Source? Is there any non-Apple app that has this entitlement?
6,239 karma · joined April 18, 2020
When restoring from backup I went with Rook (which is a wrapper on ceph) instead and it's been much more stable, even able to recover (albeit with some manual intervention needed) from a total node hardware failure.
This would be an example of not supporting rehabilitative justice, as there's no reason to believe this other than emotional reasoning. As a matter of fact, the evidence suggests the contrary - recitivism rates are _lower_ for rape and sexual assault than most other types of crime, including theft: https://bjs.ojp.gov/content/pub/pdf/rsorsp9yfu0514.pdf
> you’re obviously looking for the answer “nobody supports rehabilitative justice”
I never said nobody or anything close to it, that's a straw man you've made up in your head. Obviously, some people truly do support rehabilitative justice, but I believe they are in the minority.
It's easy to say someone who stole a loaf of bread should be rehabilitated, but when asked about a one-off rapist people will show their true beliefs.
Thus, fixing this is not a priority to them, if anything they want it to stay this way.
More importantly, this project is not "zero trust" and calling it such is borderline deceptive.
I can verify the artifacts you're shipping contain the code in the repo (or I could just clone the repo myself), but I cannot automatically verify that your code is non-malicious and free of bugs. That is what I am trusting when using your software, and I have serious doubts about the "free of bugs" part for AI generated software.
1. Code is largely if not entirely written by AI
2. Author is completely anonymous, using a dedicated GitHub and HN account for this specific project
Both of these are really bad for security-sensitive software.
If it was actually true that 80% of the population opposed this law, MPs would be falling over themselves to run against it and it would be gone immediately after the next election cycle.
I think it's a dumb law, but I also don't think the UK's democracy is that broken. It's pretty clear a majority of UK voters support or are at least ok with this law.
This is the DEFAULT fallback behavior in their installer - not something that only happens on legacy machines.
If I install a project from GitHub on the airport WiFi I'm assuming that the authors know what they're doing and I'm not potentially getting silently MITMed. And when I find out the authors don't know what they're doing to this extreme extent, I note down to never use their project.
Therefore, it's trivially possible to RCE someone running this script you are MITMing - block all the HTTPS connections, and then replace the binary in the HTTP connection with malware.
Frankly this vulnerability is so obvious and so negligent that I would never use this tool, which is unfortunate as it sounds like a cool idea.
They can be but _are_ they? Does their installer actually verify the checksum?
Because if it's designed for systems so minimal/broken they can't do normal HTTPS, I kinda doubt it...
Why not?
The solution to this problem is not to have more cars, it is to have less (and probably stricter standards on obtaining and maintaining a driver's license).
I fully understand why you would want to do this, but as a consumer I would never buy this product with this clause.
Kagi needs to not just be worth $10, but also worth ($10 - ads) more than the alternatives.
Of course, specific EULAs may not be enforceable in some countries because they contain terms prohibited by law. But the concept of EULAs - a contract where you agree to certain terms in exchange for license to use software is enforceable in basically all countries.
Of course, neither of us have actual numbers but my gut instinct is that registars are probably about as secure if not less secure than CAs, and there are nearly 10x as many of them.
But at least it initially appears SSL.com is taking it seriously, we'll have to see what the report says.