yetanotherloss

We were out better selves back then.

Seriously though any project of size almost had to involve large amounts of code written or printed on paper. Lots and lots of paper.

The cryptography to support this has been around for ever and it's been next to impossible to make the decision makers at companies and large organizations care, much less end users.

Small time players like GE routinely fail to correctly sign industrial control software, the odds of people recording video paying enough attention to get it right and the meme crowd bothering to check even if they did seems vanishingly small without a lot of educational effort.

Also a factor was that while clone machines existed of the IBM/Intel systems and earlier Apple and other 6502 computers, often out of Taiwan, the other vertical vendors managed to keep tighter control. 68k equipment from 3rd parties for Macs and such was much harder to come by. While that temporarily increased their margins, long term it meant that PC component costs kept dropping until you could get a 586 desktop that did 75% of a SPARCstation or NeXT for 30% of the cost.

That pitch for the most metal Mad Max sequel was pure molten gold and still holds up.

This is observed post hoc rationalization behavior for a lot of subjects, but it's worth remembering that a lot of the kooky stuff from step 1 turns out to in fact be run of the mill lunacy, so there is some harsh survivorship bias.

I do a lot of consulting and it's pretty common that the main value we provide is giving a reality check on whether many of these ladders even need to be climbed because all the people involved are focused on how slowly they're getting up and not allowed to step back and see what's supposedly above the top.

There seem to be hard cuts in search returns at 5 and 10 years, it's been really difficult to find anything from before 2012 without incredibly specific searches. Lots and lots of link rot too so it's hard to say how much of that is google/bing/etc.

This is a silly strawman and victimless crime has never been used in honest discourse to describe a perpetrator too incompetent to cause harm.

With so many multifunction SOC embedded controllers out there it's possible some one just didn't cut the lines to the radio built into the board that was selected for other reasons. Would not surprise me to see a lot of control boards that expected firmware or dip switches to disable unneeded functionality versus having a different line for similar boards if they weren't being made to a specific end customer anyway.

And the qualification for becoming one is largely liking money, not any sort of training and functional education.

Smart, observant, motivated people generally improve outcomes regardless of what they are involved in. There are amazingly good thieves, con artists and pimps, but is that something we want people pursuing professionally?

Competence is a large factor in not getting into unsafe operating conditions. Once outside the envelope, it's only a matter of time before you're unlucky.

Kibana and Graylog on top of elastic/opensearch. Even the commerical licenses on those are usually a tiny fraction of splunk's costs, and Graylog does enough for free that it's a much easier path to stand that up and then buy the correlation functionality if you really need it.

For some organizations what Splunk does well is important but for most of them they really only need much more basic log aggregation and analysis tools.

More like three decades. But you'll need to send the memo to small time players like Microsoft, who continue doing all kinds of stupid blocking IO on every possible user interaction because who even fucking knows.

It was at one point usable but they drove off the hobbyist/small business crowd a long time ago. We do some work setting up elasticsearch tools that aggregate and filter data later sent to central splunk purely to affect a large reduction in license costs.

No one knows at which point that number goes from being a hypothetical problem into a very realized one.

Everyone knows the US needs to roll back the batshit tax advantages it keeps handing out to certain groups that largely already have all the money, although few seems willing to say that in a way that may impact them getting paid.

The Loyal Wingman concept seems to lend itself to small squadrons of f35 and f15ex command planes managing much larger groups of drones that are actively running radars and using AESA arrays for command and control.

Those drones seem to look more like cheaper loitering weapons platforms than F35s but who knows what happens when the other side isn't so stupid.

In most cases it is that various rights are held by defunct or disinterested parties and so it's near impossible to get relicensing done legally.

Do the M1s have especially short write lifetimes? I have a Toshiba from 2010 or so and the SSD is still fine even if the trackpad and speaker ports died years ago.

If for some reason an invalid time causes boot failure? Sure. There are some instrumented devices I work with that will alarm and cease operation if they lose their serial connection to a satellite clock, but those are few and far between.

But since the vast majority of them do not fail in that matter if the normal, configured methods of determining time aren't working, using TLS parameters that have been deliberately randomized by standard for like what, a decade now?, can not possibly be a more straightforward failure mode than logging errors and waiting for operator input.

If it's that critically important, embed a fixed signature for a set of known time sources and query those as a last resort. Microsoft certainly has the resources to set up a few to do this the much more obvious and predictable way.

Man it's like you and the other respondent want to be helpful but didn't read the next sentence after that bit of hyperbole.

If all available time sources are not trustable and none of the existing answers make sense, do not try to set the clock! Coming up with more complicated ways to use untrustable data is not an improvement.

That's the point, if you can't trust the connection, stop trying to come up with more complicated ways to use the untrustable connection and accept that there is no safe way to update time.

It's probably still the case that Windows will consider the firmware clock more reliable than anything but a stratum 1 (direct gps/glonas/atomic) or maybe 2 time source which can result in truly bizarre behavior if the firmwar/hypervisor drifts too far from dozens of stratum 2 or 3 active directory servers. It logs no messages about this logic fork.

I don't recall the exact conditions that determine this but troubleshooting it is an exercise in thinking you're having a stroke.

I can't imagine the sequence of horrible decisions that led to doing this. Like, why would the time service ever want to depend on all this insanity when if it has a network and everything else is bizarro world, just like scrape the time and date text from weather.gov.

Or just accept that absent NTP, w32time maybe just shouldn't try to set the clock to whatever a circus clown tells it?

This sort of reminds me how there is a buried registry setting to tell w32time to not place the firmware clock at very high stratum in the time sources list which also is just a giant WTF in how those two behaviors were decided on.

Ipv4 has been "fine" largely due to carrier level NAT that has had significant impact on protocol functionality.

Also who are you explaining entering v6 addresses to? Serious question. And how is that effectively longer than a dns name?

People aren't used to v6 addresses, I get that. But they aren't meaningfully harder than myts3server.cgnatsucksdns.com.

My experience dealing with Linux over the years can be summed up by the exclamation "oh my fucking god can you people just PICK ONE."

There are certainly arguments for why the variety of replacements for simple, old, well trod and tested system tools are improvement and yet my 20 year BSD installations get on mostly fine without them and I'd be hard pressed to describe what they're missing in practical terms other than very specific stacks like Docker.

If you live in devops I can see that being a big deal but for the service functions themselves there is something to be said for leaving minor things at "good enough."

If you're using V6 addresses by hand often enough to consider them unfriendly, you're doing something wrong.

Also basically every home router in the last 10 years is V6 dual stack because they're all more or less just running variations on Linux or FreeBSD with user land stripped out for Busybox.

Ipv6 has been fine for years. It is purely institutional laziness at this point.

Not intending to come off as insulting here but it sounds like you don't know much about criminal enterprises OR money laundering.

KYC rules and many of the other AML efforts that make international students with 500 quid to their names jump through hoops to prove they're not funding ISIS are largely meaningless when the state protected banking system has been repeatedly caught directly facilitating setting up arrangements for south American drug cartels, Russian oligarchs, sex trafficking rings, the Trump organization, and every kind of tax evader in the US and Europe.

If you're seriously curious you can look into how many Deutsche bank executives went to jail and why the entire organization wasn't rolled up and replaced after the whole Panama Papers debacle. Spoiler alert: prepare for disappointment.

AML efforts finally busting the improbably succesful sushi restaurant in Laredo TX are a tiny drop in the ocean by comparison, even if we accept that such small wins are worth it.

Edit: I should note that better than nothing efforts to unmask real estate transactions are probably a net win. This isn't s surprise -- if you want to find money laundering, look at tiny section of the human species that has all the money.

If the goal is to make crime more expensive it's been a miserable failure. Cocaine is cheaper inflation adjusted and Deutschebank and Wells Fargo are still in business.

As an interested party who has been using classic Start and explorerpatcher on LTSC or server for years to make Windows even slightly less miserable, this site tells me only barely more than nothing.

Why not just link to the discord if that's where stuff lives. That being a separate issue, but still.

SFTP exists but never really took off for anonymous usage modes as people were already being conditioned to use browsers and cramming everything into HTTP.