• 8 Posts
  • 701 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle
  • This whole debacle is a festival of stupidity:

    • It’s a personal project that taxes the sole maintainer disproportionately.
    • Millions of idiots use it blindly and end up building elaborate software on it. https://xkcd.com/2347/
    • I’ll bet you 99.99% of those idiots use it only for ip.isPrivate(), which you can write yourself in 5 minutes.
    • The CVE is a non-issue (who the fuck would call a function that takes string notation with hex numbers?)
    • Appealing and reverting or downgrading CVEs is super complicated.

    At this point the maintainer is fucked no matter what they do, so archiving the project and telling everybody to fuck off right back was really the only sane thing to do.





  • If you mean to do that in the public DNS records please note that public records that point at private IPs are often filtered by ISP’s DNS servers because they can be used in web attacks.

    If you don’t use your ISP’s DNS as upstream, and the servers you use don’t do this filtering, and you don’t care about the attacks, carry on. But if you use multiple devices or have multiple users (with multiple devices each) eventually that domain will be blocked for some of them.






  • Contact support and tell them how many you need and they’ll try to accommodate you. There were a lot of people abusing the service and hosting hundreds of domains so now they’re making everybody request them explicitly unfortunately. They’ve also had to suspend their .dedyn.io DDNS service indefinitely because of the abuse.

    That’s why we can’t have nice things.

    Please read up on DNSSEC because you will be required to turn it on for every domain you host with them.



  • That’s how Amazon works.

    If you think all the stores in the internet now are PWA’s you are sadly mistaken. MVC web apps are pretty well suited for things like shops and they never went away. There are entire languages and frameworks like PHP, Python, Java that actively support that style of app. It also lends itself really well to caching.

    I wouldn’t say it’s completely JavaScript free though. Client side JS is still extremely useful and attempting to make a store with zero JS might be a bit tough.




  • It’s not the only free DNS service.

    It’s only a good registrar if you don’t care about privacy and you’re ok with their selection of TLDs (selected only from registries without privacy).

    The free accounts do not benefit from DDoS protection. Re-read their terms of service, they’re vague on purpose. If you were ever DDoS’ed (I don’t know who would bother btw but that’s another discussion) they’d just drop you.

    You can establish the tunneling thing on your own with any VPS.

    The problem with cloudflare is that we’re missing three other cloudflares to move to if they decide to pull evil shit.

    You can and should diversify your services and spread them to different providers that are easy to switch. I’ve been with “all in one” providers before, they inevitably end up leveraging their convenience into all sorts of crap. But until you get burned a couple of times they look really good.






  • 60M total but divided among 40 counties makes 1.5M variations per county and the capital city (which is its own county, like Berlin) went over that.

    I looked it up and Bucharest actually has only a 1.7M population so… I think it’s understandable that nobody expected an almost 1:1 person-to-car ratio. Exactly why and how they reached that crazy ratio I have no idea. 😆

    Told you it’s a crazy rabbit hole.