m-s

Apple uses certificate pinning for some of its domains, which doesn't play nicely with corporate firewalls.

https://support.apple.com/en-us/HT210060

Getting refunds for App Store/in-app purchases has been a breeze for me though.

How would you “steal” money from a contactless card or a phone?

Yes, you can. But only drinks with up to 4.7% abv

It's fine to present a pdf, as long as it's legible and the code can be scanned.

> Het E-ticket dat wordt geladen op een mobiele telefoon, tablet of laptop is alleen geldig als vervoerbewijs als het duidelijk leesbaar weergegeven kan worden op de mobiele telefoon, tablet of laptop.

https://www.ns.nl/binaries/_ht_1553092893605/content/assets/...

I have my own domain and run a Cloudflare Workers endpoint that updates a DNS record. It’s quite simple to run one’s own dDNS service.

The pasted text already includes the GTUBE string [1], which is used to test some spam filters.

[1] https://en.wikipedia.org/wiki/GTUBE

You can still click through the phishing warning

You need an iPhone to link your phone number though.

“willingly” is a bit of a stretch

Similar charts exist for aircraft:

https://www.airbus.com/en/airport-operations-and-technical-d...

https://www.boeing.com/commercial/airports/rescue_fire.page

You can host the webfont yourself. And an email contact form doesn’t require a cookie banner.

Without getting into the question of whether this study involved human subject research, I find a lot of the anxiety and paranoia unwarranted.

Companies to which these laws apply should already have a process in place to deal with subject access requests. Complying with relevant laws is just part of doing business.

All the other site owners could have figured out with a bit of googling that the laws don't apply to them—there is plenty of guidance available.

I can only speak for the GDPR here, but had the requests been real and valid, the worst outcome would have been a regulator telling you to comply with it. Data protection authorities are more interested in helping companies get into compliance than punishing small businesses for minor infractions. If you look at past decisions, it usually takes serious and/or systematic violations to get fined.

I think there have been more in-flight battery fires than (attempted) terrorist attacks.

If you search for flights to “QPX”, you get a flappy bird clone

Google Flights allows multiple alternative airports as well

NRK also published a detailed timeline of the events in Norwegian (Google Translate should work just fine): https://www.nrk.no/sport/sendte-denne-sms-en-_-sa-startet-nr...

I think most users lack understanding to make an informed decision about where they want to be on that curve.

Having 2FA set up usually gets around those pesky risk-scoring algorithms.

They’re going to do one for Twitter as well.

https://twitter.com/Datatilsynet/status/1440580313931927558?...

Treating STIs is more expensive than testing, and also paid for through statutory insurance.

You can safely assume that most airlines pay only half the list price, or even less.

https://en.wikipedia.org/wiki/Competition_between_Airbus_and...

That's incorrect. Emirates operates some aircraft with a two-class configuration.

Did you read the article? The Portland Loo is neither crazy expensive nor high-tech. It's a more inclusive and accessible version of the "public urinal that's little more than a drain and a shield."

If I understand correctly, the journalist did nothing more than accessing an entirely unsecured, public website.

One could also say that the costs of using cash are being passed on to card-paying customers