https://www.timeanddate.com just about everything you want to know about sun and moon data for any location. Also a world clock, time zones, timers, calculators, even weather.

https://filezilla-project.org/ FileZilla FTP client

https://adionsoft.net/fastimageresize/ What the name says and super fast, super small output. supports multiple image formats.

https://www.xponentsoftware.com/xml-editor.aspx for fast loading huge XML files. editing not very full-featured and search is slow, but xml schema validation is fast.

https://afdc.energy.gov/stations#/find/nearest Alternative energy locations with map. USA, Canada. electric/charging type, CNG, LNG, Hydrogen, propane, biodiesel, ethanol. route selection.

https://fire.airnow.gov/ Fire and smoke map. USA, Canada.

I use timeanddate.com probably every day, on average, for work. It's so handy, for both the calendars and the date calculators.

I think it's a bit sad to be using a heavyweight, ad-ridden website for such trivial things that can be done with e.g.:

date --date="2 days ago"

cal -3

On the other hand, I admire whoever the operator is for creating a business around such a simple thing.

The site loads quickly. It's fast with few ads.

Maybe the date command can do things like calculate the number of business days between two dates, accounting for U.S. holidays, and add or subtract work days excluding U.S. holidays -- I don't know. But I know it would take more effort than I'm willing to do to figure that out and test it. And I suspect it would involve a few switches and be subject to easy error.

For pulling up the calendar, it's literally a bookmark that brings up a browser tab with the year's calendar, showing U.S. national holidays. Can the cal command show holidays at all? It's unclear.

I think it's a bit sad to discount the value of a clear, usable, and fast GUI over a command-line interface for certain day-to-day tasks. Both tools have their uses.

You can't make a single typo in Bash and also the browser makes aliases for you automatically based on usage, whereas Bash aliases require thought and maintenance.

So it's Bash that is slower ("heavyweight") if you count how many neuron firings it takes and how much these gigantic, slow write heads (fingers on a keyboard) have to move through space as part of the system. Computer scientists haven't been able to make a language with any sort of error recovery because "it would be non-deterministic" but Google (guided by capitalism) was able to see that's what people need. Google search is a programming language/shell.

“Hi and welcome to whattimeisitnow.com, you are greenlit!”

Dont need code, just looking for overall strategy. while I never liked the idea of hardware locked activation, I dont see a viable alternative but would be great if there is one.

The article says you dont have to wait for June 1. Has anyone implemented this? What the process like.

I emailed their support recently with a question which they have not answered. All I got was an auto-reply with a ticket number.

I am thinking I should just order directly from Comodo/Sectigo.

Do you have recent information about ksoftware?

I should have mentioned that while purchased by some big companies, there is usually just one user so would not be worthwhile to set it up for remote installation. It is a very niche, specialized program.

As to Code signing, if you have a Dunn and Bradstreet number for you business, its fairly straight forward getting a coding signing cert and there's different types which you can buy for your app, but it just means you have passed an identity check, the reports I've seen of the hurdles you have to go through are reduced the more you pay, ie Digicert is purportedly less time consuming than cheaper code signing CA's.

Considering things like GDPR and other data protection legislation around the world, I'm not aware how these CA's can verify identification documents because the companies or entities that make the documentation used for identification purposes cant give out your data, ergo they cant confirm or deny if the identification document is genuine or not.

And even if you did codesign your app, the end user company would probably hash your app and restrict its ability to use certain things on the computer in much the same way sandboxes do for web browsers.

Group Policy is one of the ways to lock an app's abilities down, but that's a job in itself if special GPO templates are not purchased to save on time.

eg https://learn.microsoft.com/en-us/windows-server/identity/so...

If you want the appearance of being genuine, I'd probably get a code signing cert, at the very least your users wont get the orange UAC prompt, especially if your app uses certain api's which required UAC elevation and/or also depending on your manifest file.

The current release of my product is code signed, both installer and .exe inside it, but my 5 year cert expired (Comodo) and am evaluating the cost benefit of renewing, which is same as getting a new one, at least with Comodo they start you over from scratch. I am in USA and am incorporated in my state, so Comodo required a copy of my registration which has both company and my name and phone. They telephoned me with a couple basic questions. They also required I list my business a free online yellowpages business directory. That was it. Not too bad, but they stretched out their processing time line and were initially a bit misleading: at first they implied I had to go the dunn and bradstreet route, which is pricey, but when I objected they backed off.

What documents were you referring to regaring identity verification?

> What documents were you referring to regarding identity verification?

Digicert has a different process where you get put through to someone in India if you are in the US. Drivers licences things like that, but the Indian's cant really tell if the documents supplied are genuine or not.

If you go on the dark web, some marketplaces have identification documents for sale, and I was shocked to learn that the Vatican city is an excellent source for fake identification for any country!!!

So what does it take to get IT to approve software, particularly if no code signed installer? I was always a dev contractor so was never part of those decisions/policies.

I have not been close to it either. At my employer we have a "software center" that people use it install supported applications.

I know people who work at some big banks in NYC where all software has to be approved and they managed to get approval to use a Python library I wrote that I think they install with pip.

From the stripe website: "a payment field that originates directly from our PCI DSS–validated servers. With safer card acceptance methods like these, we’ll populate the PCI form (SAQ) in the Stripe Dashboard, making PCI validation as easy as clicking a button."

Since the credit card payment data never touches my server, why is PCI compliance a part of the conversation? With Fastpring I don't deal with PCI because credit card payment is done on their server and it sounds like that is equally true with Stripe Elements. So what am I missing here?

OP here. think what happens is stripe embeds the payment element in a cross-domain Iframe which means it is impossible for me(my server code) to access that data. And that seems to be the whole issue with PCI compliance, namely, my website is not in fact collecting CC data. From there I infer that stripe got certified PCI Service Provider Level 1 which allows them to handle just about all of the PCI processing and the vendor(me) just has to click an approval button annually to be PCI compliant. Does all this seem correct?

I used to work on Stripe Checkout and your interpretation sounds like what my understanding of the situation was at the time I was there, yes. Basically Stripe provides everything, isolates the code as you said, and for 99% of merchants you just hit a button and get on with your day. I think for the other 1%, from reading the docs you linked, it sounds like for particularly large businesses it might cause a couple days of work, but orders of magnitude less than rolling it yourself?

Do you also embed Fastpring into the your site? I think Stripe allows you to do that

No, user is redirected to fastspring.com. I guess it depends on whether my server code can access the CC data. I somehow got the impression that it cannot. So how is the payment element actually connected to stripe?

A good insurance agent should do most of 1-4, but your service should make their job easier. So I see this as more for them than for a consumer. And also because after a plan is selected, copays and deductibles are essentially fixed so consumer would have no need to price shop.

What do you mean insurance agent? The process of picking health insurance in the US doesn't utilize agents.

> And also because after a plan is selected, copays and deductibles are essentially fixed so consumer would have no need to price shop.

This assumes that the service you're picking costs more than the deductible. If the service you're shopping for costs less than your deductible, you're paying for all of it up front...

I am in US and have an idependent insurance agent that offers healthcare plans for every insurance company licensed in our state. They compared my plan with all the others, taking into account the types of service I use, what is covered when travelling, etc. Anytime I need a specialist I call the agent for a list of in-network doctors.

Wow, never knew this was a thing. Do they have a website/can you share?

Are you insured through your employer or via an exchange?

I read both the Doctorov and Stoller articles but did not seen any proof that Booz-Allen receives the addon fees. Has an audit of their books revealed this?