Maybe the question is how do you sanction other malign actors who intend to steal the data. We know China and others do not give a shit about (especially western) IP rights. Not sure if that really justifies us ignoring IP rights.
The most-aggressively short timelines don't apply until 2029. Regardless, now is the time to get serious about automation. That is going to require vendors of a lot of off-the-shelf products to come up with better (or any) automation integrations for existing cert management systems or whatever the new standard becomes.
The current workflow many big orgs use is something like:
-
Poor bastard application engineer/support guy is forced to keep a spreadsheet for all the machines and URLs he "owns" and set 30-day reminders when they will expire,
-
manually generate CSRs,
-
reach out to some internal or 3rd party group who may ignore his request or fuck it up twice before giving him correct signed certs,
-
schedule and get approval for one or more "possible brief outage" maintenance windows because the software requires manually rebinding the new certs in some archaic way involving handjamming each cert into a web interface on a separate Windows box.
As the validity period shrinks and the number of environments the average production application uses grows, the concept of doing these processes manually becomes a total clusterfuck.
Yeah... fuck this shit. This is part of the reason I still drive a nearly 20 year old vehicle. It has features I want, and can't be stolen via fucking API calls. Absolute insanity.
I think Hyundai/Kia group has done unfathomable damage to their brands. Kia, despite being a budget brand, wants to be seen as a legit competitor to Toyota or at least Nissan. Their corner cutting with the immobilizers and the resulting "USB" theft shit was bad enough. Now this exploit.
Since the story came out people fixated on "lol he used a shitty gaming controller" but really that is one of the least sketchy design choices in the entire rig. Why reinvent the wheel and make a custom set of controls that are realistically another huge expense and potential failure point, when off the shelf solutions exist for that component?
The corners that were cut are the ones involving the viewport/nose adhesion to the ships frame, and the structural integrity of the carbon fiber hull itself. They had test data suggesting it was a bad idea to engage in repeated dives with their design, and an even worse idea to operate at the depths they chose. They decided to ignore that.
Glad to see others have also keyed in on just how lame this ad was.
My immediate thought was, if you (the guy doing the voiceover as the father) are so mentally deficient that you can't even put together a four sentence paragraph of your own original thoughts for fanmail, then what hope do you have of doing anything else as a functioning adult?
Worse yet, what does this teach the kid?
Yes. This is apparently so much of a problem that US and other nations include this in security training for military personnel and contractors. They literally teach you not to get in arguments online about weapons capabilities and whatnot because they know people are dumb enough to post classified info just so they can be like "ackshually..." on an internet forum.
You know it is pretty bad when a bunch of CNN commentators think he got smoked.
You're already legally required to manually register with the selective service if you are male and you turn 18.
Why not just introduce legislation to end that requirement altogether.
My favorite part was the qualified engineer sending him the stress curve graph with the likely crush depth zone marked with literal skull and crossbones and he apparently just ignored it and chose to exceed those depths anyway.
No major corp I'm aware of is excited about these changes. Legal especially would like there to be the minimum records retention required by law, and a months long AI searchable database of individual user actions on a PC is a nightmare scenario for them.
He revealed massive warrantless domestic surveillance. The 1700s equivalent would be if the post office made copies of every single letter everyone sent and then promised not to read them unless the sender or recipient was one day subject to a valid warrant. Whoever revealed this info would've been a hero and a patriot back then, and it should be the same today.
Snowden leaked his info about these programs more than a decade ago. If that is what the three-letter agencies and big tech were capable of doing in secret then, just imagine the shady shit they're doing now.
mctoasterson
0 post score0 comment score
I'm having an OK time with alternatives, namely GrayJay on Android and Windows desktop. Basically I had to make sure my subscriptions included the 50-75 creators I am actually interested in, then the list becomes 100% relevant because it is just videos from creators you are subbed to. On the Desktop app it still uses algorithm of some sort for sidebar content based on the current video you are watching only. So if you still want to "organically discover" things you can, but don't have to.
The only bad part with the Windows desktop version is it will crash the entire app mid-playback sometimes. Hopefully the bugs get fixed eventually. Also the "home" tab of Grayjay is some weird pseudo political stuff but at least you can ignore that entire tab and just look at your own subscriptions.