It seems like we've all just... given up on certificate revocation? CRLs and OCSP were designed for exactly this sort of thing, but they both seen to have been abandoned as unworkable with no replacement.
It’s a hard problem: if you query on use, you not only introduce delay but also leak information about what servers people are connecting to. Dealing with that starts looking a lot more complicated (bloom filters per CA of recently-revoked cert IDs?) needing to be implemented into multiple libraries and the failure mode is an outage unless you fail open.
Same here - I genuinely thought this would have been easily, and almost immediately, remediated vis-a-vis CRLs. I'm not in the vuln management space anymore, but is there some sort of caching system used which would affect software differently than a typical browser?
As far as I'm aware the typical command-line stuff and most things just using SSL libs or language standard libraries don't do revocation at all by default.
Similar reason (though with the opposite effect) as how a cert can be fine for browsers but fail for curl when they don't send an intermediate: the "vanilla"/library/command-line stuff is just checking for a path to a trusted cert and not doing the CRL or AIA stuff a browser does.
Yes, exactly what the Apple article highlights! Appreciate the extra context.
CLI-based activity references etc/ssl/cert.pem. While they say this will be updated in the future (likely the next dot release), admins can also proactively remove the eMudhra entries.
Right - the only way we'll ever get a truly uncensored internet is if it's actually impossible to censor rather than some "gentlemen's agreement" that we'll censor this stuff for the Greater Good but not this other stuff.
From what I can tell, the best she can possibly hope for is to be set free after a few hundred thousand dollars in legal fees. I see this as a consequence of increasingly out of control automation.
No. The horses were made redundant and no longer exist in such quantities
So, uh, maybe don't dwell on that too much.
Actually, dwell on that a lot. It's probably the only instructive example.
The rich and powerful only suffer us because they need us. They cannot assemble every lead painted doodad by their own hands. If they could, they never would have hired anyone. So what happens when they no longer need as many people?
Society is already far too constructed around catching some of the wealth that just spills off of the people who own it, by being in their orbit. That activity is not actually productive, but since the only people with money are the ones that have a lot of it (K shaped economy), there's just not enough wealth left in the bottom part of the market to support anything else.
So long as they can keep us fighting amongst ourselves in meaningless culture wars. If there is ever a broad alignment of populists spanning left to right, it could get spicy.
There are more horses today than ever... Oxen got the short end of the deal - almost nobody uses oxen even though historically they were the backbone labor of the farm, while the horse was for the right.
The only data I can find ignores the majority of horses today - recreational riders. If you can find a better citation I'd stand corrected, but everything I can find counts race horses and horses used for farming.
> not a primary part of the conversation for accusations of other crimes like arson, theft, embezzlement
I've never heard of anybody's life being ruined over an accusation of arson that was dropped for lack of evidence (or even later proven to be false). As long as the consequences of the accusation are greater, the scrutiny will be, too.
And if you want to use the (safety oriented!) CarPlay functionality, you HAVE to enable Siri, even if you'd rather not have the damned thing listening to you all the time.
