• 4 Posts
  • 190 Comments
Joined 5 years ago
cake
Cake day: January 21st, 2021

help-circle
  • Reverse DNS is different than static IP.

    But yes for outbound email, if you can’t control reverse DNS you will have pain. (Inbound is totally fine) You can in theory just use whatever hostname the ISP’s reverse DNS resolves to however you will get some spam score (or be rejected) as it doesn’t match your “from” domain.

    Outbound email is a huge pain really no matter what. Unless you have a long-term lease on the IP and it isn’t in a bad network you really have to pay someone else if you want reliable delivery.


  • Yeah, it is very important to consider how dependant you are on third parties. At the very least the more dependence the more power they have over you. But also how screwed you are if they just go under.

    • If you use SaaS they can interrupt your use at any time and you can only react (for example demanding a reversal or lawsuits).
    • If you host closed source software they can’t interrupt service on an existing contract but can legally require you to stop using it if they don’t renew the contract. (And if the company goes under you can likely get away with using the software as long as it doesn’t need code fixes.)
    • If the software is open source you can continue using the software indefinitely including making code fixes. (Maintenance may be expensive as it is now your problem but that can be costed and an exit plan made if required.)



  • Sort of…

    You can just hope that /favicon.ico works. But 1. it often doesn’t and 2. it is often of low quality.

    To find a favicon on a modern site you need to load the HTML and check Link headers and <link rel=icon> elements. However you likely can’t do this client-side for most sites because of CORS. So you need some server (at the very least to strip CORS). That lets you get the URL but 1. you probably don’t want to have connections to external domains for user privacy and 2. some domains will have hot-link protection so you need to fetch the image via your server. You will also want to consider different image formats and sizes to serve the right image to the right client. On top of all of this the site may be using some sort of bot protection which you will have to fight. Google is almost always whitelisted. The site may also have temporary outages so having a cache would be nice, especially if that is almost always populated before you even know the domain exists.

    At the end of the day you do want some sort of API. And while it isn’t complex it isn’t trivial. So it is nice to just let Google handle it. (Other than tracking risks, but you could proxy Google’s API.)



  • IMHO if we want to get rid of tips the way to go about it is to pick a date (for example January 1st 2026) then agree to stop tipping on that date. Hard and fast stop doing it. Stores can raise their prices to compensate.

    The problem is that it is very hard to make this change incrementally. Because individuals are considered assholes if they don’t tip enough. So we all sort of got to get together and agree to it. Of course it will be hard to publicize this because big media companies are all owned by the rich that benefit by paying minimum wage workers less with the excuse that they can get tips.




  • kevincox@lemmy.mltoTechnology@lemmy.worldHow Quora Died
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 years ago

    It definitely was. I remember finding some amazingly insightful answers from people with proper experience. But that must have been nearly a decade ago now. Some of the most memorable ones were reflections from prisoners as IIRC some prisons had some sort of program where the prisoners could write answers and someone would post them on Quora. Interesting insights from murders, con artists and whoever else.

    But it has been so long since that was the case. I’ve had it blocked from my search results for years now. Utter trash.


  • If you are relying on Docker as a security boundary you are making a mistake.

    Docker isolation is good enough to keep honest people honest but isn’t good enough to keep out malicious actors. The Linux kernel API is simply too large of an attack surface to be highly secure.

    If you want to run completely untrusted software you want a VM boundary at a very minimum. Ideally run it on completely separate hardware. There are few exceptions like browser isolation and gVisor which are strong software isolation without a VM but docker or any Linux container runner is not on that list. If the software has direct access to the host kernel it shouldn’t be considered secure.








  • Honestly I don’t mind this. If this reduces the cost to the government it is a very small inconvenience to me as a user. Sure, Staples gets some extra foot traffic but if that is a significant cost reduction I don’t mind. In general I don’t think the government should be advertising private companies but this is very, very minimal.

    I don’t have much problem with Canada Post in Shoppers either. I think that was a decent experiment and turned out well.

    I think this is a world of difference between privatizing something. They are basically just subletting property rather than renting a whole unit. If that reduces cost of business that can lead to better service or budget shifted elsewhere I am happy to try it. If the quality of service drops we can consider it a failed experiment and roll back.