cstdr

Of course it's not required, as we see here. The question is why not? Getting a simple code-signing cert seems to have more stringent requirements in that it either requires attestation or CA-issued hardware.

But shouldn't such a HSM support key attestation (and the parent require such attestation)? Attestation would also track whether a key was imported or generated on the HSM, and of sufficient length.

Escaping is 100% safe and for certain queries the only possible way. Prepared statements don't exist for escaping inputs but to parameterize queries. If your data is heavily skewed or you use operators like > or < they can exhibit desastrous performance.

[3] is not openvpn, just some install script a rando not affiliated with openvpn did.

A puppy.jpg.vbs file would be shown as "puppy" with "VBScript" in the type column. The full name may be worse though. "puppy.gpj.vbs‬"‭ (which is actually "puppy\u202Egpj.vbs\u202C") looks like an image extension, but is a script (as the type column also shows).

Edit: Looks like HN removes those directional override characters. When present, the text looks like "puppy.sbv.jpg"

I don't see how that can be useful when Microsoft publishes debug symbols for almost everything.

Did you even read what I wrote? It did not work. Apple even has an FAQ page for that error (without any useful solution). The suggestion to create an account via Apple Music app is useless since all it does is create an account which must be migrated via browser first (with the same problem). You can also find large threads on Reddit about the problem. Of course the availability of such a sign-up flow suggests it should be possibly, but having it broken for months is not a good look.

Have you actually tried it? Because I did some months ago to setup an AppleTV and it just does not work. It just hangs at the last step without telling you anything. If you inspect the server response it just says "Your account cannot be created at this time.".

What ultimately helped after weeks of trying and tinkering was installing VMware Workstation, patching it to enable macOS support, create a VM with the specific hardware configuration of an older MacBook, install an old version of macOS and do the 2FA from in there.