pubkraal

If anyone is concerned with ocsp activity and verifications being requested all over the web, then oh boy stay away from https.

OCSP is a good thing, and the web - and your signed applications - are better off with it.

Sometimes someone can also just be reasonable without it being legally mandated, methinks

The static analysis, but also software component analysis tooling are really incredibly helpful though and should really contribute to releasing stable products as well -- it's not just here to satisfy your customers management types, it's there to actually make sure your tool doesn't have 5 RCEs active at any point in time.

I for one am happy companies ask about this type stuff, it's basic hygiene to keep control over your product's security, really, and the tooling really makes it a lot easier.

I fail to see the point, as far as I know Apple has been vocal about iOS since WWDC and typically releases the OS relatively quick after events. The beta's been out and available for every iOS developer for months in order to prepare for this.

There's enough to rib on Apple on, but this really doesn't seem like one?

Your example forgets to acknowledge that while there may have been good reasons for people to not be allowed to work remotely, COVID is a very pressing reason to do allow it, and the benefit of allowing people to work remotely vs getting absolutely nothing done or getting fined by the government for forcing people to come in is extremely obvious. So much so that the cons of allowing this have to be put aside, or remediated differently (which in some cases can even require investment).

It's a risk assessment that suddenly tilted the other way.

I don't agree with "everybody should work from the office" sentiments, myself, but I have seen this happen very clearly in many organizations.

Is this not an action that commonly is prepared months in advance?

It was when they pushed the update to remove the zoom webserver.

I'd argue that if you're writing malicious privilege trampolines for operating systems, you could have very well predicted this would pop up and you get stressed out for it.

It also implies “we knew things were bad but we intended to only compromise the security and privacy of people working in enterprises”

It seems a lot of the media is focused on the fact that people are being exposed to the virus. However, the Dutch are adopting a controlled way of doing this while protecting those at risk. All measures to limit contact are in place, in a big departure from what others who claim "herd immunity" are doing.

Any comparison to the (previously?) British approach where in the weekend even concerts weren't cancelled and people are still being forced to go to the office by their employers doesn't quite hit the mark.

I believed it until your password remark. That's a bad, bad practice.

Through a newsletter of Panic I came in contact with coda.io. It may not be perfect, but I’ve been loving it recently for simple to medium table usage and programming.

I’m not sure why the overlords of HTML had to remove blink in the first place.

I have a daily need for both tags.

If anyone knows, how much would this affect non-US technology processes and legislature? What would an outcome of this mean for Asia and Europe?