JRaccoon

They can include runnable JavaScript too, which can cause vulnerabilities in certain contexts. One example from work some years back: We had a web app where users could upload files, and certain users could view files uploaded by others. They had the option to download the file or, if it was a file type that the browser could display (like an image or a PDF), the site would display it directly on the page.

To prevent any XSS (scripts from user-provided files), we served all files with the CSP sandbox header, which prevents any scripts from running. However, at the time, that header broke some features of the video player on certain browsers (I think in Safari, at least), so we had to serve some file types without the header. Mistakenly, we also included image files in the exclusion, as everyone through image files couldn’t contain scripts. But the MIME type for SVG files is image/svg+xml… It was very embarrassing to have such a simple XSS vuln flagged in a security audit.

My use case is a bit different than yours but still worth mentioning, I think; I have Sharry running in Docker and it makes sharing and receiving files super easy. All downloads and uploads are resumable so they work well even in unstable networks.

Providing expiration notification emails means that we have to retain millions of email addresses connected to issuance records. As an organization that values privacy, removing this requirement is important to us.

I fully support the privacy argument (I didn’t realize it has been mandatory to give some emai address to get a cert) but why not make it optional instead?

The reminder email from them has saved me once when originally “temporary” domain was not so temporary after all and I forgot to set up auto-renewal and monitoring for it.

I would imagine the flight recorders keep recording as long as there’s any power left in the aircraft. So if there was a bird strike as they suspect, and if that caused a dual engine failure, the recorders should still work, right? So there has to be more to the story than a simple bird strike.

https://github.com/jarnedemeulemeester/findroid

This is the repository? They have a ko-fi link in the repository meaning they accept donations to support the development. Have you tried contacting the lead developer of the project and asking if they would be interested in adding the feature you want if you sponsored it via a donation?

Sure. I’m not recommending anything, just stating what has worked for me. For simple use cases, I think most of the DDNS services are pretty much the same anyway and it’s easy to switch to an another one if one stops working for some reason.

I’ve been using No-IP free plan for years without issues. Inputted the credentials to my routers DDNS client and then basically forgot about it. Free users need to confirm their account once a month via email but that’s just one click.

If your domain registrar happens to have an API to update DNS entries, you could implement DDNS yourself by writing a simple automated script to check the external IP (e.g. via ipify.org) and if it’s changed from the last check then call the API to update the DNS entries.

Good luck trying to “shut down” a open source software… Still sucks tho, why Nintendo gotta make so good games but be so shitty of a company otherwise

It’s still unclear if he’s allowed to use the logo and such. The national broadcaster Yle (which itself has a strict policy against advertising) allowed it in the national show and argued that (quote) “Windows 95 is no longer a protected trademark today. The product is hardly used by anyone anymore. Thus the name and the costume are allowed”

But EBU might have a different stance ofc

I don’t remember the exact article I was reading but doing a quick google search yields this one for example. And here’s the actual research paper: https://www.miyashita.com/researches/1hFnR7TlUO4OXNpQFeuN30

I remember reading an article about how we’re already able to simulate basic tastes, like sweetness and sourness, digitally. So just you wait, we might have lickable HTML elements in the future

Seems to be a cut-down version from the Direct, so nothing new in this one.

They recently added it as a experimental feature and it has been working fairly well, at least for Java. As far as I recall, each user needs to activate it themselves via settings. Far from optimal but better than nothing.

Just gave F-Zero 99 a go. It’s surprisingly fun and polished for a “free” game