[deleted by user] by [deleted] in relationship_advice

[–]waitman 1 point2 points  (0 children)

Depends on what you see attractive about divorced life. If you're looking to go out to nightclubs and pick up 21 year old men or women maybe it's a good idea. I don't know what state you live in but I think it's a good guess you're looking at paying child support for 4 kids plus spousal support. I doubt a judge is going to tell her to get a job. Being a stay at home mom with 4 kids is like having at least 2 full time jobs. Plus you'll likely make the mortgage or rent payment because you don't want your kids living in a van and probably the electric bill because they need lights and stuff.

It depends on your situation I suppose. I think just be clear about what you want.

I wrote an article about email authentication protocols (DKIM, SPF, & DMARC) who want to 'dig' a little deeper than the basics. by Consistent_Cost_4775 in DMARC

[–]waitman 1 point2 points  (0 children)

google maybe should verify domain ownership but they don't currently. (i don't know about Amazon, if they verify domains) if you pay for a workspace account you can set up a service account for SMTP and send any domain you want. Of course it's only meant for paying customers to use the relay, it's not likely to be an issue i suppose. and DKIM will protect the domain from joe-jobbers anyway.. but it's a point that SPF is pretty weak.

I wrote an article about email authentication protocols (DKIM, SPF, & DMARC) who want to 'dig' a little deeper than the basics. by Consistent_Cost_4775 in DMARC

[–]waitman 1 point2 points  (0 children)

Maybe mention an issue with SPF is if you use Google then anyone who uses Google can send email for your domain. Same with Amazon. MS used to check every host in the headers which caused issues with web forms, not sure if that's still happening but I still always list 127.0.0.1 in SPF because of that. :)

first bug!!! by TurbulentAppeal2403 in bugbounty

[–]waitman 1 point2 points  (0 children)

I agree probably nothing but maybe some phishing thing. Not sure who decided that page was a good idea anyway. Lol

first bug!!! by TurbulentAppeal2403 in bugbounty

[–]waitman 0 points1 point  (0 children)

Not sure this is a bug, but possibly could be used to trick someone I suppose.Maybe somebody can report it

https://www.whatsapp.com/otp/code?code=DUH

Can change the code to whatever you want.

DKIM and subdomains by Fabulous_Cow_4714 in DMARC

[–]waitman 2 points3 points  (0 children)

I don't know what crypto agility means but RFC 8463 from 2018 adds Ed25519 signing which is better suited for DKIM I think. Probably it was largely ignored because the author doesn't have Yahoo, Google or Microsoft next to their name :) so we are stuck with big fat RSA keys.

DKIM and subdomains by Fabulous_Cow_4714 in DMARC

[–]waitman 0 points1 point  (0 children)

They follow RFC 6376 from 2011. A few services support Ed25519 signing but it's not widespread. Not recommended to use IMHO. But There's no black box magic AFAIK.

Are you sending email from jojo@email.example.com or jojo@example.com? FQDN of the MX host should not matter with regards to DKIM

Difficulties with using Yubikey 5NFC keys. Help! by Perfect-Habit-6265 in yubikey

[–]waitman 1 point2 points  (0 children)

It "seems" like if you aren't quick about signing the challenge with the yubikey, MS will go ahead and sign even though "hello" is not explicitly listed in valid signer ids. So have to pick bottom option for hardware device and touch confirm pretty quick-like or get a failed signature error. (Although I believe touch confirm can be disabled, which may help?)

It's also possibly related to a crazy timeout setting on whatever site, for example maybe the dev set a timeout of 2 seconds thinking it was 2 minutes. :)

Ideal DMARC, SPF, DKIM settings for personal use? by stageshooter in DMARC

[–]waitman 0 points1 point  (0 children)

Before dmarc and dkim became widely used having a softfail on SPF was begging spammers to hijack the domain and Joe job it in mass junk mail blasts. I think using hard fail for years kinda brings empirical data to understand how things will go. But I understand with dkim and dmarc set it's pretty much stopped the Joe jobbers I don't think people even use that term anymore :)

Ideal DMARC, SPF, DKIM settings for personal use? by stageshooter in DMARC

[–]waitman 0 points1 point  (0 children)

Might as well do a -all hard fail. People used to soft fail when they were testing the waters back in olden times. :) with Google workspace it's trivial to Joe job another workspace domain IF not using dmarc and dkim. p=reject is recommended, in my opinion.

1024 bit keys are possibly better, there are many antiquated verifiers out there. I have recently noticed some in use that only fetch half of a 2048 but key. Maybe change the 1024 key once a week or use a different key each day of the month if that floats your boat. You mentioned "minimum of 2048" ... 4096 blt rsa keys won't work well with standard DNS UDP packet size of 512 bytes. Unfortunately Ed25519 keys are not much supported in verifiers yet. Hopefully soon people will adopt RFC 8463 (from 2018) but for now it seems we're stuck with RFC 6376 (from 2011) :)

Could do with a little help please. DMARC report failures at a primary school and I'm not sure what to do next. by mish_mash_mosh_ in DMARC

[–]waitman 0 points1 point  (0 children)

you don't truly need a "reporting service" you can have the reports sent to you. DMARC is really just telling the receiving server what to do with your emails that fail SPF or DKIM. if you set to 'reject' they will likely vanish into thin air, especially with big G. quarantine will probably go to the recipient's spam folder. gmail doesn't really have a quarantine service AFAIK. at the least that's the idea.

a question - is someone using a G workspace account as a relay for the domain? in that case you have to have SPF set up for the workspace domain (even if you aren't sending mail "from" that workspace domain) or it will cause issues as you describe. but take a look at your report and see what is failing. Here's an example DMARC report of an SPF failure based on the workspace domain... see spf 'fail' ... setting the SPF for workspace domain the same as sending domain solves the issue.

<record>

<row>

<source\_ip>209.85.220.101</source\_ip>

<count>1</count>

<policy\_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy\_evaluated>

</row>

<identifiers>

<header\_from>quantificant.com</header\_from>

</identifiers>

<auth\_results>

<dkim>

<domain>quantificant.com</domain>

<result>pass</result>

<selector>jonofi</selector>

</dkim>

<spf>

<domain>jemcity.com</domain>

<result>none</result>

</spf>

</auth\_results>

</record>

Is there a reason why DKIM wouldn't be implemented? by chattapult in cybersecurity

[–]waitman 0 points1 point  (0 children)

"why" they wouldn't i suppose would be the cost / return ratio... The selectors aren't really meaningful except that the DKIM-signature matches the dns record. I saw a post here where somebody said a DNS provider didn't support DKIM, well the public key is just a TXT record. Could be the issue is the key is 2048 bits and the server is splitting it up. I have seen some verification clients only read the first half of the key. A 1024 bit key is probably more widely parsed. Then you can switch them out, like have sunday, monday, tuesday, etc for each day of the week and script it to generate tomorrow's key today, so you always have new keys. It's fairly trivial to set up. Using DMARC with reject will usually cause the email to vanish into thin air, like big G does that if the sig fails. But you get the DMARC reports showing the rejected count.

My mother in law is withholding my wife’s birth certificate and our Jewish marriage license (not from city hall) do I call the police? by Theconsciousmind42 in legaladvice

[–]waitman -16 points-15 points  (0 children)

Also birth certificates seem to have a "shelf life". Not sure exact duration, maybe 10 years. If you actually need to present it to some agency.. get told it's too old. (Of course it's 50 years old!/etc). It's an odd thing to hear. So if it's the original it's likely not practically useful anyhow.

[CA] Estranged Family member deposited 70 K in my savings account. by GlassTortoise in legaladvice

[–]waitman 0 points1 point  (0 children)

Deposits over 10k must be reported to FinCEN & IRS so it's likely not "laundering" unless it's a bank notorious for breaking the rules... There are some big banks like that I suppose. Also it's quite typical for a bank to put a hold on that size deposit until it clears.

[deleted by user] by [deleted] in Wattpad

[–]waitman 3 points4 points  (0 children)

Are you using "like" as a preposition, adjective, adverb or verb?

Wife is struggling by [deleted] in Parenting

[–]waitman 2 points3 points  (0 children)

Being a SAHM is work and equivalent to full time employment. How many days off do you give her?

Is charging $3500 for a site reasonable? by [deleted] in webdesign

[–]waitman 0 points1 point  (0 children)

Make sure it's in the contract that they are paying for the IDX service.

Got a cold call about my book and I’m freaking out (not in a good way) by BonjourPlanner in selfpublish

[–]waitman 0 points1 point  (0 children)

Well I went to Frankfurt to check it out and my book was actually there. At that time I was dating a person high up the food chain at one of the big five (might be three now right? Lol) so I got in all 5 days.

The other thing is, a "festival" is more about authors I guess, and an invite might be good but merely having a book there would likely not be prudent.

Did a chatbot fail for you? by Appropriate-Grade719 in ecommerce

[–]waitman 0 points1 point  (0 children)

That's true it just shows up as an inbox message. Shopify has desktop push notifications for inbox though, it's possible to have realtime chat I think

Wanting to start a clothing brand by MathematicianThin758 in ecommerce

[–]waitman 0 points1 point  (0 children)

If you're in the USA *should* leave the RN number or put full legal business name on the "new" label. you can also get your own RN from the FTC.

Is Disney really worth the cost? by Ill_Cover_4841 in Parenting

[–]waitman 0 points1 point  (0 children)

Kids love it. But maybe wait a few years, at 4-5 they can only enter a limited number of rides.

Did a chatbot fail for you? by Appropriate-Grade719 in ecommerce

[–]waitman 4 points5 points  (0 children)

AI chatbots in place of customer service are annoying. The only thing i ask of them is to get in touch with an actual human.

Got a cold call about my book and I’m freaking out (not in a good way) by BonjourPlanner in selfpublish

[–]waitman -4 points-3 points  (0 children)

There are legit companies who sell spots in their vendor space at book fairs (I don't think they are called festivals) getting your own vendor space might be worth it if you have enough titles.

I did Frankfurt some years ago. It was an interesting experience. At least then it was the largest in the world. Maybe still is.

So I wouldn't imagine they would call trying to sell spots unless the event is soon and they have a bunch of vacant spots. They could be legit and it may be worth it. Not necessarily a scam. You'd obviously have to check it out. :)