godzilla82

Exactly. Side question: If you really believe something, do you feel the need to rationalize it?

So, are you suggesting to buy domains even for isolated networks? And then for this to work you need to connect to the internet just for DNS lookup?

I don't have data to back it up. But this simply is not correct. Social norms have changed over the last few decades and that alone means the percentage of working women have gone up. Very few of the women of my age group are housewives, which was the default a few decades back.

Its "easy" because VoIP providers are not held accountable. Force them to "KYC" and it would not be so "easy".

So, as per the author, sites should first check if the user exists and then check the password? Why? What if the username belongs to someone else?

I have a feeling you dont have much experience on working on other peoples code. You have just bundled all kinds of issues into a bucket of "buggy piece of poorly written code". Some of these are outright security vulnerabilities and some make you wonder how was the bug not found so far. Sometimes fixing these issues require a heavy rewrite which cannot be justified as a bug-fix. And how do you justify playing with your customers data by "slapdash jquery-and-duct-tape" techniques.

Get a snug helmet and put your phone inside against your cheek!

Don't the credit card companies do a credit check or is your tax information sufficient to know your credit worthiness? If a credit check is done, do you know which identifier the credit rating agencies use?

Is it only used by businesses? Don't you have to provide the SSN for your driver's license? If the government is using it as an ID across it's departments, then it is an ID.

But are you, as the customer, ok with having a personal relationship with a banker? Also, in a court of law, how would you define personal relationship?

Those examples are for getting a phone or electricity connection. For a loan, you would have to give bank statements, income tax return proofs etc. And if that is not sufficient, you need to get your property apprised by "authorized" valuators!

Those checks you talk about, involve using SSNs at some point. Also, these checks are not scalable. I think, because you have not lived within a system without an id mechanism, you have no idea of the set of challenges you face as a business as well as an individual. Just think how would you prove to a lender your financial status. You would have to give him a copy of documents of all your assets (bank statements, property documents), copies of your tax returns.

> it should also be the responsibility of the individual to do due diligence

How? ask them to carry a copy of their address proof and id proof? As an individual, do you feel ok to have copies of your id and address proofs in the hands of low level clerks?

>one time social security numbers were the only globally unique identifier in common use.

And now do you have other mechanism s? If you do, you should be using them, if you don't, then scrapping the only one is not a solution. Asking businesses to do verification on their own is definitely not a solution.

Sorry you are wrong. SSNs and other identity mechanisms are an infrastructure provided by the government to facilitate business. It Should never be the responsibility of individuals/ business to validate identity. If there are flaws in the existing system that lends itself to be manipulated, then the solution should be that the government should fix it.

Edit: In my country we didn't have a unique id till a couple of years back. So everywhere you had to submit photocopies of your id proof and a nother of your address proof. Imagine giving copies of your id to the lowest ranking person of the business you are dealing with. You have extra challenges if you have moved recently.

Sorry you are so wrong. What do you consider infrastructure? I have lived in the bay area and in Bangalore, I have no idea how you can even compare them in terms of roads, city planning, utilities agencies, Civic agencies etc. I think the exchange rate of your country's currency allows you to stay at top tier places when you visit India, that's why you'd experience India differently than Indians.

>the country faced pressure to comply with international traffic customs regarding traffic lights.

It seems weird that a country would face such pressures. Is there a UN body that enforces such rules?

I hate this attitude you have towards "some young people". Are we supposed to assume that you have sufficiently grown up just because you make this comment? If not, you dont have any right to judge others. Now coming back to your question, if both consenting adults think that "some fairly disgusting .... acts" are the norm, when who are you to say other wise. In case one of the adults doesnt thinks so, they can move out of the relationship. If the society forces them somehow to stay together inspite of one of them wanting to move out, then you have arrived at a problem that you can try to solve.

Optimal for whom? May be it does move to optimality, but not for humans, so human science does not find it.

Have you never felt frustrated looking for a pen and not finding one when you need one. The frustration increases when you do find a few pens and none work. the price of the pen is determined by the demand and supply but it's value at the moment can't be calculated.

Are the products of your "local economy" sold locally. If not, then you have no right to claim protection.

I think students want to study in US (or are willing to pay to study in US) is because after completing education there, they are eligible to find work there. I dont think students want to spend great sums of money studying overseas, because they dont have options in their own country.

My experience with all the certified security consultants is that they refuse to put any effort to understand the end risk of a security vulnerability on the product that is being audited. For e.g. for many sites, it doesnt make sense to implement security features that are required by online banks.

As an aside question for web developers: How many web developers encrypt/checksum all fields on the client-side?

Can you please explain. Which REST concept cannot be implemented? I think the problems that REST/SOAP solve,is that the "levels" that you speak about, have already been implemented by someone else. I am talking of serialization, transport level details (e.g. SOAP over JMS) etc. If even transport level abstraction has been taken care of by the implementers, then which concept do you think, cannot be implemented.

Newbie question .. can some one please help me understand the attack scenario. if I, as the attacker, want to inject malicious code/binary into a git repo, then I need to write my malicious code/binary in such a way that the resultant hash collides with one of the commits (? Or the last one?) in the repo. Is this correct?

Actually it depends on the type of visa. If you are on a tourist visa, you are not allowed to work. You forgot to mention US may be because it's your home country, but it is illegal to work in US on a B1 visa. Edit: also, if you are in US on work visa, you are supposed to declare any income you receive in your home country, and you are taxed on that money, even if the home country already taxed it.

But the amount of memory required for plain text source is very small compared to the memory allocated to render the page.

Well, many countries were parts of the British Empire for more than 100 years, including India, China etc. It would be wrong to assume that would cause ethical similariy between Britain and these countries.

Exactly. Especially if you consider the total IT workforce in a place like Bangalore. It is not rare for 100 candidates to show up for walk in interviews even at small IT companies.

Do you think the people who got selected into a company like Twitter, had language issues or were incompetent? If you are not from India, I can assure you that you cannot possibly comprehend the size of the population, and the resulting competition.