usr1106

Support promised to reply within 24 hours.

After 25 hours a got a mail with probably copy-paste text. It advises me to to take exactly those steps that I had explained them as not working.

Took those steps again and again they don't work.

Did I expect anything better? TBH, not really. Probably the only way is to close my credit card.

Would need to be very paranoid, to see it as connected, but I cannot login to my AWS account. What the heck is going on?

Edit: My Hetzner console works nicely. I don't have any significant resources there at the moment.

Edit2: At work we have several physical Hetzner servers in production. They seem to run fine, 10s of thousands of clients connected.

Yeah, the tech powerhouse seems to refer to the US. There is no doubt that US dominates a lot of tech at the moments, China dominates a lot of manufacturing.

The US is a failing democracy ruled by ruthless liars and capitalists. China's surveillance and lack of freedom is beyond discussion. So EU not being a tech powerhouse still does not look too bad.

The link seems to be the minutes of a parliamentary debate about a multitude of topics. It does not explain what this tax is about and I guess there is another approval step in the senate (French is neither my mother tongue nor am I fowolling French politics)

That the current internet with social media and AI boom destroys democracies and the planet is a fact. Whether such tax is a good step to slow that down, I have not thought about.

Not very familiar with PDP history, but PDP-12 missing also caught my attention.

Regarding later heritage, to my understanding, several developers of the VMS kernel moved on to work on the Windows NT kernel. Whether it's really only coincidence that every letter of the acronym got shifted by one?

At least the statement is not competently written.

They write that TLS certificates have potentially be exposed. That doesn't make sense. TLS certifcates are public. Probably they mean private server keys have been potentially be exposed. And after that the certificates are not only useless but dangerous (if the private is really in the hands of the attacker).

They write they have been revoked, OK. But they continue to be served until new ones are in place. Hmm? Well, no browser checks revocation anyway I guess.

What will LLMs be trained on when SO does no longer exist (or is an archive of increasingly obsolete answers)?

> At any later time you can check

Can you? I am not familiar with any electronic voting system because they are not allowed where I vote. Does any system give the voter access to their vote later to check that it was registered correctly?

Not even sure whether that would be a desired functionality. Free elections are secret for a reason. If you can check whether you voted correctly others can, too. Even if that functionality were protected by the private key again, it might be misused. There are governments/comompanies where they'd say: Show me how you voted or you are in prison/fired.

The "complication" is simply that systemd-resolved on older, but still supported Ubuntu versions 24.04 LTS and 22.04 LTS does not know about the new KSK. It can be installed on those distros, but systemd-resolved by default only uses keys from its own package, not what is installed system-wide.

https://askubuntu.com/questions/1570248/systemd-dnssec-failu...

https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/21705...

The linked online tool https://dnstest.dev/ksk-2024/ shows all green nevertheless. At least with local DNSSEC verification disabled. But with DNSSEC verification the tool cannot even be opened. No idea how this is supposed to work.

Edit: After adding the new KSK manually the online tool displays:

> RFC 8509 support was not detected All three sentinel names resolved despite the DNSSEC controls passing. Your resolver path does not appear to implement the sentinel, so this test cannot determine whether it trusts KSK-2024.

Thanks a lot! That must be it. Wasn't aware that something "big" was happening.

Sure, to some degree you must trust your browser. In the extreme case you could open a new, non-persistent browser session for every page you visit. Could be slightly inconvenient...

Yes, it has access to the internal storage mechanisms of the browser.

I used to use Cookie Auto Delete for years. But when I last checked it seemed unmaintained. I log out of all somewhat important services anyway every time I am done.

For important stuff like banking I use Firefox containers.

Yeah, all of them could have their weaknesses and vulnerabilities. I just hope no attacker hits exactly the stack I use...

I don't use Telegram Desktop or Windows. But that's exactly the reason why I run Firefox in a firejail sandbox on Linux. The browser has only access to my Downloads folder. I know that it's considered untrusted and don't keep any files there for a long time.

A bank that cannot be used in the browser has no decent service.

No. What happened to their remote library scheme? They did not make if for profit, but still...

Interesting, in all the years I have never noticed that IP has 2 meanings (well probably more...) Yeah, I am an engineer and usually try to avoid the legal BS. Although I hate that AI has made stealing legal if you are big enough.

Sorry, not following. I thought the user agent is a string that the caller can set to anything. There is no immediate, reliable way to tell whether the string is correct.

Yeah, a real browser would produce certain patterns and never certain others. So in some cases one could clearly say it's not a human using a browser. But a scraper could also make efforts to mimic human browsing. Mostly the frequency of requests can tell with high probability tell it's not human. But such algorithms might occasionally give false positives for real users, exactly like it has obviously happened for the archive.

What google service are you referring to? Not sure whether the archove uses any of Google's tracking. I have pretty strong blocking of trackers and ads. But the archive works for me.

> but they simply don’t allow signing up with my custom email domain.

Tried 4 different domains. 3 of email services of various kind. 4th one my private domain which has absolutely no email reputation because I use it only for internal emails and sending is not even possible.

In the end I dug out some old gmail address and tried to use that.

The error was always the same, there had been suspicious activity from that domain. So the message is definitely incorrect. Well, there could have been suspicious activity from some gmail address, but if they don't allow gmail I guess they don't want many customers.

Yeah, did not cover my tracks. The could easily notice that I was the same one trying to sign up repeatedly with different emails.

It seems to be very popular on this site to condemn surveillance capitalism and billionaires. But who built and still maintains the basis for their power, misusing it and the billions. So-called smart engineers like many of HN readers. If they rated morale higher than their personal 100Ks we would not need to wait for a government to stop the misery (in vain).

Yes, I have worked for 400,000 employees corp, then for a 70,000. For the last 15 years I have staid under 100. The pay is less, but it's easier to look into the mirror each morning.

I don't want to host in a country where a wannabe king breaks the law continously, who treats former allies like enemies etc etc

Which country do you recommend? Offshore on my own boat?

I use Clouldflare DoT and enabled validation in systemd-resolved some time ago. Not because I would be particularly paranoid, but more out of curiosity how it works. I noticed no problems, except for with Atlassian. They use 2 second level domains (at least), one under .com signed and one under .net (unsigned) (IIRC). Most things worked like normal, but some Jira extension stopped working. Turned out that systemd did reject their signed subdomains. Could not figure out whether the rejection was justified or not. When I asked Claude 7 times about it, I also got 7 contradicting answers... Reported to Atlassian support that their signing is incorrect (some delegation missing). To my surprise they replied: Are you using systemd? And gave a bug number that systemd handles validation wrong in their case.

Haven't had time to study the bug and really understand the whole issue myself. Just left it there with the takeaway that local validation is currently not for non-experts.

(Sorry not at my computer. Details rather vague from memory.)

I looked at some other cities I know a bit. Those "facts" are typical AI slop. Not always completely wrong, but stereotypes you will easily find on the internet.

Governments. Many housholds, I guess over 50% in many countries.

It's a cancer.

It was the default on SUSE / OpenSUSE for years. Haven't used them for a while, not sure whether it still is. No problems with basic functionality including snapshots. I believe some RAID configurations were experimental for long time.

There you can see true democracy. Some of the same people are backing competing proposals. Not claiming that there were a single truth and give voters true choice.

Remains to be seen whether their complicated voting system [1] comes up with a result. I don't dare to make complete predictions, although I am sure that many voters see AI very critical.

[1] https://www.seehuhn.de/pages/vote.html

Exactly. My immediate reaction was: A violation of HN submission guidelines. Linux is project of many contributors / companies. For sure Igalia is a valuable contributor and I would not doubt to recommend them for serious Linux work, but this "article" is pure marketing.

https://lwn.net/Articles/1088991/ has all the relevant links. Probably somewhwere there is also a more detailed "neutral" article.

> But Apple, Visa, Mastercard and Google Pay aren't very "competent" either.

The article doesn't say and I know nothing about India. I could guess consumers are oaying using their smartphones. So Google/Apple duopoly are still the gatekeepers to use UPI making huge profits. Of course using one of the American backends would make their control and profits orders of magnitudes bigger.

Has it ever been a thing in most companies? I have seen definitely more bad code and negligance than serious, skillful attempts to write clean code.

Which rules do you think are particularly outdated?