agwa

28 ms·

361.
by agwa 4y ago
This is affecting companies with <$10m in revenue that don't have CFOs. I appreciate your point about not putting faith in Congress, but as a country we should not let them off the hook for passing batshit insane legislation that sc
362.
by agwa 4y ago
Companies don't have a choice. The law now requires amortization of software development expenses. Even companies that don't claim R&D tax credits are affected.
363.
by agwa 4y ago
R&E expenses were fully deductible since 1954. "Extend" is a bit of a misnomer because there was no expiration date. Rather, the The Tax Cuts and Jobs Act of 2017 made a change, effective 2022.
364.
by agwa 4y ago
As far as I can tell, the law does not define it, and the IRS has provided no guidance. It would certainly be consistent with the spirit of R&E to not classify maintenance and bug fixes as R&E, and it would definitely reduce the sti
365.
by agwa 4y ago
I'm not sure if this is true, but I've heard that the Republicans needed ways to offset the tax cuts made by The Tax Cuts and Jobs Act of 2017. One of the ways was changing the treatment of R&E expenses.
366.
by agwa 4y ago
There was before 2022. Not anymore.
367.
by agwa 4y ago
Even companies that don't take R&D credits (which is a benefit which can be fudged) are still forced to treat software development expenses as R&E subject to 5 year amortization. Companies have no choice in that matter (see
368.
by agwa 4y ago
Do you think explicitly singling out software development for unfavorable tax treatment while explicitly excluding oil and gas exploration from the same treatment is "fair"? https://www.law.cornell.edu/uscode/
369.
by agwa 4y ago
To be clear, 150,000 certificates are affected. I assume that most sites rolled back fairly quickly after deploying an affected certificate, so the number of sites presently affected is certainly lower. The post is meant to help opera
370.
Websites Are Failing with ERR_CERTIFICATE_TRANSPARENCY_REQUIRED(sslmate.com)
2 points by agwa 4y ago|2 comments
371.
by agwa 4y ago
Unfortunately, std::span doesn't have at(). Note that std::vector's at() predates C++11, whereas std::span was added in C++20. It's a myth that C++ is getting more memory-safe; in many aspects it's actually regressing.
372.
by agwa 4y ago
> Also I don't see how compromising that hash is a problem in practice, if that ever happened. If it's salted it's worthless, but even if not, I don't know how you'd reasonably physically use it to hack into anot
373.
by agwa 4y ago
The kernel ABI is very stable, but applications typically need to interact with parts of the operating system besides the kernel, and those parts are not as fanatical when it comes to providing stable interfaces. For example, applications t
374.
by agwa 4y ago
> I am jaded and probably being a little uncharitable. However, I don't know Russ personally so I have no reason to place a high level of confidence that a Google employee isn't going to make decisions that align more with Goog
375.
by agwa 4y ago
Since you asked, yes you are being uncharitable. It's rather hard to imagine that the people who are details-oriented enough to look for suspicious network activity after installing something wouldn't notice the disclosure on the
376.
by agwa 4y ago
popcon should not be used as an example of how to do telemetry, as it is far worse for privacy than the Go proposal: 1. Sends names of private packages to the server, and publishes them. 2. Sends a unique identifier (a UUID stored in /
377.
by agwa 4y ago
It's irrelevant that .ca forbids ß. The URL spec is clear, and .de very much allows ß so it's not an academic concern: browsers need to be able to handle it correctly.
378.
by agwa 4y ago
Per the WHATWG URL spec, Chrome is wrong. Chrome is in the process of aligning with the spec: https://bugs.chromium.org/p/chromium/issues/detail?id=694157
379.
by agwa 4y ago
This is a difference between what's called "transitional" and "nontransitional" IDNA processing. The WHATWG URL standard mandates nontransitional processing, which says meßagefactory.ca becomes xn--meagefactory-m9a.
380.
by agwa 4y ago
Important note: ZeroSSL is not a certificate authority but a certificate reseller who is paying an actual CA, Sectigo, to operate a white-label intermediate certificate with ZeroSSL in the name[1]. As a non-CA, ZeroSSL isn't required
381.
The SSL Certificate Issuer Field Is a Lie(agwa.name)
8 points by agwa 4y ago|1 comments
382.
SSH Key Injection in Google Cloud Compute Engine(blog.stazot.com)
1 points by agwa 4y ago|0 comments
383.
by agwa 4y ago
If by "reuse" you mean having one key per client and using it with multiple servers, then yes, that is very common and being able to do that is arguably the entire point of public key cryptography. If you use a distinct key for e
384.
whoarethey: Determine Who Can Log in to an SSH Server(agwa.name)
99 points by agwa 4y ago|42 comments
385.
by agwa 4y ago
The relevant text, which was elided from your quote, is (emphasis added): "The foregoing requirements of this Section 2.10(c) shall not apply for (i) purposes of determining Renewal Pricing if the registrar has provided Registry Operat
386.
by agwa 4y ago
> Normally this would be prevented via ICANN regulations (that registrys agree to, otherwise they lose their TLDs), except there is a stipulation. The registrant (that's you, or whoever is buying the domain), can voluntarily forgo a
387.
by agwa 4y ago
In the early days Route 53 used Gandi exclusively, but now they use Amazon Registrar for at least .com, .org, .net. I assume Cloud Domains uses Google Domains as the registrar.
388.
by agwa 4y ago
If you're already building on AWS or Google Cloud, you should use Route 53 or Cloud Domains, respectively, so you can leverage your existing IAM policies and avoid putting trust in other organizations unnecessarily. Otherwise, Gandi is
389.
by agwa 4y ago
.imo isn't a TLD, but if you mean .im, then yes, moving from the Isle of Man's ccTLD to a gTLD was indeed a good move.
390.
by agwa 4y ago
It's whatever the registry wants. Typically, it will be domains that they expect a lot of people would want, like very short domains or domains for common English words.

More ›