jackweirdy

I like the "trust on first use" commenter's suggestion, akin to how typical SSH works

The argument I have in favour of not requiring encryption is best summarised by what you have outlined. It would require a massive industry shift towards no obvious solution with no backwards compatibility that doesn't solve anything

Until I hear a convincing story of how I will do the usual lan tasks of

- connect to my router to fiddle with settings

- see the management interface on my printer

- join my parents network and do things for them without having to explicitly trust a CA

- And most importantly, see consumers who don't understand any of those things be able to do these things all out of the box

I can't see how it is a viable expectation

I totally love encryption. It's great. But seriously: what domain will I visit to fix my pppoe settings. Who's going to control that domain, and who's going to renew the certs for it. Because if the answer we will expect consumers and SMEs to trust a certificate authority created by a factory with its own crappy security practices, I'm not sure how that's an improvement

Otherwise we are breaking things to "fix" something that doesn't "fix" anything. if someone is MITMing my lan, it doesn't matter whether my router is TLS or not. it's compromised

Do LAN sites need HTTPS? IE wifi router, printer, fax control panel?

I am pro-HTTP for these use cases for as long as browsers have more serious warnings against self signed certs, old SSL/TLS versions and weak algo choices than the warnings for HTTP.

Hardware deserves to be supported as long as it physically works rather than as long as its embedded TLS stays supported

It looks about right to me (I used https://www.atmosfair.de/en/offset/flight/)

It’s about 850 US tons per full leg * 4 legs to make up the two round trips

(388 pax in a -300ER)

Because using a domain you don't own (https://krebsonsecurity.com/2020/04/microsoft-buys-corp-com-...) or that isn't an ICANN-known TLD (https://learn.microsoft.com/en-us/windows-server/identity/ad...) is trouble

Split horizon DNS just how DNS works. Its weird that HSTS preload lists has made security decisions assuming all domains under these TLDs exclusively point to the internet, when that's not how DNS works

Just use another TLD is nice when everything is from scratch, but when it isn't it means migrating an intranet to another TLD and managing hostname changes for every instance under the domain...

Isn’t the HSTS behaviour identical when the domain is the same, regardless of whether the route goes over the internet?

Ie if you have a .dev domain that resolves to your intranet - you will still need HTTPS on example.dev, the browser won’t let you off?

I know this is good for the internet, but not all HTTP is the internet.

I have to upload TLS certificates to a printer. A printer!

The printer doesn’t even have a sensible tls algorithms, because its firmware was written at least a decade ago. And the likelihood of someone, anyone, MITMing my printer is 0

Unless we are thinking of different technologies, you can use esims for all of that? Just last week I ordered a usmobile.com esim, installed it on my phone, received a +1 415 number and received and sent SMS with it

Jet aircraft typically already fly at their most fuel efficient speeds rather than their max speeds

Raspberry pi trading limited (commercial endeavour) is >80% owned by the raspberry pi foundation (another investor and now Sony own the remaining 20%)

We have a way already to keep routine information off the radios - CPDLC - https://en.m.wikipedia.org/wiki/Controller%E2%80%93pilot_dat...

Entirely possible we could find more things to move there with humans

I feel like someone has opened a jet engine and showed me there’s a hamster wheel in there; I had no idea this even existed

Going to plug my own blog from a few years ago to illustrate how you can generate strings and even functions from non-alpha code characters: https://www.jackwearden.co.uk/blog/bending-javascript-type-c...

Really like this. And reminds me of Charlie Munger's advice -- "Opportunity comes to the prepared mind"

If your company and your customers are suffering due to another company’s dubious policy, don’t contact customer service, contact legal@

Another depending on your jurisdiction is the court process in your area.

In the U.K. we have the Money claim online service, to start proceedings against a company or person who owe money. There is a nominal fee starting at £30 and if companies don’t respond the court will de facto rule in your favour.

Naturally, I am not a lawyer, I am a dog on the internet. But some things have the smell of having been critically analysed by lawyers, and this just... doesn't somehow.

It seems if I post a photo of a sports event that makes the stadium location obvious, that would now fall foul of this policy? Likewise a concert, or a politician at a publicly recognisable residence

Purely personally, one of my most memorable times on twitter was the tens of thousands of people watching a British politician fly home on a long haul flight to get fired - quite sad that we won't get to experience the sheer bizarre feeling of that again https://www.standard.co.uk/news/politics/more-than-20-000-pe...

Barbara Broccoli ruled that out recently

There’s already a version byte: if it’s [0-9a-f], that’s version 1 ;)

Are your SSIDs named the same or differently?

If you name them the same, they should auto-switch more aggressively, but probably still not optimally.

For that communication between the routers is needed and each will kick you over to the other when they agree it’s necessary

Recommended reading: https://support.apple.com/en-gb/HT202628

If you want to measure distance travelled over the earth you want nms since the earth is a sphere and you don’t want your route length to be longer when you’re at higher altitudes

If you’re measuring distance in nms you want knots as they’re nms/hour

We use kms for other things though- like weather minima, runway length - things on (or close to) the surface. Eg I need either 5km or 8km forward visibility to enter some controlled airspace.

Ft for height is less functionally defined though- that’s just the way it is because it’s the way it’s always been. Not much gain in changing it though

Is the ship of Theseus a single thought problem, or is it a different thought problem than when it was first thunk since all the present thinkers are different?

I think this idea must have been taken from Miaow Miaow Beans https://youtu.be/CI4kiPaKfAE

Some see paying out dividends as saying “you can do more with this money than we can right now”

I don’t think ACME alone fixes it. I had this exact problem with letsencrypt when they did their recent cert switcharoo.

Intermediate cert was referred to by name in the cert chain but not served by the server in full.

Server was of course referencing the newly signed intermediate cert (called L3 I believe) but the client only had a stale copy/ version of L3 signed by an expired trusted cert.

Issue was on an embedded device that couldn’t be fixed so the newly signed intermediate cert needed installation everywhere manually

See also: “I think I just interviewed a North Korean hacker”: https://twitter.com/jonwu_/status/1520072367069876224

Chronic condition but it has its ups and downs

Save your prayers for Embraers

The history of this law dates back to 1935, when it was designed to protect post office staff who ran telephone switchboards from being harassed by the public, and it that context, it makes sense. Of course in 21st century the law doesn't make sense as it isn't humans transmitting our messages any more

Some legal commentary about its previous use: http://barristerblogger.com/2018/03/24/its-time-to-change-th...

While there is certainly a slippery slope argument about the validity of restrictions on speech, that is not how I see this - this is legislative debt, and an argument in favour of deleting deprecated laws

I think the earlier comments are referring to CAT 3 auto land systems using technologies like ILS, which are used routinely and are good for 0ft visibility. That is, approach in cloud down to the ground