auslander

> core problem in the United States' institutions - Defense industry dysfunction.

Not Super PACs? "they can raise funds from individuals, corporations, unions, and other groups without any legal limit on donation size." https://en.m.wikipedia.org/wiki/Political_action_committee

> towers with cameras and infrared sensors that use artificial intelligence to track movement.

No automatic gun turrets and autonomous drones? Phew!

World needs a Coupon Stock Exchange, like NYSE. Then bundle fake coupons into CDOs.

List of FF "integrations" grows. There is also HIBP one. We need a clean from 3rd parties version, like ungoogled-chromium project.

> The conclusion of the debate

Obviously debate is still on, as we see in here and in [0], and it looks like HN folks are not in favour of these integrations, including me. So question stands, how/why the debate was concluded, did all developers had a vote? Is there a link to discussion?

[0] https://news.ycombinator.com/item?id=20927832

How decisions are made in Mozilla? By whom? Is there public discussion beforehand?

OpenBSD folks removed it, and they are always right about security, as they were with disabling Intel hyperthreading.

> Apple strengths are in integration, design and marketing.

I would place unmatched iOS security first, strong privacy stance second, well before marketing.

Sticking to Safari, I guess.

Safari

This. Many people do not realise that CF can see inside encrypted HTTPS traffic. Your logins, passwords and keys.

> If there are more reliable communication methods

Of course there are.

https://en.m.wikipedia.org/wiki/Project_25

+1. Infrastructure as code is exactly that, code. For AWS it is Cloudformation template code, Cloudformation service and some CI/CD on top, like jenkins or ansible. Or Terraform for unlucky ones. K8s is container orchestration, like AWS ECS, totally different beast.

My history goes mostly to my carefully chosen, overseas VPN provider. Yes, there are no good choices, best you can do is to split your data between several parties, so its hard to correlate. Google has data on most people on the planet, unlike London Police, so giving Google your data is way more dangerous than other parties combined. And user data is Google primary business model.

And I wouldn't spend much time analysing policies, they are all "we pinky swear". Its is there a business incentive in using my data or not.

I wish Mozilla had Firefox version free from all integrations with 3rd parties.

> For instance Google[1] and Quad 9 [2] both provide free DNS over HTTPS services.

Using Google is giving your browsing history to an Ad company, why? At least Quad9 is non-profit. It also provides DNS over TLS, DoT service, which I'm using.

> We comply with U.S. sanctions

What are good non-US CAs?

They should have open sourced their navigation control codebase, so we can see and fix whatever bugs there are.

So ... MCAS again?

Extremely funny video by Moxie Marlinspike about it:

https://m.youtube.com/watch?v=Z7Wl2FW2TcA

Nah. Point stands, attack can survive the restore inside Office docs because macros are generally allowed.

Ya. And upvote my original comment plz, its down to -2 :)

but is a pretty good guideline :) If Windows got ransomed every time and MacOS is never, that is interesting, right?

Windows holds perceived monopoly on company-wide identity control. There are Mac solutions: https://www.jamf.com/products/jamf-pro/deployment/

Good practice. I'm just playing around, devil's advocate.

Well, there is no SMB v1 on either, main propagation bug. Next propagation tools are SSH bruteforce, subnet scan for vuln apps, Domain admin creds stored locally and sniffing NTLM hashes from network interface. Again only SSH and app vulns are viable in non-windows.

I was asked once to do reference design of Windows on AWS. After I learned how many ports has to be open for every machine and all of them had to be in same network as Domain Controller, I quit my job.

> If you believe that ransomware doesn't exist for macOS

Example? I have not seen any.

> my office backs up data, not code

No user's apps? No Registry? Ok, sneak it in Word document then. This delay thing can be applied wholesale, not targeted.

> if they had backups?

I would put a delay in ransomware so it sneaks in weekly and monthly backups, and only then trigger it. If stuff gets restored, sneaked warez will activate again. I bet backups are overwritten after several months.

Great read: https://www.wired.com/story/notpetya-cyberattack-ukraine-rus...

No Windows no cry :) Seriously, how can one compromised machine (inevitable) infect all others? Isn't there host firewalls on every machine?