intunderflow

Don't responsibly disclose, it's not worth the hassle anymore. Unless somewhere has a paid bug bounty program that has a good reputation I just use an anonymous email and send the bug to https://seclists.org/fulldisclosure/

Unfortunately this looks like Amazon is hosting it on a special, on-prem, air-gapped group of servers similar to AWS GovCloud, so we can't look forward to misconfigured public S3 bucket shenanigans

Unfortunately the overton window has shifted so far I doubt anything will happen because of this. There was an opportunity directly after this to come down hard on it, there was some action, but not much.

This is a great example of perverse incentives, although I'm not sure I'd want to put my body through that

Since this is just going to be connected to DNI-U / NIPRNet at most, so only unclassified / sensitive but unclassified, it probably is more "Enterprise-Ticks-All-The-Boxes-Secure"

The internet-facing side of this is https://www.intelink.gov/, it uses DoD Root CA's though which won't be trusted in normal browsers.

Some of these keyword orders seem obscene in terms of how many people they target:

> ("fragmentation") AND ("bomb" OR "explosive" OR "ied" OR "explosion" OR "pipebomb" OR "pipe bomb" OR "PVC bomb")

As my mail client just downloads my email and I use my own domain, PurelyMail is strictly for delivering and receiving as well as having a nice webmail, for me the answers to this question they posted at https://purelymail.com/docs/companyPolicy#bus are sufficient to deal with my concern for now

I've been using https://purelymail.com/ for a few months now and found them to be excellent

It's not 500 years, but you can lock objects in AWS S3 for up to 100 years, depends if you're satisfied AWS will still be a thing in a century.

I used to work on and with a lot of folks over at Roblox and still don't understand the metaverse hype, when you ask them to explain it they go off into these speeches that make me think they don't even understand it themselves.

To me, it feels like a lot of the metaverse hype is just companies (and their founders) looking for some higher purpose, rather than just saying "we're a social network" or "we're a gaming platform".

With Actions they do this, if you're on GitHub Enterprise and run an action it picks machines out of a special pool set aside just for enterprise customers.

When GitHub is down we legally don't have to do any work, it's in the constitution I swear

Nice stuff, what sets you apart from your competitors like https://super.so/ ?

> This situation in particular really tests my willingness to assume good faith on the part of the governor and his body of advisors

I think by this point it's very clear he's acting in bad-faith to try and cover himself from the fallout.

It's hard to argue against them saying national security, because they're never going to release anything hard and fast. The US government definitely has a track record of waving it around as a blank cheque though (for a more recent example the TikTok U-Turn)

However, this quote in particular feels like scaremongering, with vague hand waving about a drone with a camera doing exactly what you'd expect a drone with a camera to be able to do, but with a few more vague accusations that I'm not convinced by (If a drone can remotely measure heart-rate that's very cool though and I'm interested in how):

"“DJI drones and the surveillance technology on board these systems are collecting vast amounts of sensitive data — everything from high-resolution images of critical infrastructure to facial recognition technology and remote sensors that can measure an individual’s body temperature and heart rate,” Commissioner Carr said in a damning statement."

If you can't compete, ban it. The new US Government mantra

Waiting for IBM to sue GRUB for using their copyrighted number 0xAA55

It either got hug of deathed or just had the plug pulled :(

The DMCA needs reform, but it will never happen. All-to-often it's used as a tool to just take down stuff people don't like.

People don't care about the "penalty of perjury" part because nobody enforces it.

What's the solution? Even if there was one, would Congress actually enact it?

Right now the actual website ( https://truthsocial.com ) appears to just be a landing page for a waitlist, so there's no social network yet.

While it's interesting that Trump has launched a social network I think they're going to struggle with the network effect and be in the same situation as Gab, where because all of their users are there for one purpose there's no general discussion about any topic beyond users being pro-trump.

This is actually interesting to see and I didn't know about it. Posting comments like this makes me feel like you're just trying to stir the pot though =/

Right now this just appears to be a landing page for a waitlist.

While it's interesting that Trump has launched a social network I think they're going to struggle with the network effect and be in the same situation as Gab, where because all of their users are there for one purpose there's no general discussion about any topic beyond users being pro-trump.

I had to remove the word reportedly because of the character limit, super sorry I just couldn't see what else to remove that wouldn't significantly mess up the message.

One that comes to mind recently is the Irish-sea border as part of Northern Ireland Protocol spanning from Brexit.

This was challenged as being in violation of the Acts of Union 1800 (particularly Article 6, which establishes an all-UK Customs Union) but the High Court ruled that the relevant parts of the Acts of Union are "impliedly repealed" by the Withdrawal Agreement Act.

There's a BBC article covering this here: https://www.bbc.com/news/uk-northern-ireland-57666255

While the UK does have a sort-of constitution as a mashup of laws and conventions it can be amended by the government of the day by simply convincing their majority in the commons to vote for it in the form of a new bill, so it's considerably weaker than constitutions in other states that require significantly more consensus to amend (such as the USA).

Mods: Title from article was too long to fit, feel free to adjust as you see appropriate

Customers have already agreed their tariff (how much they pay) with the supplier, since a massive spike like this wasn't predicted and the supplier is obligated to keep paying to supply their customers regardless of whether its at a loss some suppliers with limited capital reserves are quickly burning through them.

You could donate via Monero so from the Sci-Hub side its impossible to track back to you

Remember that if Sci-Hub helps you and you can afford it, a donation to them would go a long way to helping keep them afloat.