Lex-2008

haven't heard about dns-account-01, thanks! Heard only about dns-persist-01.

I meant to say that CAA record can also specify account, or at least Let’s Encrypt docs mention it[1]. So unless attacker has access to victim's account - they can't get a cert (unless they can hijack dns, too).

[1]: https://letsencrypt.org/docs/caa/#the-accounturi-parameter

Agreed. On the other hand, these DV certificates only claim to verify who _controls_ the domain. Probably, you can agree that hosting provider and government can also control the domain, no? :)

Moreover, with dns-01, DNS provider can issue fake certificates - unless you self-host DNS - in which case, only your DNS registrar can... and a government.

> http-01

Good point, I forgot about that! But then CAA record might help, I guess, if you specify your accounturi?

I think having multiple authoritative DNS servers in different networks might help with this.

I'm not sure how CAs deal with situations when a domain has several authoritative DNS servers, but not all of them respond with expected reply. Would it would be a good idea for CAs to ask *all* authoritative DNS servers and require a coherent answer from them?

well, I mean, lower prices can come if merchants stop supporting Visa/Mastercard and support only cheaper options :)

Alternatively, merchants can give users more cashback points for using their preferred way of paying. Not sure how this flies with payment processor rules, but I've seen it in the wild.

I've seen few places accepting only cash or cards from a local payment processor. And it looks like local payment processor takes about 0.16% from each transaction.

So I assume that if they were accepting more expensive cards, they might've increase the price of the $100.16 product for me, to offset their costs.

And yes, I also heard that payment processors have rules that require merchants to have the same price no matter what payment processor (or cash) customer will choose.

Turns out, Wayland has wl-copy:

https://man.archlinux.org/man/wl-copy.1

(i was also interested :)

timestamp corresponds to Oct 08 2025, so probably the last time the file was modified

not OP, but my current solution is to have a link which says "click to show email", with javascript handler that changes that link's href (and text) to email address, which is somehow computed. For example, by taking page URL and performing some regexp on it. It both avoids storing email in page source in plain text and requires human interaction, so feels good enough.

Another way I've seen elsewhere is to use a human-language explanation of how to build email address, something like this: "To get my email address, combine my first name (John) with my birth year (2000), separated by dash (-), and add email provider (@gmail.com)".

my favorite "easter egg" hidden behind File -> Exit menu item of jspaint.app... I still remember how it blew my mind the first time I saw it!

not a Linux expert, but I believe that at the very least it's time sensitive: after consumer process reads it, it's gone from the pipe. Unlike env vars and cli argument that stay there.

not OP, but for some it might be availability of latest versions packages (say, you've heard about new major version of Bash or Vim being released today, and wondering how soon it might be available in your distro packages), and, as someone else mentioned, less update stress due to lack of "major version bumps" - just remember to subscribe to https://archlinux.org/news/ and watch out for entries requiring "manual intervention".

i initially misread "2015" as "2025", too... But no, it was part of SQLite for ten years already!

interesting, but can't you use "Index On Expression" <https://sqlite.org/expridx.html>?

i.e. something like this: CREATE INDEX idx_events_type ON events(json_extract(data, '$.type'))?

i guess caveat here is that slight change in json path syntax (can't think of any right now) can cause SQLite to not use this index, while in case of explicitly specified Virtual Generated Columns you're guaranteed to use the index.

re: SSH - I once heard that in China they can throttle SSH speed so it's usable for terminal work, but not for copying files or browsing web.

I believe pressing + should open "Select files" dialog prefilled to select all files (and dirs), pressing Enter confirms it.

My Midnight Commander 4.8.33, however, remember previously entered mask, and if no mask was entered - then it defaults to selecting nothing :(

To be fair to Arch, you can always subscribe to their RSS or mailing list if you want to be notified about breaking changes

Let's start with an extreme example: each day more people die in traffic accidents, than by falling from a 10-story building. But still, we all can agree that driving a car is safer than falling from a building.

Why? Because driving a car you get more chance to get to your destination safely than falling from a building. ChatGPT estimates 0.01% chance to die in car accident per year, when driving every day, and 90-99% to die when falling from a building, once.

However, since there are many millions of people who drive a car every day, multiplying very little chance to die in car crash by millions of people, we get thousands of traffic-related death per day. Compare that to single-digit number of people falling from buildings, even if all of them die from it.

Back to Covid, let's imagine a village with simple numbers like this:

10 people were NOT vaccinated, 100 people WERE vaccinated.

Of 10 people who were NOT vaccinated, all 10 got hospitalized.

Of 100 people who WERE vaccinated, 20 got hospitalized.

_Correct_ way to look at this village would be:

ALL people who were NOT vaccinated, got hospitalized - 100% hospitalization rate.

But among those who WERE vaccinated, only 20% got hospitalized.

Hence, it's better to be vaccinated - this way you'll get 80% chance of not being hospitalized :)

I'm not a real statistician, and don't have actual numbers on hand, but situation with real world numbers is similar: among people who were vaccinated, less percent were hospitalized than among those who were not. It's just that we had so many many vaccinated people, that their small hospitalization rate, when multiplied by total number of vaccinated people, outweighs number of not-vaccinated and hospitalized people.

Hey, thanks a lot for the atom.xsl! Used it to learn a lot while converting main page of my blog to an Atom feed half a year ago.

yep, article also mentions them:

> I was disappointed to find out that the UK’s Royal Mail discontinued international reply coupons in 2011. The only alternative that I could think of was to buy some US stamps.

I like your comparison with self-built storage, but comparing $20/TB/month with other CLOUD offerings, we see:

* hetzner storage box starts from $4/month for 1TB, and then goes down to $2.4/TB/month if you rent a 10TB box.

* mega starts from €10/month for 2TB, and goes down to €2/TB/month if you get a 16TB plan

* backblaze costs (starts from?) $6/TB/month

I was looking for a cheap cloud storage recently, so have a a list of these numbers :)

Moreover, these are not even the cheapest one. The cheapest one I found had prices starting from $6.5 for 5TB, going down to $0.64/TB/month for plans starting with 25TB (called uloz, but I haven't tested them yet).

Also, looking at lowendbox you can find a VPS in Canada with 2TB storage for $5/month and run whatever you want there.

How all that compares to $20/TB/month?!

Please feel free to correct me if i'm comparing apples to oranges, though. But I can't believe all of these offers are scam or so-called "promotional" offers which cost companies more than you pay for it.

Thank you for this comment! Only it made me re-read this word correctly

Just now it was 4th on HN fromt page, and now it's gone...

Interesting how it works - I was expecting it would use Volume Shadow Copy, but no, it's something different:

> By using WindowsNT Driver technology, Snapshot chains itself between the file system and the disk driver so that it will see any request to the disk. When any WRITE request is detected, before the data are saved, the data are read first from the disk and saved, before the WRITE request is allowed to proceed.

wobbly windows - did you know that they're still available in modern KDE Plasma Desktop Environment? No need to actually miss them! :)

https://userbase.kde.org/Tips/Enable_fun_desktop_effects_on_...

ffplay?

From the article:

> Servers store passwords in the form of hashes, so even if a hacker steals the database, they see the hashes, not the actual password.

So as I understand it, the article assumes that someone hacked a website where you had an account, and want to get your password (for the hacked website), in order to try using the same (username and) password to get access to your account on other websites.

Or, as other comments mentioned, they might intercept wifi authentication packets (which contain hash of the wifi password), and try to get wifi password from it.

> "server side rendering" with a GPU instead of sending more JavaScript

Some 7~10 years ago I remember I saw somewhere (maybe here on HN) a website which did exactly this: you gave it an URL - it downloaded a webpage with all its resources, rendered and screenshot'ed it (probably in headless Chrome or something), and compared size of png screenshot versus size of webpage with all its resources.

For many popular websites, png screenshot of a page indeed was several times less than webpage itself!

I'd buy such a device. Currently in holding on to my last pair of SSDs from pre-QLC era, refusing to buy anything new

Safari, Firefox, or IE? Note the text says:

> Should work on Desktop with Chrome or Edge.

Not sure about $ sign, but ^ probably comes from ADM-3A: https://en.wikipedia.org/wiki/ADM-3A#Legacy

And here is a photo of its keyboard: https://twitter.com/toresbe/status/1756800589340549609/photo...