n_u_l_l

There is a phone number on your website, and the same one is also part of the public info on the business's Google Play developer profile. Please correct me if I'm wrong, but both are published by you.

I don't think it's unexpected when you use one phone number as both personal and business number.

Initially I still felt like it wasn't correct of Google to publish this as public phone number, but I think Google Play clearly asked what phone number customers can use to contact you.

I wish there was a tool to convert csv to Excel. Something like Flatfile but for desktop use.

Solution was here to change the DNS to 8.8.8.8 and 8.8.4.4, this has worked reliably for the past years

The barrier for a successful lawsuit is indeed very low, and based on my limited understanding, I think you will likely win when you demand that Google changes the picture on their website. They will likely also have to cover a part of your legal costs.

However if we are talking about monetary damages, those require hard proof of the damages and even then it is unlikely that they will have to pay all damages. Most lawyers I talk to usually recommend against suing for monetary damages.

Aside from improvements with organization and environment separation when you separate the configuration from the code (and also not having to roll your own solution), one of the security risks is that you accidentally mix up binaries. You will think that will never happen until it happens.

A bigger security threat, I think, is that you have the private key both on your server and on your computer. It adds another location where you could mix up, hackers now have 2 possible attack targets, and it's more likely that your PC gets infected than your server. Either way, now, if your PC gets infected or your server gets hacked they will have the private key, while if you only have it on your server they won't necessarily have it when your PC gets infected.

The safest solution if you don't want to store the private key unencrypted is to generate an encrypted private key with openssl. You would however need to provide the encryption key every time you start the server. You will still have the unencrypted private key in RAM, but that's inevitable and also the case with your current method. The private key (even encrypted) should never leave the server.

Expires was optional until draft 10 (August 2020)

It looks like the signal.org website always sends back a gzipped response even when the client doesn't accept gzip. Maybe that's the issue. I'm personally not having any problems on iOS.

  curl -H "Accept-Encoding: identity" -v https://signal.org/
  ...
  < content-encoding: gzip

What might have happened is that an admin account of the university has been hacked, and someone is abusing it for spam.

I'm not sure if it's a legal requirement, but YouTube has the rule that once a channel gets 3 DMCA takedowns (without counter notification) within 90 days, it will suspend the channel. Such a warning is usually referred to as a copyright strike (not to be confused with a copyright claim or a community guidelines strike).

One difference between the Google index and YouTube is that links in the Google index can be service providers like YouTube, while the owner of a YouTube channel is always the one responsible for the content.

Something notable that happened here is that instead of bundling the 5 videos in 1 DMCA takedown resulting in 1 strike, the party sent 5 separate DMCA takedowns causing 5 strikes.

Disclaimer: I have extensive knowledge about YouTube Content ID (CID) and DMCA notices, but I'm not a lawyer. This isn't legal advice.

He received a DMCA takedown, which is different from a copyright claim. Copyright claiming is a system made by YouTube for copyright owners to easily monetize/monitor reuse of their content instead of having to take down the content. It also allows splitting revenue in cases where one party owns copyright in specific territories. When you put content in CID, it will automatically claim videos and provide timestamps to the uploader. Sometimes CID fails to claim a video, and the copyright owner can then manually claim a video. There was a time where copyright owners didn't have to provide timestamps when they manually claimed a video. Nowadays, all manual claims need to provide a timestamp. Only highly trusted companies have access to CID, and getting a claim doesn't result in termination of your account.

The DMCA is a law that makes it easier to remove copyright content from the internet. It also makes it so that a service provider isn't responsible for the content they host. It is basically a legal action to take down content you own from the internet without having to start a lawsuit.

It works like this: when a copyright owner sends a DMCA takedown, the service provider needs to take down the content. If the uploader disagrees, they can send a counter notification. Unless the copyright owner that filed the takedown files a lawsuit within 14 days, the service provider needs to reinstate the content. You can be sued for damages in case of an incorrect DMCA takedown.

If YouTube would reject a DMCA, it would make YouTube responsible.

From reading the rejection notes, it seems like they misunderstood your app.

You should mail them. Tell them that it is a reader app like Reddit that contains user generated content. If you're resubmitting it for review, also tell them that in the review notes. If they still don't understand your app, ask concrete questions (eg what changes do I have to make in the app store details to be treated as other reader apps like Reddit). Linking to similar apps (in this case HN clients) has also helped me when being rejected.

Based on the rejection notes, they simply misunderstood what the app does and who it is aimed at. Hacker News is not the Apple support and I think you should ask them what to do before asking us.

They have always been helpful when I contacted them. When my apps were rejected, it usually took a simple mail and within a day the app changed back to "Being reviewed", and then "Accepted".

We currently still have a subscription, but the project we're using it for became on hold during the Hotmail problem. The project will be cancelled soon, and we'll cancel our Sendgrid subscription.

If the project wouldn't have been cancelled, we would've probably switched to another email service.