DigiCert recently was forced to invalidate something like 50,000 of their DNS-challenge based certs because of a bug in their system, and they gave companies like mine only 24 hours to renew them before invalidating the old ones…

My employer had an EV cert for years on our primary domain. The C-suites, etc. thought it was important. Then one of our engineers who focuses on SEO demonstrated how the EV cert slowed down page loads enough that search engines like Google might take notice. Apparently EV certs trigger an additional lookup by the browser to confirm the extended validity.

Once the powers-that-be understood that the EV cert wasn’t offering any additional usefulness, and might be impacting our SEO performance (however small) they had us get rid of it and use a good old OV cert instead.

If you have ssh open to the world then it’s better to disable root logins entirely and also disable passwords, relying on ssh keys instead.

Port 22 is the default SSH port and it receives a TON of malicious traffic any time it’s open to the whole internet. 20 years ago I saw a newly installed server with a weak root password get infected by an IP address in China less than an hour after being connected to the open internet.

With all the bots out there these days it would probably take a lot less time if we ran the same experiment again.

I loved the bit where he spent a small pile of that money on an Inverted Jenny postage stamp then used it to send a postcard.

I don’t understand why Cloudflare gets bashed so much over this… EVERY CDN out there does exactly the same thing. It’s how CDN’s work. Whether it’s Akamai, AWS, Google Cloud CDN, Fastly, Microsoft Azure CDN, or some other provider, they all do the same thing. In order to operate properly they need access to unencrypted content so that they can determine how to cache it properly and serve it from those caches instead of always going back to your origin server.

My employer uses both Akamai and AWS, and we’re well aware of this fact and what it means.

I’ve heard of all sorts of issues with my fiber ISP (Verizon Fios) rolling out IPv6. It’s been years that they’ve been slowly rolling it out for testing in a few places. There’s virtually no useful documentation on their website about it. And it’s still not available where I am.

I think this is what I used: https://pimylifeup.com/cloudflare-tunnel-on-home-assistant/

I use home assistant and found some instructions on how to set up a free-tier cloudflare reverse proxy to access it from outside my home. Works like a charm.

I use .home for my home network…

Many years ago I had to try to debug a memory manager written by a really talented software engineer, with an interesting take on naming things…

• He referred to blocks of memory as “cookies”.

• He had a temporary variable named “handy” because it was handy to have around.

• He had a second temporary variable that referenced the first one that he called “son_of_handy”.

• If corruption was detected in a block of memory then it would set the flag “shit_cookie_corrupt”.

• If too many cookies were corrupt then the system would halt by calling the function “oh_shit_oh_shit_oh_shit”.