The fact you think all your political opponents are racists and evildoers is why the left lost in 2016, and in 2024. The non-strawman argument is that giving someone citizenship of your country should not be automatic…
Yup, and 50 million “Democrats” assisting them, people who’ve been convinced that maximizing the number of foreign citizens living here without valid visas is the enlightened and cool policy to aim for, or at least that…
We already have paths to citizenship, people just need to wait their turn. People with skills we need can already get in under programs that exist for that purpose. We don’t want the full population of every failed or…
> Overstaying a visa is a civil violation, not a criminal offense. If you want to hunt them as fugitives, change the law. It sounds like you’re saying we should all just accept that our visas mean nothing, and that in…
No, unless it’s were a cli image viewer. The gui parts of the OS, and what’s written by Apple, use keychain. Macs have two completely independent root CA stores. The cli and all the opensource parts use /etc/. Curl…
It was arguably always halfhearted at best. Look at how behind they were on many things for years. They update things, I assume, when necessary to make the build toolchain work, and possibly to hold onto their POSIX…
I might find that a good tool, too, but it’s worth pointing out that even doing that upon any change to the keychain trust settings won’t fix the full problem here. The bad “4” certs are also signed by another root,…
I know, it always makes my jaw drop when I realize that it’s still a significant number of people, since I remember it being a thing I used circa 2005. I don’t think git was even a thing back then.
This seems like extremely acceptable collateral damage to me. Sectigo should already be working with their customers to reissue immediately since they are the ones who signed the dumb intermediates. Trust only matters…
I think they meant that Apple’s updates seem to be the opposite of incremental, and they’re not wrong. If anything, Apple has moved in the exact opposite direction in the past decade, moving towards using enormous…
Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It…
> Removing the root CA will mean that these valid certificates no longer work. Great, that’s fine. They can reissue.
I read GP as a descriptive comment not a justification. They are showing with this issue that they don’t truly support the cli tools in a way we ought to rely on. Whether they occasionally provide some support doesn’t…
It doesn’t look like that, it looks like it’s a cert.pem file.
You have to admit that “just a quick patch” isn’t automatically low-risk. You could cause a large blast radius if you rush any patch out without proper testing.
Honestly that last paragraph I totally agree. I did edit to “never trust” these clowns’ root CAs in Keychain Access on my Mac, and this is the first I’m hearing that there was any possibility of that being flipped back.…
Wait, did I miss this? Can you share details on what browsers started doing this?
What kind of psychopath ships 100 distinct container images? I mean, maybe if you’re talking about all of Netflix or something, but… I suspect even they have base images that they use as a starting point. There’s very…
There are a couple of people with sober takes on this article and you’re one of them. The rest seem to have decided long ago that the entire military is full of mustachio-twirling evildoers, and building their whole…
I’ll assume that there’s some fake district we can create in the system to attribute such things to, since normally the courts are in districts which may be too specific on their own. But the resulting material would be…
Idk. Honestly native is a good descriptor if you mean “we designed it explicitly for ___” as opposed to “we realized last quarter that ___ was the new cool thing, so we bolted it awkwardly onto our product”
This is a valid point, but doesn’t it seem like it is tremendously easier to get a ride somewhere in some random suburban area or even a semi-rural area? New York or San Francisco had plenty of people who would’ve been…
In my untrained opinion, I don't think that will be as much of a cheat as it might seem. Or more accurately, creating a simulation accurate enough to where it would work for this purpose would be where all the…
Well, it matters more for AI because there are some limitations of human research that don't apply to AI. Not all of course, just mainly the fact that there's a finite number of great researchers. Other things are…
I find it absurd that you were downvoted to death for pointing out this fact that I had not considered. Thank you.
The fact you think all your political opponents are racists and evildoers is why the left lost in 2016, and in 2024. The non-strawman argument is that giving someone citizenship of your country should not be automatic…
Yup, and 50 million “Democrats” assisting them, people who’ve been convinced that maximizing the number of foreign citizens living here without valid visas is the enlightened and cool policy to aim for, or at least that…
We already have paths to citizenship, people just need to wait their turn. People with skills we need can already get in under programs that exist for that purpose. We don’t want the full population of every failed or…
> Overstaying a visa is a civil violation, not a criminal offense. If you want to hunt them as fugitives, change the law. It sounds like you’re saying we should all just accept that our visas mean nothing, and that in…
No, unless it’s were a cli image viewer. The gui parts of the OS, and what’s written by Apple, use keychain. Macs have two completely independent root CA stores. The cli and all the opensource parts use /etc/. Curl…
It was arguably always halfhearted at best. Look at how behind they were on many things for years. They update things, I assume, when necessary to make the build toolchain work, and possibly to hold onto their POSIX…
I might find that a good tool, too, but it’s worth pointing out that even doing that upon any change to the keychain trust settings won’t fix the full problem here. The bad “4” certs are also signed by another root,…
I know, it always makes my jaw drop when I realize that it’s still a significant number of people, since I remember it being a thing I used circa 2005. I don’t think git was even a thing back then.
This seems like extremely acceptable collateral damage to me. Sectigo should already be working with their customers to reissue immediately since they are the ones who signed the dumb intermediates. Trust only matters…
I think they meant that Apple’s updates seem to be the opposite of incremental, and they’re not wrong. If anything, Apple has moved in the exact opposite direction in the past decade, moving towards using enormous…
Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It…
> Removing the root CA will mean that these valid certificates no longer work. Great, that’s fine. They can reissue.
I read GP as a descriptive comment not a justification. They are showing with this issue that they don’t truly support the cli tools in a way we ought to rely on. Whether they occasionally provide some support doesn’t…
It doesn’t look like that, it looks like it’s a cert.pem file.
You have to admit that “just a quick patch” isn’t automatically low-risk. You could cause a large blast radius if you rush any patch out without proper testing.
Honestly that last paragraph I totally agree. I did edit to “never trust” these clowns’ root CAs in Keychain Access on my Mac, and this is the first I’m hearing that there was any possibility of that being flipped back.…
Wait, did I miss this? Can you share details on what browsers started doing this?
What kind of psychopath ships 100 distinct container images? I mean, maybe if you’re talking about all of Netflix or something, but… I suspect even they have base images that they use as a starting point. There’s very…
There are a couple of people with sober takes on this article and you’re one of them. The rest seem to have decided long ago that the entire military is full of mustachio-twirling evildoers, and building their whole…
I’ll assume that there’s some fake district we can create in the system to attribute such things to, since normally the courts are in districts which may be too specific on their own. But the resulting material would be…
Idk. Honestly native is a good descriptor if you mean “we designed it explicitly for ___” as opposed to “we realized last quarter that ___ was the new cool thing, so we bolted it awkwardly onto our product”
This is a valid point, but doesn’t it seem like it is tremendously easier to get a ride somewhere in some random suburban area or even a semi-rural area? New York or San Francisco had plenty of people who would’ve been…
In my untrained opinion, I don't think that will be as much of a cheat as it might seem. Or more accurately, creating a simulation accurate enough to where it would work for this purpose would be where all the…
Well, it matters more for AI because there are some limitations of human research that don't apply to AI. Not all of course, just mainly the fact that there's a finite number of great researchers. Other things are…
I find it absurd that you were downvoted to death for pointing out this fact that I had not considered. Thank you.