robertduncan

There is a parallel to the public suffix list, which domains like github.io are listed on: https://publicsuffix.org/list/public_suffix_list.dat

What format of auction was it? Does that imply there was a counter bidder for a similar amount?

Looks like your SSL certificate has expired.

OpenSSL: https://www.openssl.org/docs/

ssl(3): [STILL INCOMPLETE] Manual page documenting the OpenSSL SSL/TLS library.

This proposal already exists: Subresource Integrity http://www.w3.org/TR/SRI/

http://www.chromestatus.com/features/6183089948590080 http://status.modern.ie/subresourceintegrity

Error detection is much easier with pipefail:

http://www.gnu.org/software/bash/manual/html_node/Pipelines....

"If pipefail is enabled, the pipeline’s return status is the value of the last (rightmost) command to exit with a non-zero status, or zero if all commands exit successfully"

Note that Gandi do not offer SHA-2 certificates at all at the moment.

https://twitter.com/gandibar/status/508001036653826049

SHA-2 for new certificates.

SHA-1 has been deprecated for a while but is still in (very) widespread use, see: http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-13... http://news.netcraft.com/archives/2014/02/04/nist-continues-...

Chrome uses CRLsets:

https://twitter.com/agl__/status/409687123659214851 http://dev.chromium.org/Home/chromium-security/crlsets

I couldn't tell if this was satire or not.

Or the best of both worlds, tshark! http://www.wireshark.org/docs/man-pages/tshark.html

wc(1) to the rescue! :)

http://tbaggery.com/2008/04/19/a-note-about-git-commit-messa... gives a good description.

Using git commit -m is a guaranteed way to write useless and ill-formatted commit messages.

Was I the only one shocked by the $250 price tag? Shame -- at $25 I would have bought it straightaway.

The proposed scheme seems overly complex and I don't immediately see any advantage over explicitly invalidating all issued (randomly generated) tokens after the password has been reset.

Why was the incredibly important caveat -- this vulnerability only affects configurations which are using netmask-based permissions -- left to the last paragraph?

Me too. I found it subtly ironic.

Using the -ww flag will produce unlimited width output

or is it?

> host www.satuno.net www.satuno.net has address 109.236.83.66

Only a few days ago was this: https://webcache.googleusercontent.com/search?q=cache:diYc90...