The FDA regulation on Net Weight is found in 21 CFR 101.105. In this regulation FDA makes allowance for reasonable variations caused by loss or gain of moisture during the course of good distribution practice or by unavoidable deviations in good manufacturing practice. FDA states that variations from the stated quantity of contents should not be unreasonably large.
While FDA does not provide a specific allowable tolerance for Net Weight, this matter could come under FTC jurisdiction. FTC has proposed regulations that would unify USDA and FDA Net Contents labeling and incorporate information found in the National Institute of Standards & Technology (NIST) Handbook 133.
NIST Handbook 133 specifies that the average net quantity of contents in a lot must at least equal the net quantity declared on the label. Plus or minus deviation is permitted when caused by unavoidable variation in weighing and measuring that occur in good manufacturing practice. The maximum allowable variance for a package with a net weight declaration of 5 oz is 5/16 oz. Packages under-filled by more than this amount are considered non-compliant.
ISometimesAdmin
As a Bay area native, I've never encountered worse drivers than the entire state of Maryland.
It's a pure math equation. You know you'll have more money at the end of the day if you keep as much as you can in a HYSA.
So do the math on exactly how much more.
Is that amount worth your peace of mind over that long a time period? Is your partner someone you want to spend that much money on right now?
These are simple questions to ask: maybe harder to answer. But once you have them, just make a choice and be happy with it.
All but confirms
So not confirmed
An API token is more secure than a password by virtue of it not needing to be typed in by a human. Phishing, writing down passwords, and the fact that API tokens can have restricted scopes all make them more secure.
Expiration on its own doesn't make it more secure, but it can if it's in the context of loading the token onto a system that you might lose track of/not have access to in the future.
Individual API tokens can also be revoked without revoking all of them, unlike a password where changing it means you have to re-login everywhere.
And that's just the tip of the iceberg. Lmk if you have questions, though.
Right?? To let your website be susceptible to that kind of act by anyone means that you probably didn't really care about security in the first place, so much as just getting the magic lock icon happy.
Right? Like fuck Google and all, but can you imagine how many absurdities would have to have happened in order for it to be blocked?
Others beat me to the punch on saying this is just worse WebAuthN, but there are some specific flaws that boil down to saying that this whole thing is, at best, totally inconsiderate of real attack vectors such as phishing
Online Login: On supported platforms, log in with your ‘Sign’ rather than your email address. The service checks for a corresponding email in their database that produces the same hash with the chosen algorithm/options. Services can eventually replace emails with ‘Signs’ for regular users.
Enhanced Privacy: Limits the need to share email addresses, reducing spam and data breach risks.
Huh? What does this even mean? How can you avoid sharing your email and replace it with a sign, if they need to check it against their database of... Emails?
Real-Life Usage: In physical stores, use your QR-art ‘Sign’ when asked if you have an account/booked at table.
Ah excellent. Someone can just look at a security camera or just snap a photo over your shoulder and steal your sign then. Because your proposal sure doesn't note any way that these are 1-time use only. And if they were, this sounds like an awfully inconvenient way of receiving a temporary number (which sites usually only ever do as a cheap/bad 2FA method/password resets)
Email Verification: Receive a unique link via email, confirming your email’s validity.
Oh boy, better make sure to not get phished! Or that the link is 1 time use! Or that you aren't being victimized by a MITM attack and getting it intercepted immediately!
Damn, Steamboat Willie going into public domain really has Disney tightening the purse strings /s