That one is highly inconsistent, on some platforms its useless. For instance on Chrome/linux entering historic dates via the datepicker takes minutes to slowly scroll through the years. Always build your own datepicker, you know better what UX pattern will best suit your application and your users.
I wonder if this is a potential "off switch" for the internet. Just hit the root ca so they can't hand out the renewed certificates, you only have to push them over for a week or so.
People will learn to press all the buttons with scarry messages to ignore the wrong certificates. It may be a problem for credit cards and online shopping.
HSTS was specifically designed to block you from having any ignore buttons. (And Firefox refuses to implement a way to bypass it.)
But this is also why the current PKI mindset is insane. The warnings are never truly about a security problem, and users have correctly learned the warnings are useless. The CA/B is accomplishing absolutely nothing for security and absolutely everything for centralized control and platform instability.
The CA/B is basically some Apple and Google people plus a bunch of people who rubber stamp the Apple and Google positions. Everyone is culpable and it creates a self-fulfilling process. Everyone is the expert for their company's certificate policy so nobody can tell them it's dumb and everyone else can say they have no choice because the CA/B decided it.
Even Google and Apple from a corporate level likely have no idea what their CA/B reps are doing and would trust their expertise if asked, regardless of how many billions of dollars it is burning.
The CA/B has basically made itself accountable to nobody including itself, it has no incentives to balance practicality or measure effectiveness. It's basically a runaway train of ineffective policy and procedure.
Which emergency can happen that I really want this? And now don't say suicide attempt.
Nearby all emergencies that could happen where someone needs my exact position are things that would additionally lead to a loss of the base connection or a switched off smart phone.
How might people suggest that this would work, do you suppose?
"We've narrowed the victim's location down to one city block, boys! Assemble a posse and start knocking on doors: If they don't answer, kick it in!" ?
(And before anyone says "Well, it can work however it used to work!" please remember: Previously, we had landline phones in our homes. When we called 0118 999 881 999 119 725 3 for emergency services, there was a database that linked the landline to a street address and [if applicable] unit.
That doesn't work anymore because, broadly-speaking, we now have pocket supercomputers instead of landlines.)
Sure. But we usually didn't need it: We kept the phone numbers for our friends, family, and our favorite pizza place memorized.
And if the phone rang, it was answered. It was almost certainly a real person calling; spam calls were infrequent to the point of almost never happening.
It was a different time, and it is lost to us now.
(We do still have public name-to-address databases, though. For instance: In my state of Ohio, that part of a person's voter registration is public information that anybody can access. Everyone is still effectively doxxed and it's still not a security issue.)
Its the same argument for high-density hog farming. If the use of private property may impinge on the neighbors, either through invasive noise, or costs to public utility infrastructure (power, water) then the community ought to have some insight and input, same as they have input into whether a high density hog farm can open right on the border of the community.
Yes some people see the datacenters as part of an ethical issue. I agree its not proper for permits to be withheld on purely ethical grounds, laws should be passed instead. But there are a lot of side-effects to having a datacenter near your property that are entirely concrete issues.
If a government wants to penalize companies for unethical behavior, they should pass a neutral and generally applicable law that provides for such penalties. Withholding permission to do random things based on ad hoc judgments of the company involved is a recipe for corruption.
Clearly there needs to be room for both things to occur. You should absolutely begin with passing laws, but to think that the laws on the books can cover every situation is naive. When companies skirt the law and cause harm, there needs to be a remedy.
I don't agree. The benefits of a business environment governed by due process and the rule of law far outweigh the benefits of individual government actors having arbitrary discretion to fill the gaps. As we've seen clearly on the federal level this past year, once you create that discretion, the common way for corporate executives to "prove" that they're nice and generous and deserve favorable treatment is not good behavior but open bribery of public officials.
Bribery is illegal. What hope do you have for due process and the rule of law when it is being carried out as it is now? You can't use an extraordinary case to justify your belief about the ordinary case.
Also, we don't live in a world adjudicated by machines, there will always be discretion and the potential for special favors. No matter how much you tie the hands of regulators there will be some actor who will have the power to extort. Not to mention that regulation is not opposed to due process and the rule of law, but is the most important component of both.
Imagining a world without discretion is imagining a world where corporations can do as much irreparable harm as they want as long as there isn't a law against it.
I agree with you. this should be handled by the legislative process. but we should also agree that secret deals announced as a fiat acompli are pretty fertile ground for corruption also
Right, and as I said I agree with that. But is there any reason to worry that communities aren't getting the input they're entitled to? The article mentions one case in the Madison suburbs, where "officials worked behind the scenes for months" and yet the residents were able to get the project cancelled when the NDA broke and they decided they didn't want it.
I've tried simple whetstones, and haven't yet got the knack of not dulling knives on it. The bizarre sharpening contraptions take the knack out of it, same as the pull-through knife mutilators. It may not be the best, but it is better than it was. Unlike a whetstone where you may very well end up with a knife duller than when you started, if you don't have the knack for keeping an angle or removing the burr or any number of other ways to mess up.
This is anecdotal, America is geographically quite large. For a lot of people, where these events are happening are more than a days drive away (10 hours or more), it's not happening "here".
A lot of people here _enjoy_ the authoritarianism, judging by the votes, the voter turnout, and the private discussions I've had with my neighbors. They believe this is good for the country and that there'll be more opportunities for their kids.
A lot of other people are holding out for the midterm elections, to see if the will of the majority shifts, because otherwise its risks open civil war. And maybe just a touch of American exceptionalism—this can't actually be happening here, it'll all blow over—and distrust in the story that the media is feeding them is accurate.
And some are just fatalistic, this isn't really a surprising turn of events. America has been creeping toward this for more than a few decades, since Regan at the very least.
I think you hit the nail on the head. I count myself mostly in the "holding out for elections" group but a little bit part of the fatalistic group as well. The really sad part of the whole experience is how many people I know that support everything that is going on, and they are not in any way claiming ignorance.
Doesn't seem like LLM generated text to me. Even prior to ChatGPT some journalists preferred to write in a novel-style with extraneous fluff like that.
reply