zeluko

Indeed, not classically, but there are HSTS preload lists you can put your domain into which will be downloaded by supported browsers.
And via HSTS you can include all your subdomains, which would then force proper TLS connections for those you havent visited before too.

With the new TLS1.3 version we are getting the HTTPS / “SVCB” Record which not only allows ECH but also indicates to the client similar protection policies like HSTS. (RFC 9460)
ECH will then make such attacks impossible on TLS-level, assuming DNSSEC is used and client can make an integrity-checked lookup e.g. via DoH/DoT or validating DnsSec themselves.
The strength of this depends on the security-chain you want to follow of course. You dont need DNSSEC, but then the only integrity-check is between DNS-Service and Client if they use DoH/DoT (which is usually enough to defeat local attackers)

bUt iTs Ai InTeGrAtEd

Your own servers probably also dont have HSTS enabled, or clicking continue will be disabled (if not overwritten in your browser-config)

Thats why we now have certificate transparency reports and CA-records.
Sure not perfect, but at least with a compliant CA it wont just happen in the dark.
At some point you have to trust someone.

Thats why we have HSTS and HSTS preloading, so the browser refuses to allow this (and disabling it is usually alot deeper to find than a simple button to “continue anyways”)

Yeah and discord is allowing it. Thats all i am saying.
Of course Restorecord is doing it on purpose. There are some valid reasons, but maybe Discord shouldt allow untrusted bot-developers like them to do so.

afaik thats rather about the parallel service someone had selling the data for a subscription and getting that data from restorecord’s database.
In the video it is already suspected restorecord is in on it, and the update comment proves it.

The problem with restorecord getting that data in the first place persists. I am not aware if Discord is tackling that issue at all e.g. making it against EULA and banning those bots.

Discord bots were able to get a users IP via the verification system afaik.
And there are of course other ways to force users to do so. Its more interesting Discord themselves didnt care about these methods to ban such bots… well its Discord, not that surprising when i think about it.

https://www.youtube.com/watch?v=d0h4QPqAwss

But they are leaving it open…

Might be bots, might be youtube pushing these more to make everything feel more friendly… and then bots jump onto that again for ads and scams…

big reason why i switched to kopia, borg just doesnt cut it anymore…

Yeah the DnD mevhanics are weird for me coming from DOS2…
I really miss elements mixing and having to focus on elements in general. And those weird ‘Long Rest’ things… kinda annoying for me.

umm… isnt the government or rather the judikative already deciding what extremist is?
How would specifically this be different?

I can understand the problems thos causes for the platforms, but the government injecting decisions is something you focus on?
Not to forget the many other places they inject themselves… one could say your daily lifes because… careful now… you live in the country with a government, whaaat?

Yeah, it needs those rules for e.g. port-forwarding into the containers.
But it doesnt really ‘nuke’ existing ones.

I have simply placed my rules at higher priority than normal. Very simple in nftables and good to not have rules mixed between nftables and iptables in unexpected ways.
You should filter as early as possible anyways to reduce ressource usage on e.g. connection tracking.

With this many, is he becoming the Terminator?

Its nice to meet the team, start nornal conversations not necessarily bound by work.
Getting to know the people in a way video calls rarely can fscilitate.
BUT how often depends on the team, the distances, the company, and most importantly how often this happens.

I really like my WFH, but its not a full WFH job, so we meet for important events like sprint planning every few weeks.
But thats only 1-2 hours away and most of the commute is long distance train, so i can work that time and still get paid.
Its nice seeing the team and other people in the company i would have never seen, it could be a bit less for me, maybe once a month would be better…

I also think many people only have their work colleagues as contact and little real friends to meet with outside of work… after all one is paid and theother time you have to maintain your life constantly.

I dont understand why this wasnt already a rule?
Why is the US so retroactive? Something goes bad and only then you start thinking about it and how to stop it in the future, when it becomes a big problem.

So i understood you just want some local storage system with some fault tolerance.
ZFS will do that. Nothing fancy, just volumes as either blockdevice or ZFS filesystem.

If you want something more fancy, maybe even distributed, check out storage cluster systems with erasure coding, less storage wasted than with pure replication, though comes at reconstruction cost if something goes wrong.

MinIO comes to mind, tough i never used it… my requirements seem to be so rare, these tools only get close :/
afaik you can add more disks and nodes more or less dynamically with it.

The site is not really allowed to bother you with the cookie popup either.
If you clicked whatever, the site has to make sure your choice is kept for a reasonable time.
Asking again can be seen as trying to force you to allow more cookies, just so the popup doesnt appear again.
That choice wouldnt be freely given and thus not valid as thats required by the regulation.

You shouldnt be actually able to refuse necessary cookies as the site needs to function even if you click ‘decline all’ by law.
If a site does break, report it to the supervisory authority of your country.
If you are in the US… hahahahah.