The CAs are hard embedded in the core snap. They're pulled from some specific package when built, but snaps themselves are immutable. We attempted to overwrite it in several different ways, but the OS is just simply mounting these folders from the core snap (which is immutable), and then marking those mounted paths them as immutable.
Wow, it's gone up! When we talked, it was $10k/year, and then there was an additional cost for every update we pushed out. It depended on the speed, size and number of devices receiving the update.
Not gonna disagree at all, but I don't see any widespread adoption from enterprises because of it. It's disappointing because Ubuntu Core is actually quite secure, and we were really impressed with it... we just couldn't use it.
We tried to make an internal IoT device using Ubuntu Core and snaps because the capabilities of it were very promising. We started a PoC and about halfway through we hit a major roadblock. Our enterprise network does certificate substitution, and Ubuntu Core absolutely does not allow you to install your own certificates globally, so our devices would never receive updates. We tried EVERY hack we could think up, short of making our own core snap. We talked to Canonical about it, and they didn't seem interested in our fixing our complaints without a massive amount of money, so our PoC died, and we dropped Ubuntu entirely because of it.
I can tell you that most major retailers (target, walmart, etc) most definitely have a system. It not only specifies which aisle to put things on, but exactly which shelf, and how much space is allocated for that product. I can't remember what they're called, but they're required for every product sold in those stores. When I worked at Walmart in college, we were issued these plans weekly. Obviously this is probably not the case with smaller retailers.
Did anyone use Firefox? There's a fairly significant issue with video simulcast in FF, and if anyone on the call broadcasts video on FF it will use significantly more bandwidth than users on Chrome/Chromium-based browsers.
Authentication is hard, but to be honest, building your own authorization framework is actually really easy in phoenix. Mine is about 80 LOC, and most of it came from the phauxth generator. Granted the default is rather broad, so I've added a few functions to handle some role specific stuff.
Most enterprise networks do this, but you'll have major issues with IoT devices and devices/apps that do certificate pinning. You'll probably have to put those on your guest network... Assuming you have one.
Little Snitch 4 is a rather impressive piece of software. The map is my favorite part. It's not always accurate, but it's absolutely wild to see the places apps want to ship data off to.
Also if you interface directly to your WAN, you can see all the bots/worms/etc that try to connect to your IP. I got a surprising amount of netbios queries from Iran (I'm assuming from EternalBlue based malware trying to connect), but I highly recommend NOT doing this. It's the wild west outside your firewall.
Pro mixers also have lots of presets and tool chains already setup that they always go-to. It's not that they could just finish a mix in a day, it's that they have a lot of their tooling already roughly setup, and they just have to dial it in. It still takes time to create and setup those chains/presets.
I found a bill with a mistake on it, as one of my kids was charged twice for a single procedure. I called to get it fixed, but instead of dealing with it they just immediately sent it to collections.
Didn't Australia like pass a bill or something that compels corporations like Fastmail to give the government any and all encrypted communications if they ask?
I visited Romania a few years ago, and I would say it's a lot more than just that. Fast food was actually a rather rare thing to find outside of any major city, in fact restaurants in general were just not that common. The variety of things at a regular market were far more limited than what you'd find here in the US, however the quality of the food was incredible.
I visited Washington DC on a band trip in high school about 15 years ago. Right before I left, I bought Five For Fighting's CD: The Battle For Everything. I listened to it the entire time I was there (as I only had a CD player). Anytime we were on the bus, I was basically listening to that CD.
Now, If I ever hear any of the tracks from that album, I have a flood of memories that come back, and I think that is the reason why I remember that trip so well.
Their scanning tools are "source available", but they're definitely not open-source. The license is gonna be a non-starter, but how they built their SAST tool [0] is actually quite interesting.
It just uses existing open-source analysis tools, but orchestrates them all into a single tool by coordinating a bunch of docker images.