@astraluma@tacobelllabs.net @pypi@fosstodon.org they describe the number of users they've locked out of their accounts as if that indicated the prevalence of risk, even though they admit their domain expiration classifier is a third-party service which just makes up an answer since domain expiration cannot be determined by a third-party service. they don't seem to have evaluated the error rate of the third-party service, either for type I or type II errors, and since fastly's pypi cache broke support for negative range requests it's unclear whether this separate fastly offering will also break support for other web standards