packetized

I would say all of that is part of the process of stripping low-RCS paint.

Well, mostly the process of stripping their low-RCS paint.

http://www.thedrive.com/the-war-zone/4729/the-toxic-death-pa...

Generally, I agree with you - but it’s 2018, and I can’t see how hyping a SaaS by name dropping Golang is actually hyping anything.

Why does it matter what it’s built with, if it’s closed-source?

User-operated self-service for certificate issuance isn't exactly a cut and dried proposition for most orgs. Lemur helps in a lot of ways.

To be fair, Vault and Lemur cover slightly different use cases. Lemur is nice for controlling the distribution of certs from a variety of issuers, including Vault.

Could we add a (2015) tag here? Lemur’s been around for quite a while.

I’ve had, at best, lukewarm experiences with AWS customer support. Anecdata it may be, but this seems to be largely in-line with the experiences of my peer group, professionally.

Not sure why the downvotes; merely pointing out that Betteridge’s Law is once again proven out.

tl;dr: author believes “No”.

Betteridge’s Law still applies.

Reminds me of https://news.ycombinator.com/item?id=16809222

Could someone kindly add a [2004] tag?

for varying values of dangerous.

Precisely. This should not be a thing that can happen on a page that allows one to request and receive certificates rooted in trust stores.

This is a tragically insecure site already; the only thing keeping JS injection at bay is apparently regex matching for `script` in the id-verify page.

Note: it does not filter for SCRIPT. e.g.: https://alwaysonssl.com/id-verify/%3Ch1%3E%27%27%3B%21--%22%...

First six and last four are the limits for display set out by the PCI Security Standards Council. The things you should never store with the PAN are the PIN/PIN block or CVC/CVV.

https://www.pcisecuritystandards.org/pdfs/pci_fs_data_storag...

What about being targeted for $40k in your 401k? How about your one-or-two-letter Twitter nick?

These are things that have actually happened.

HTPB, unburnt ammonium perchlorate, aluminum powder.

https://en.wikipedia.org/wiki/Hydroxyl-terminated_polybutadi...

Any ‘push’ method to an app will end up being more secure than pure SMS 2FA, because it’s relatvely hard to MITM/hijack it, unlike social engineering your way into porting a cell number.

Except for this, I presume?

Changed IPs recently?

Are you on Dreamhost? http://automodelista.com.au/ ?

I have a parent that was wholly failed by the CWA after 24 years of service at C&W, South Central Bell, and BellSouth. I’m glad that you have an anecdote to share, but please don’t think they’re the norm.

It’s somewhat harder to be a Searchable Log of All (Company|Current) Knowledge if you utilize end-to-end encryption. Where are the ends?

“Not true, it’s just changed.”

...so you mean out of style?

I would argue that this kind of social signaling is exceptionally secondary to “can they do the job as expected?”

If the next sentence was “The skirt allows for ease of access,” it would not shock me one single bit.

This is pretty insanely regressive.

This dress code, much like “Oracle consulting”, has gone out of style.

YubiHSM2 doesn’t do m-of-n in hardware.

I fear that you might be drastically, tragically understating the importance of that title - even in SV.