Indeed, I’m feeling lazy and need a non-ai translator please… ?
Indeed, I’m feeling lazy and need a non-ai translator please… ?
If approved, it will affect all Safari certificates, which follows a similar push by Google, that plans to reduce the max-validity period on Chrome for these digital trust files down to 90 days.
Max lifespans of certs have been gradually decreasing over the years in an ongoing effort to boost internet security. Prior to 2011, they could last up to about eight years. As of 2020, it’s about 13 months.
Apple’s proposal would shorten the max certificate lifespan to 200 days after September 2025, then down to 100 days a year later and 45 days after April 2027. The ballot measure also reduces domain control validation (DCV), phasing that down to 10 days after September 2027.
And while it’s generally agreed that shorter lifespans improve internet security overall — longer certificate terms mean criminals have more time to exploit vulnerabilities and old website certificates — the burden of managing these expired certs will fall squarely on the shoulders of systems administrators.
Over the past couple of days, these unsung heroes who keep the internet up and running flocked to Reddit to bemoan their soon-to-be increasing workload. As one noted, while the proposal “may not pass the CABF ballot, but then Google or Apple will just make it policy anyway…”
…
However, as another sysadmin pointed out, automation isn’t always the answer. “I’ve got network appliances that require SSL certs and can’t be automated,” they wrote. “Some of them work with systems that only support public CAs.”
Another added: “This is somewhat nightmarish. I have about 20 appliance like services that have no support for automation. Almost everything in my environment is automated to the extent that is practical. SSL renewal is the lone achilles heel that I have to deal with once every 365 days.”
Until next year, anyway.
Cross posting to facepalm, extremelyinfuriating, or rage does seem more appropriate.
Incredibly hostile design. I generally avoid, but like Reddit they have hostage to some info I desire sometime so wipe my way through it… Close the browser, rm -rf /, and wash my hands.
Sounds like fandom.com
Even when disabled at a high level, their sub checks are still there and there are hundred of them. Deceptive BS.
As I said in the other comment, PreRun mentioned the same. It’s actually impressive to see how well Ukraine has adapted to EU/NATO/Western standards whilst in a war. More ways Ukraine is winning this, or at least staying afloat.
Indeed, PreRun said similar in his most recent video about Ukraine’s War Economy. Still, percentages or some indication of how close they are to being capable would make me feel less frustrated with the situation.
Exactly true in the newpipe comparison. Same with YT-dlp variants.
I’m an always on VPN sort of guy, but most are not. So yes the fingerprint tradeoff is one I accept within my ability to deal with inconvenience. Mostly upside at this point with no ads, just sponsors that slip through sponsor block.
My fingerprint it’s perfect, but I know it’s working as I can see other peoples feeds are more adaptive and directed then whatever I get. I know I have a hole when I see something spammy too.
https://coveryourtracks.eff.org/ always worth a check.
Agreed, now the fun part of coming up with a legal basis to do so and convincing regulators.
Yes… But what rate are they producing? Bloody article.
Guessing it’s lower then the 2000 shot daily. I know the US is ramping up it’s own production of 155.
I don’t think this requires an act of congress. I think you might see more consumer advocation on the part of FTC (although it doesn’t currently regulate online broadcast), or potentially the CFPB.
Admittedly it’s more likely to see the EU do some regulations, but it all depends on the election.
I appreciate the cogent context and solution oriented post.
I’d also say though that from a privacy standpoint self-hosting invidious is still allowing GeoIP info to be attached to downloaded videos, which is a fingerprint which can be used by data mining. Admittedly rather abstract as in this case the primary point of deplatforming might just be to de-ad, or give better video control, etc, and not obfuscate for privacy sake.
As I said though great points!
While I agree, I have a hard time seeing how people will stop using it until the field changes. Maybe in 10 years it will the the MySpace of the sitcom era, but right now it’s still growing. That growth is giving it carte blanche to manipulate the users as it sees fit. Regulation might impact it, but it’s still a bit of a Goliath.
- Compared to 2023, YouTube’s user base has grown by 20 million this year, representing a 0.74% increase. From Global media insights
Also the active user base is 2.7 billion people in 2024 from the same source above.
The alternatives are out there, but just not in the same league.
Yt-DLP and it’s variation (Seal, YTDLnis, etc.), newpipe and it’s variation (Tubular, Newpipe Sponsorblock, etc) already allow you to do this without having to get manual.
[# Systematic Destruction (Hacking the Scammers pt. 2)
Taking on the “Smishing Triad”](https://blog.smithsecurity.biz/systematic-destruction-hacking-the-scammers-pt.-2) g
His blog on the topic if you don’t want the wired summary.
A brief technical summary from iMAP reveals what happens when users attempt to access sites using Cloudflare and Google DNS.
• On Maxis, DNS queries to Google Public DNS (8.8.8.8) servers are being automatically redirected to Maxis ISP DNS Servers;
**
• On Time, DNS queries to both Google Public DNS (8.8.8.8) and Cloudflare Public DNS (1.1.1.1) are being automatically redirected to Time ISP DNS servers.
“Instead of the intended Google and Cloudflare servers, users are being served results from ISP DNS servers. In addition to MCMC blocked websites, other addresses returned from ISP DNS servers can also differ from those returned by Google and Cloudflare,” iMAP warns.
…
"Users that are affected, can configure their browser settings to enable DNS over HTTPS to secure their DNS lookups by using direct encrypted connection to private or public trusted DNS servers. This will also bypass transparent DNS proxy interference and provide warning of interference,” iMAP concludes.
Essentially Malaysia law required ISP to drop DNS entries for some sites, local users started using public DNS. ISP started redirecting public DNS requests, and local users started using DNS over HTTPS.
The pirate wars continue in their arms races.
Based some of the revealed history of some of these agencies, I feel like Hollywood is both closer and much further off than the reality of what happens. Closer in that history is stranger then fiction, and much further off in that these agencies are not monolithic decision makers and the hydraheaded nature of a political/bureaucracy makes for some strange decision.
Potato Achieved!
This is a decent video explaining some of the background on why polling got worse from business insider. Essentially it has more to do with conservatives being underreported (they don’t like talking to pollsters) then Gen Z, Millennials, or Gen Xs. Not saying that didn’t play a part, but Nate Silver has talked about this as well in his Silver Bulletin.