u/vkapadia

And there's also this https://youtu.be/uB1D9wWxd2w

Top tier memery.

I'm happy they beat the 49ers. Awww man, does that make me a sympathizer?

Why do we even have that lever?

Here's the answer Muse gave me:

Checked both, and the answer is clear-cut. The relay host is tc301a.ipn.dev (199.38.181.166, from the DERP map).

Outbound 443 to the relay is not passed through untouched. Two paths, both intercepted:

• Direct, no proxy: the handshake dies immediately — the gateway answers with something that isn't TLS at all ("wrong version number", no certificate). There is no clean direct path.
• Through the sandbox's egress proxy: the tunnel connects, but the certificate that comes back is for tc301a.ipn.dev issued by the sandbox itself, not by the relay's real CA. The proxy decrypts and re-encrypts the traffic. (The content beyond it is genuinely the relay — the body is the real DERP landing page — but the TLS session terminates at the proxy.)

Yes, the egress proxy has its own CA. It's a self-signed cert, CN = Hatch Sandbox Egress CA, O = Hatch, installed in the system certificate store and in the bundle that SSL_CERT_FILE points to. So a client that trusts the default store here accepts the proxy's re-encrypted certificates silently — it only becomes visible to a client with its own CA store or pinned certificates, which would reject it unless explicitly given that CA.

That's also the full explanation for the tailcat failure: tailcat's relay client dials directly rather than through the proxy, so it hits the non-TLS gateway response and never completes a handshake.

https://preview.redd.it/ez0y7m4j7yxh1.png?width=538&format=png&auto=webp&s=ea33a1a0327065e473e593c599438c21989ae3e0

Is this at all relevant to what we're trying to do?

Getting this error:

The verbose log shows the server stuck in a loop trying to join its relay in New York, failing every time because this sandbox blocks UDP and ICMP outright, and every TLS handshake to the relay comes back garbled. So the server never actually comes online — which is exactly why your client times out on ping. It's not your key, your command, or the address; this VM's network just can't do the relay connection tailcat needs.

Wizards don't have CPS, and the muggles have no idea Harry's being abused because Dumbledore obliviates them.

The rich neighborhood is actually worse. Last year we went to a friend's neighborhood, they live in a high end area. It was terrible. Similar types of candy, not like they're giving jumbo bars or anything, but the houses are much further apart! There's fewer in the same area. We had such a poor haul last year.

This year we're sticking to our area, so many more houses we can hit. And one of them always has hot buttered rum for the adults.

"mack" for us wasn't kissing, it was hitting on girls

Absolutely not. $40 is way too much. It's a $20 game max, $15 would be better.

I feel the same. My kid's enjoying exploring. The battles are solid. But it's just sparse. I would have been happy with it being $10-15, but I'm regretting paying $40 for it. If my kid wasn't into the books, I would have waited for a discount

Yeah it's not bad. My kid's enjoying exploring. But I do regret paying $40 for it.

Baldurs Gate 2 has so many ways to reach an ending, several by just saying no to the game.

2000-2010 was the best decade for this. People were still mostly offline, not hyper connected. So you still had the monoculture. But the Internet was big enough that you could find niche communities as well.

36 games long and going, I believe

Yes. Now you just have 4 different "profiles" and they all do their own thing. You can't have something like more lane changes as Mad Max does, but drive slowly like one of the other profiles.

Something about running for president as Republican because they're the dumbest people on the planet and he can easily win with them.

Ain't got time for that. Especially when mass printing them

Caw!

Exactly. Even with bosses that value my time, any time I want to add my work email, it asks to allow them to be a full device admin. Hell no. If my boss wants me to have access that badly, he'll give me a company phone.

I think he only started casting NFL games last year, but I've been loving Kevin Harlan's commentary style. But yeah, most TV casters are meh.

Remindme! 20 hours

Pythagorean Theorem is irrelevant. The tree will snap off and lay the full 7ft across the gap

And he's a local kid too for us, went to UW.