I thought that was opt-in still (https://support.google.com/googleplay/android-developer/answ...) unless you use app bundles, but that article makes it sound like you can bring your own key too. Do they still modify the signature in that case?

It looks like a family plan (https://support.google.com/youtube/answer/7507349?hl=en) may solve most of that, but you still may have to lie about the age.

Password rotation in this context is for the infrastructure, not normal user accounts.

There are other options for securing/managing infrastructure access (e.g. PKI, Hashicorp Vault), but if you're using passwords, it's a good idea to rotate them if only to encourage good practices around automation.

You're likely seeing that from a third-party seller, similar to Amazon's marketplace or ebay. At the least, I wouldn't expect the chair to be brand new at that price.

Earlier discussion here: https://news.ycombinator.com/item?id=20201485

Thanks! Comments moved thither.

Edit: actually, the BBC article seems to contain more information, so let's keep this submission instead.

Previous discussion here: https://news.ycombinator.com/item?id=19570735

Not since last year. See the previous discussion https://news.ycombinator.com/item?id=13691050

If you don't care about the managed Google Play store, you could always use Google's TestDPC app (or create your own) to create a work profile ("do-not-use-in-production" warnings notwithstanding): https://play.google.com/store/apps/details?id=com.afwsamples...

That said, it might be more straightforward to just use another user on your device

Eric Law works for Microsoft on Edge

And he also helped build chrome, so…

Thanks! Stupid me - that disclaimer was right at the top of his blog.

No, the check is done when the CA issues the cert. This allows you to change your CAA record without making your cert invalid (see also https://tools.ietf.org/html/rfc6844#page-2)