xorcist

It also sounds like the right people to handle certificate issuance?

If you are not in a good position in the internal organization to control DNS, you probably shouldn't handle certificate issuance either. It makes sense to have a specific part of the organization responsible.

F5 sells expensive boxes intended for larger installations where you can afford not to do ACME in the external facing systems.

Giving the TLS endpoint itself the authority to manage certificates kind of weakens the usefulness of rotating certificates in the first place. You probably don't let your external facing authoritative DNS servers near zone key material, so there's no reason to let the external load balancers rotate certificates.

Where I have used F5 there was never any problem letting the backend configuration system do the rotation and upload of certificates together with every other piece of configuration that is needed for day to day operations.

This is a bad faith argument. Whatever measures Google takes to prevent this (certificate logs and key pinning) could just as well be utilized if registrars delegated cryptographic trust as they delegate domains.

It is also true that these contemporary prevention methods only help the largest companies which can afford to do things like distributing key material with end user software. It does not help you and me (unless you have outsourced your security to Google already, in which case there is the obvious second hand benefit). Registrars could absolutely help a much wider use of these preventions.

There is no technical reason we don't have this, but this is one area where the interest of largest companies with huge influence over standards and security companies with important agencies as customers all align, so the status quo is very slow to change. If you squint you can see traces of this discussion all the way from IPng to TLS extensions, but right now there is no momentum for change.

A domain validated secure key exchange would indeed be a massive step up in security, compared to the mess that is the web PKI. But it wouldn't help with the issue at hand here: home router boostrap. It's hard to give these devices a valid domain name out of the box. Most obvious ways have problems either with security or user friendliness.

Not only would that set a questionable precedent if users learn to casually add new trust roots, it would also need support for new certificate extensions to limit validity to that device only. It's far from obvious that would be a net gain for Internet security in general.

It might be easier to extend the URL format with support for certificate fingerprints. It would only require support in web browsers, which are updated much faster than operating systems. It could also be made in a backwards compatible way, for example by extending the username syntax. That way old browsers would continue to show the warning and new browsers would accept the self signed URL format in a secure way.

The comment of yours is likely in good spirit, but it mixes reasonable things with completely outlandish ones.

From experience, averaging 8 km/h for 2.5 h with 50 kg on the back is just not possible for most people, and likely not for you or me either. Doing it in uneven terrain sounds completely unrealistic no matter how fit you are.

Just suggest something realistic instead, like 20 kg and 5 km/h in easy terrain for healthy people, and and least it would be something possible to discuss.

Going 4 days without food is something you can absolutely try if you like, if you are healthy or otherwise secure. But going 2 days compeltely without water is stupid. Don't do it on purpose, ever, no matter how fit you think you are.

2 days without water sounds completely idiotic. It could seriously affect your health.

The idea that everyone should do some basic military training is a good one, but the above seems focused on some over the top macho stuff.

Some basic first aid training however should probably even be taught in schools, and then repeated at least every decade.

Also the same person who wrote LZEXE, which might be familiar to people who used DOS.

I would gladly pay you generous reward if you can find a pair that fits me.

I literally mean this.

> I thought to write a 'house manual'.

Please do! Make it on paper, too.

I got a few old school binders with the house, and it's been a life saver. It's sorted by room, and all sorts of useful things are in there: Exact model number of the water heater. Wiring diagrams of the garage and cellar. Location of the master water valve. The location of the tool to reach inside the ventilation ducts. Where the stones are dug in the garden. How water flows when there is flooding. How to replace filters in the rain spouts. The garden roof may take damage from heavy snowfall, but that the incline of the garage roof is enough.

I am extremely grateful for this binder and try to keep it updated for the next owner. It seems a bit elitist to call it common sense. Sure, it's a house, everything can be repaired. But it's good to know why things are built the way they are. And it is much more useful to find out that the watering system needs to be drained late autumn before the fact.

I would pay you (almost) anything to find me a pair that fits. It has taken me a long time to finally find a pair that I can use not only walking but also running.

Then what to do when the battery dies? They only a last a couple of years. I can replace my phone pretty easily, but how can I find another pair of earplugs? That's a process I don't want to go through again. The human-device interfaces should just work.

The only other solution I have found is a USB-C-to-3.5mm dongle but then the phone doesn't fit comfortably in my pocket anymore, and it's very inconvenient when running.

> Curve recently enabled mobile payments without Google Pay,

This could be very useful. My Google skills came up short. Do you have a link?

Yes, and article starts out by definining manufacture as "assembly using more advanced tools than a screwdriver". They solder. Good for them. They keep mentioning that their resistors are made in the US. That's great, but not unique to them.

They don't manufacture their important components. Not even Apple does that. No one does. There is roughly zero chance that any of the non-interchangable bits, the SoC, the battery or the screen, is manufactured in the US.

And there is nothing wrong with that. It's just silly to pretend otherwise.

No need for the scare quotes. The current federal budget is expanding, under the current administration.

Had they the slighest wish to shrink the debt, or at least not expand it further, tax cuts would have been out of the question until the budget allows for it.

Nobody says it is effective, only that it is possible.

One way could be to send the message to the market that a certain area is strategically important and any startups will have access to extremely cheap loans and not have to worry about natural resources or personel.

Then follow up on those promises, take a step back, watch the Cambrian explosion that follows and when the businesses seems to have grown legs simply scale back funding and watch them fight it out. One could even say that is exactly what has happened in the world several times over. It is not unique to China.

Define "produce", I guess? The price differential suggests that it refers to final assembly, which is common when components have different tax codes than the final product.

Creating domestic jobs this way doesn't have a great track record however. They are usually quite expensive. And they don't help the geopolitical uncertainty at all, which is at least hinted at being something of an end goal.

Sure, you can ship parts all over the phone and have assembly in the final country. But what does that solve? What people usually think of when discussing where products are "produced", the components or at least a majority thereof, is the same.

Where do you source OLED screens in necessary quantity to produce a popular mobile phone model in the US, or any other Western country? Or the batteries? It's not a question of cost. It a question of non-existence.

Changing global production is a not a singular problem but something that would require laser focus during several decades and many different areas just to be something that could be taken seriously.

> some point on the spectrum between "commit your dotfiles to git" and Nix

That would be configuration management tools such as Salt/Puppet/Ansible/Chef.

They were popular ten years ago, and gained a lot of exposure as the devops movement gained ground, but they never stopped being useful.

Having your non-running state defined declarative is powerful, and if you can define a single source of truth for entire distributed systems, that suddenly makes you able to reason about state on whole systems.

There is no exclusive-or between business models, there is an inclusive-or.

Over time subscription models will converge to subscription with advertisements. Like newspapers did.

We do not know for sure but this would be very unlikely. Several of the participants does not need to know this information and it should be compartmentalized.

Information concerning capability or location should not come near unclassified networks or civilian phones. Somebody could drop or steal that phone or glance over a shoulder which could necessitate cancelling the operation or much worse.

That's not at all what's it's like to work with classified data, even deep down the subcontractor chain. They constantly drill into you to respect data classification and the consequences of ignoring these rules. Nobody ever does what you describe.

You are using your own definitions of the term and you will find that no one else agrees with that.

This is a silly game and there is nothing to be gained from playing it, for anyone.

Both of these sources contradict your somewhat bizarre thesis that sqlite, one of the most commonly used free software in the world, somehow is not open source.

They made up the term specifically from looking at word combinations that were not in common use and could reasonably be trademarked for this specific purpose. One of the problems with the at the time popular term Free Software was that it could not be trademarked. They did a thorough job but in the end it wasn't enough.

> Wait until you realize that the EU tariff on American cars has been 4x the US tariff in EU cars for awhile.

That's a simplification beyond what's truthful. Import taxes are different on different types of cars, both in the EU and the US. There's certainly some type of car where the above is true, maybe some type of gas guzzling pickup truck or something, but over the total amount of sold cars it is not. Trade-weighted differences simply aren't that great, which is not a coincidence because a) both the US and the EU are developed economies which are likely to benefit from free trade, b) taxation works in nudging the market what to buy which evens out the differences further, and c) we have had trade agreements where this was an explicit goal.

This is also why some economists like them, they're hard to cheat on. Know what's even harder to cheat on and has much less long term impact on the economy? Sales tax. A federal sales tax would have been preferable to the import tax. But there are probably other political concerns at stake here.

There is no "only" in advancing the inevitable. A century may be a blip on the geological timescale but it makes an enourmous difference for civilization.

A century from now, global warming will be "solved", one way or another. The open question is what civilization looks like.

To be fair, JWT is abysmal in more than one aspect and there's reasonable chance you'd be better off on your own.

It's like "No, you don't need to write a configuration parser, you can just serialize an object" which is a well travelled road straight to Dante's seventh circle.

Most of these things are much harder to get right that you make it sound. Perhaps proxying most so. It is a legitimately hard problem. Look at something like Varnish, which is likely one of the better proxies out there. It took many years to get good.

I never had to write a proxy and am grateful for it. You have to really understand the whole network stack, window sizes and the effects of buffering, what to do about in flight requests, and so on. Just sending stuff from the file system is comparatively easier where you have things such as sendfile, provided you get the security implications of file paths right.

I think what you observe is more like a natural blowback to the prevailing idea that this is somehow beyond critique because it will fundamentally change culture and civilization forever.

There's a bit of irony here too. The intellectual discourse around intellectural property, a diverse and lively one from an academic standpoint, the whole free and open source software movements, software patents, the piracy movement and so on have analyzed the history, underlying ideas and values in detail for the past thirty years. Most people know roughly what is at stake, where they stand, and can defend their position in an honest way.

Then comes new technology, everyone and their mother gets excited about it, and steamrolls all those lofty ideas into "oh look at all the shiny things it can produce!". Be careful what you wish for.

You don't want competition. The only competition a school can have is by proxy measurements, and then you are deep into that age old problem that what you measure will decide the outcome.

Just like paying programmers for each bug they fix, which will drive the production of bugs to fix, paying schools for grading children will earn you a lot of highly graded children.

What we need is a respect for the profession. Treat good teachers with a lot of social respect, pay them well so they don't need to think about anything else, and give them a lot of opportunity to educate children as best they see fit. Just like we do with the best doctors.