Hacker Newsnew | past | comments | ask | show | jobs | submit | more malaya_zemlya's commentslogin

So do alcohol, gambling and bad relationships.


>Obviously retail pseudoephedrine was never a substantial contributor to methamphetamine production

I don't know how it compares to organzied production, but people certainly do cook meth from retail pseudoephedrine. In my neck of woods, it's a fairly popular pasttime, since all ingredients can be purchased in a single trip to a shopping mall.


It's weird to see pieces of Typescript in there.


Before CORS, JSONP was one of the few ways to work around the same-origin policy.



Coincidentally, the ACME DNS verification process that LetsEncrypt uses is vulnerable to the QUANTUM attack. If NSA injects a fake DNS response in the right spot, and have the their response arrive before the official response, they can get the domain verified.

OTOH, Certificate Transparency Logs will give the game away, so there's that.


Doesn't Let's Encrypt check the DNS record from multiple widely-distributed endpoints to avoid this attack?


As far as I can tell, the verification that DigiCert performs is 1. the company exists in various Business listings 2. the phone number listed in whois has a human behind it and the human confirms the phone number belogs to the company.

Source: Have to be that human from time to time


Only if you pay $$$$ for OV/EV.

If you get the normal DV cert they don't provide any more verification than Letsencrypt.

And since browsers have moved away from indicating OV/EV certs to end users, not many organizations are paying for those anymore.


Can confirm as someone who has to renew a non-Let’s Encrypt cert every year (for reasons). The CA sends an automated email to the email address listed in WHOIS, you click a link in the email, and they issue the certificate. No human interaction necessary.


EV certs have a slightly more rigorous approach. They’ll call the registered agent for the business as registered/licensed with the state, not the phone number from whois or an email to webmaster@


Yes, I’m just talking about regular DV certificates (the same type you’d get if you just used Let’s Encrypt).


Dior and Louis Vuitton love putting their logos all over their products, especially accessories. I think it cheapens the brand, but i'm not their marketing person.


Even with those if you sort their products by price the higher cost ones have a subtler logo because you're right, it does cheapen the product. The higher cost/higher end from these brands are basically a separate company with a shared name.

The lower cost ones have the logo because that's how the people you're around will know. The higher cost ones don't have the logo because the people around you will recognize quality.


I tried other punctuation marks and MJ can't do them either.

Exclamation mark generaties all kinds of vertical objects, comma results in a generic pretty face, and semicolon is ...weird.


Rich people screwing over other rich people is much more prevalent.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: