Last I checked, tinc supported NAT port punching natively.

> HTTPS doesn't have mandatory key rotation every 90 days. LetsEncrypt does for reasons that they document, but you can go elsewhere if you'd prefer.

A lot of this discussion is about how the browsers define their security requirements on top of HTTPS/TLS/etc.

Such as what CAs they trust by default, and what’s the maximum lifetime of a certificate before they won’t trust it. I believe it is now 2 years? Going even lower soon.

I don’t believe Android IPv6 stack supports dhcp, so won’t be much use there.

Do you upload events to a remote location? How is your storage box secured against theft? That’s my biggest concern for doing local cctv- if you are robbed, they’ll grab anything that looks of value.

It’s the Thundering Herd Problem.

See https://en.wikipedia.org/wiki/Thundering_herd_problem

In short, if it’s all at the same schedule you’ll end up with surges of requests followed by lulls. You want that evened out to reduce stress on the server end.

Special shout out to the No One Lives Forever (NOLF) series of Spy-parody FPS. Stuck in rights purgatory for 25 years now.

https://www.thegamer.com/no-one-lives-forever-the-operative-...

> many consumer devices suck wrt to wifi. For example, there seem to me ZERO soundbars with wired subwoofers. They all incorporate wifi.

Sonos has its issues, but I do need to point out that their subs (and the rest) all have Ethernet ports in addition to WiFi.

It’s been years but I’ve likely used NAT to redirect ICMP pings so the local firewall responds rather than whatever boat they were trying to reach.

Systems change - a server that once used to respond to pings may no longer do so, but client software may not be updated to stop doing pings before connecting to the actual service on the server. In an ideal world the client code would be updated, in practice: hello firewall.

I am sure someone will find a way to exfiltrate data using any ICMP type. How good are firewalls at validating the packets are legit?

Why would one choose this over the original?

What about paper bags? In the UK retailers have to charge for single use plastic bags. Clothes retailers hand out strong paper bags for free, and charge for plastic.

Supermarkets charge for plastic bags. Paper bags for fruit and veg work well. They also provide quality reusable bags that cost a small amount (£1 or so), and people actually reuse them.

Can’t the cat just sit directly beside the fish tank and watch?

It’s been decades, why doesn’t getaddrinfo have a standardised way to specify a timeout? Set a timeout to 10 seconds and life becomes a lot easier.

Yes I know in Linux you can set the timeout in a config file.

But really the dns setting should be configurable by the calling code. Some code requires fast lookups and doesn’t mind failing which, while others won’t mind waiting longer. It’s not a one size fits all thing.

You can have a strong parent-child relationship while still using daycare.

Also people work due to other reasons unrelated to providing for their family. Individuals are allowed to have lives outside their kids.

Kids are social and like playing and learning from other kids. Daycare lets them do just that. It’s a great thing and every toddler I’ve met who wasn’t in daycare was behind in something. Especially verbal skills.

Plus daycare allows women to continue their career progression. It’s soo important. Not every woman wants to end their career as a mother to a young kid. Daycare enables successful women to thrive and still have families.