MrMorden

Whitelisting would make it much more difficult for wildcat DoH. On the gripping hand, whitelisting is extremely annoying and tends to block more work-related-and-useful than software that is actually malicious.

The new keyboard is no longer horrible beyond index. Unfortunately, it's merely adequate, which at least in my book is unacceptable for any $1k+ laptop, let alone $3k+.

AWS and Azure both have ITAR-compliant and classified cloud offerings.

Classified clouds are a thing. (Also national clouds for unclassified but export-controlled information.)

https://azure.microsoft.com/en-us/global-infrastructure/gove...

That has to be a typo. 100 MHz frequency ≅ 3 m wavelength in air. 100 kHz would have a 3 km wavelength, which is relevant for power transmission systems but not a device that's less than 1 m^3 in volume as in the illustration.

The US does have higher labor costs than most of Europe, but lax regulation of special access service (backhaul) is probably more of a factor.

If you're that ambitious of a terrorist you have faceless minions to travel to internet cafes in distant locations and access the internet for you. Using Tails wouldn't do a damn thing for such a high-profile target, though; Osama bin Laden didn't have interwebs at all in Abbottabad, and the US government still dropped in for a visit.

The first user I looked at from the repository mentioned in the article did all of the above. Spam PRs in someone else’s repo, spam PRs in their own (fake) repo, spam PRs in a sock puppet’s (also fake) repo. The only thing they haven’t tried is writing a legitimate PR.

Correct. And "government-grade security" isn't a compliment. CISA definitely has some people who want to do the right thing, but they need budgetary control over other agencies to make it happen. (Speaking as someone who worked for the federal government for 15+ years, the most effective means of persuasion would be travel and reserved parking enforcement for Senior Executive Service members.)

CISA also doesn't have authority over DoD or IC systems, let alone the aforementioned budgetary authority to make them do it. No, it doesn't make any sense to apply a lesser standard to systems that are more sensitive. Like I said, government-grade security.

For systems expecting LDAP and Kerberos you can use either AAD Domain Services (a read-only DCaaS) or an on-premises AD controller.

FSF GNAT (from your distribution) can be freely used. The GNAT that makes output GPL is the GPL GNAT edition downloaded from AdaCore's website.

I don't update Linux, FreeBSD, or any other OS in place except on my FreeBSD-CURRENT desktop. The only way to operate in production is to create a new VM from your template, apply the runbook/state/whatever, route everything to the new VM, and drain the old VM.

My personal systems aren't where they should be for CM, but I still can't think of a good reason to update in place rather than rebuild and copy over configuration/data.

Flavors should make it easier to operate with packages instead of ports, but I don't have any idea what's going on there. If I were supporting a large number of systems, I'd want FreeBSD over Linux any day of the week and twice on Sundays because the ports system doesn't make you choose between a stable OS branch and current software.

He wouldn't need to be lying to be blind to data that doesn't fit the desired conclusion or to torture the data until they confess.

Dilbert had this punchline in 1995: https://dilbert.com/strip/1995-11-13

It's possible one of Scott Adams's moles was at this meeting, since they seem to be omnipresent and omniscient.

An urban location won't be more then ten minutes away from a park by foot. A 30 minute drive means exurbia.

Also City by Clifford Simak.

Bloomberg wants tools[1], not people who expect to work 40 hours a week and then go have a life. If you're willing to put in that kind of time and can get into a T14 law school[2], then doing biglaw for a few years in a contract or patent practice would open a lot of doors in a lot of places, plus make it very difficult to lose your job to offshoring.

The federal government has an annoying habit of preferring contractors for technical work, both because it's easier than directly paying people what they're worth and because it allows them to claim that the government is smaller than it actually is. Nonetheless, there are pockets of good technical jobs: CIA DS&T; NSA (RF, signals analysis, cryptanalysis); DHS (CISA). You won't be laid off, and there's lots of interesting and useful work; but even if you don't want to go contractor you're likely to run away from the HR departments that seem to view their job as preventing everyone else from doing theirs or the lack of external training opportunities, and at least in the intelligence community agencies are as headquarters-centric as Google and Facebook were ten years ago.

The risk of contracting can vary wildly. Some contracts have a new prime every five years; some go fifty years or more without a changeover. There are definitely contractors and contracts that are low risk, but in general the same rules apply as in SV: stability is being able to find another job, not a guarantee of continuing the same one.

[1]: In the MIT sense.

[2]: Spoiler: if you have a high enough GPA to convince Bloomberg that you'd be a good tool, you can get into a T14 law school.

Microsoft, Amazon, Google, and Facebook all have significant Seattle-area presence; it's still expensive, but noticeably less so than Silly Valley, and you can live close to work yet have a Walk Score in the double digits. (And in fact a good score.) MS has a non-negligible number of jobs in lower-cost areas of the US (e.g. Fargo, Las Colinas, Atlanta); Apple is expanding in Austin; both Apple and Google have an increasing number of offices in lower-cost cities.

Netflix should be able to get the EDL, which would probably take care of most of the work.

The HDMI Exploit Channel.

Also aka.ms/nohello.

The website may be out of date; current binaries are supplied for Linux and Windows... but only x86 32-bit.

It's not. https://web.archive.org/web/20190324191654/https://www.ibm.c...

(archive.org link because ibm.com apparently isn't hosted on a mainframe.)

Possibly accelerated, but for several years they've been moving in the direction of assuming nobody will visit a post office unless they have no other option and have reduced hours to whatever they think they can get away with politically.

Ten years ago there were quite a few post offices open 24/7/365. Today the 24-hour locations are at best 18/7 and the more usual hours are better than traditional banker's but worse than retail M-F, limited on Saturday, and LOLGFY on Sunday. Which limits their revenue to whatever services they have a legal monopoly on, plus package services for businesses where the shipper wasn't going to the post office to mail things anyhow.

If you want flags, gcc has -Wall -Wextra -Werror which seems like it would have caught this bug. (Of course, if you weren't using -Wall -Wextra from the beginning you'll have a lot of catching up to do before you can build with -Werror.)

GCJ-02 might have made things slightly more difficult for India; would it have ever slowed down the US by even a second? I'd be surprised if the country most damaged by that decision in practice wasn't the PRC.

Doctors declaring bankruptcy to get out of medical school debt sounds like anecdata. If student loans were dischargeable, that would change nothing for MDs because they're still going to make enough money to service the debt after residency/fellowship.

What does a Portuguese ship have to do with the US? And what are you smoking to think that a fifth-rate piratical force that managed to start a fight with an unarmed, civilian ship and lose spectacularly would do any better against an actual military? You can tell that the Venezuelan navy is not currently deterring a contemplated invasion by observing that their ships (bar one) are still floating.

Still no TPM? Seriously?

That might not exactly take a Tony Mendez-grade forger, but making a good one is probably not going to be within the skill set of random warehouse workers who enjoy agitating expensive shipments. They have to find a decent forger, get in contact, and arrange for the service. That wasn't going to be cheap to begin with, but the package is constantly in motion, so now someone else has to emplace the forged detector in a different location.

Assuming the warehouse worker can afford all that, someone offering anti-tamper-bypass-as-a-service is going to run headfirst into the FBI, SCA, and other well-resourced government organizations with which a sane individual would never consider fucking. That does not lead to rising property values in Tokyo.