Who promises that a sandwich ordered online will arrive within 24 hours?

It could also be somebody is clueless about networking and decided to drop ICMP packets. That can work fine until you need them, and then you break PMTU discovery and get weird timeouts.

Around 10 years ago I filed a feature request for such an integration to be added between Google Slides and Google Hangouts (or whatever Google Meet was called at the time, I have lost track of all the names it has had throughout the years).

I don’t know if any tool had such an integration at the time. I just felt it would make life so much easier for anyone doing presentations and also be less resource consuming.

I once had a customer demanding a screenshot showing that a certain security feature was turned on. I told the customer there is no such setting in the application because we don’t offer any way to turn this security feature off. They kept insisting.

I do have a use case where a stronger preference for IPv6 would be relevant. I have a dual-stack host which acts as IPv4 frontend for hundreds of domains hosted on IPv6-only servers. Clients which have IPv6 access should access the IPv6-only server directly rather than through my frontend.

If the IPv6-only server is slow to respond clients may get SYN-ACK from the frontend faster than from the server. But overall response times are going to be worse because the frontend then has to wait for a connection to the server.

I thought the compression ratio of JPEG was a global setting and not something that could be varied for different parts of the image.

Does this approach actually produce smaller files than other video compression techniques? Or is it done just to produce that effect?

How does it deal with the increased memory usage from doing breadth-first?

I am curious about the disclosure timeline. I can see that SSL.com have disabled the buggy validation method, so exploitation should not be possible now.

But was this bugzilla issue visible to the public before the CA had been notified about the issue?

The only one of those I know how to read is iptables. And if what you are specifying is your complete firewall configuration, it would definitely not work.

There are a number of packets being dropped, which you would still need in order for things to work correctly:

Communication with localhost
Replies to your own outgoing connections
ICMP messages related to the allowed connections

I have definitely heard that advice. I cannot remember when I first heard it and how many times I have heard it. I am pretty sure it was mentioned in the first year programming course at university.

For the most part I do try to avoid global variables. But sometimes a global variable just is the most straightforward approach to some aspect of a program.

Did you verify that the IP addresses are in fact assigned to those bots? Otherwise it's possible that those requests simply had a forged User-Agent.