isclever

8 ms·

1.
by isclever 3y ago
You can buy a domain, put public NS servers on it for the only purpose of doing Letsencrypt DNS validation. Hint: Create root and wildcard (eg domain.ca and *.domain.ca) so you aren't leaking internal DNS records (not that it matters
2.
by isclever 3y ago
Maybe, but the admin commented it was intentional for that specific post, it was slowing down the entire site.
3.
by isclever 5y ago
At least for certificate issuance they can turn it off via a CAA record: https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...
4.
by isclever 5y ago
Google and Cloudflare allow anybody to expire any record in their cache, handy to have to if you make a mistake that is affecting customers. Google's 8.8.8.8: https://developers.google.com/speed/public-dns/cac
5.
by isclever 5y ago
This is why I have trust issues when github pulling or exploding a tar.
6.
by isclever 5y ago
Go to fast.com, open webdev tools on the network tab. Run a speedtest, the hosts are the local caches (OpenConnect) that you would use to stream movies. Note: I don't know for sure, but its the most likely.
7.
by isclever 6y ago
This boggles me when I see this option in any password manager (and I think every single one has this 'option'). Why do password managers let people store TOTP next to the password, this completely invalidates the 2FA of TOTP if y
8.
by isclever 6y ago
Try this: https://threadreaderapp.com/thread/1306359385656946688.html
9.
by isclever 6y ago
It happens a lot, when you have so much infrastructure and redundancy you think it is too big to fail. Then you lose S3 in US-East1 and break everything. https://www.theregister.com/2017/03/01/aws_s3_outage&#
10.
by isclever 7y ago
Netflix is open to any peering, some ISPs are not: https://techcrunch.com/2014/07/29/netflix-and-att-sign-peeri...
11.
by isclever 7y ago
For Canada, specifically Bell, they both an eye ball network and a transit provider. Bell has no incentive to peer at local IXs and "give away" part of their service (the eyes, as that is the lucrative part) when they can sell on
12.
by isclever 7y ago
A domain registered at a provider (but not DNS) can be down with no impact to your domain, so long as the domain is still in the TLD root servers, everything will keep going.
13.
by isclever 7y ago
Here is a good list: https://github.com/n1trux/awesome-sysadmin#monitoring Maybe one fits what you are looking for.
14.
by isclever 7y ago
My takeaway: 1. Setup up monitoring on your critical domains. UptimeRobot and Hetrixtools are good starters with generous free tier. You should know when your website/email/dns isn't working. 2. Don't tie your domain r
15.
by isclever 7y ago
There is also https://qwilt.com/ which is more of an open(?) local cache servers for ISPs.
16.
by isclever 7y ago
mini-app.funjsq.com is revoked ( https://decoder.link/result/418b8d20793d3f4daa4153752e45e78b... ), can't check routerlogin.net/com as they didn't paste the public cert.
17.
by isclever 7y ago
You need to get on the HTTPS bandwagon as well https://doesmysiteneedhttps.com/
18.
by isclever 10y ago
My personal view of using Wealthsimple is a stepping stone, I've realise that I've throw away money to the banks with higher then needed MERs and Wealthsimple provide a easy way of transferring my money in and saving money now. W
19.
by isclever 10y ago
Not only do you get on average better returns, you can do better even when they perform poorly since those funds (in Canada) can charge you anywhere from 1.5% to 3% of your portfolio in fees (MER), while an index fund could charge as low as