souterrain

> This is already kind of a thing. See gap years, find yourself trips, etc.

Add digital nomadism, at least, in many of its forms.

I’m quite certain the US government demands “show us your papers” of many individuals within 100 miles of the US border on a daily basis.

I was unaware that King George III was such a proponent of national ID cards.

Or ship it to the security team the week of DEFCON.

This is akin to the BCP 38[1] problem with ISPs. I suspect few SIP-based telcos do validation of originating numbers today.

STIR/SHAKEN has the potential to help here, but there are still shortcomings, e.g. when originating calls with source numbers obtained from other carriers[2].

1. https://tools.ietf.org/html/bcp38

2. https://support.bandwidth.com/hc/en-us/articles/360025664313...

What’s your theory on the justification DoD is giving to go single-award IDIQ?

I doubt their actual justification will ever be public, but I suspect their motivation is that they require a common IaaS platform such that they can have a unified toolset and a single, comprehensive approach to infrastructure security.

Keep in mind also that fewer proprietary features at AWS are available when considering standardizing across all classification types. “East/west” and GovCloud don’t have feature parity.

> Standard Ebooks puts significant work into designing, formatting, marking up, and hosting our ebooks. While some think we could, or even should, release our work with some kind of copyright notice, instead Standard Ebooks dedicates the entirety of each of our ebook files, including markup, cover art, and everything in between, to the public domain.

https://standardebooks.org/about/

I want at-large representatives for the entire state, based on general election polling rank. This is unlikely, of course, because it threatens the two-party hegemon.

I had been a “true believer” in plain text email until I had a support vendor document a problem using just this technique, including output from the system in question in fixed-width font.

While I cringe at the majority of HTML email, this use case I find enormously valuable.

What's unfair is the pretense that this is a market transaction between two equal parties. The "person" loaning the money is quite frequently a large corporation with access to resources allowing them to leverage the credit bureau system and the legal system to achieve an outcome in their favor. Most consumer borrowers don't have the resources to retain counsel or sue.

To this point: does “identity theft” really exist, or is this simply a reframing of banks, etc., completely failing at authentication?

> It has to be dark, because too much light will destroy the negatives.

The author of this piece doesn’t seem to understand the process either. The light will expose the photographic paper, which will render it useless. The developed negative film is relatively safe from light-induced damage.

The author also fails to mention that one begins developing film (at least, the way I did it years ago) by transferring it to a lightproof container in a completely black room. They tend to not show this part in Hollywood, I suppose, since black rooms don’t really translate well to the screen. (Unless there is an alternative process I’m unaware of... I was very much a noob B&W photographer.)

I’ve done Long Island to Virginia with 3W on a portable at 146 MHz, but the range being seen on 800-900 MHz around Netherlands is quite amazing.

I would agree it must be tropospheric ducting; I’m not aware of any other propagation mode that could be at work here.

To this point, does anyone have links to studies or even anecdotal “I did this after a stressful period and my results were positive” write ups?

Wage theft is theft. DoorDash, and the VCs backing them, should be treated as thieves until such time as they unequivocally reject the practice of wage theft in all of their business dealings.

This is why I frame this as an ethics issue. If you install some sort of MDM profile, unless you spend a lot of time understanding mobile device management implementations, you won't necessarily know what the capabilities are.

If it is your device, typically an employer will disclose in their policies what capabilities they use.

Now, does this prevent a rogue infosec person from deviating from the policy? No. Nor does it prevent the state from compelling the company to abuse their MDM technology. If these examples are part of your threat model, you should not use your personal device with your employer's infrastructure. I don't think this makes your employer's choice to use MDM a bad one, however. They are protecting the corporation, after all.

Ask. Since this often affects larger enterprises, start at the help/service desk. If that doesn't get you an answer, try Information Assurance or Information Security departments. Lastly, most large orgs have a Privacy office.

During all communications, make it clear what your concerns are; perhaps even link to articles like this one.

Corporations that care about customer and employee privacy will take such inquiries seriously.

If your employer subscribes to an ethical model which permits them to abuse MDM, viewing your web history and tracking your location, you need to do more than remove your personal device from their control.

You must find a new employer—preferably while you make public this repulsive behavior.

“Stuck” may not be the best word for a profitable journalism company that ensures its readers that they aren’t being tracked nor individually manipulated.

Are there any digital news outfits that don’t subject their paying readers to unethical (IMHO) advertising?

If no, I’ll continue to read via dead trees.

Is there a linguistic name for this returning to the pronunciation or accent of your youth when drinking or around others with the same/similar accent?

I am also from Long Island, and have largely moderated my pronunciation to match a more standard pronunciation, but when I interact with natives of north Jersey, parts of NYC and Long Island, I somehow start adopting the accent a bit, unconsciously.

RHEL 8.8 will be released in 2023Q4, so I suspect RedHat will continue to maintain the code at least until then.

> A plane can land automatically using ILS and other systems, but it’s rare and, even when they do it, it isn’t truly autonomous — it’s more like the airport is flying the plane by wire.

This is a misunderstanding of ILS. ILS provides inputs to the pilot and the instruments on board. It’s not like fly-by-wire at all.

Correct. IMHO accessing the local filesystem is incompatible with accessing the network from a security standpoint.

I’m fine with having a very clear toggle to allow this behavior for developer types, but this should default to secure.

I prefer the more “mental” aspects of yoga practice. (I acknowledge my complete naïveté.) Where I practice tends to be “American vinyasa”-centric however. I try to keep an open mind.

There are a few classes from teachers who deviate from this, and I simply try to vote with my attendance at classes I prefer.

What are your thoughts on file:// URLs being opened/executed in a separate enclave from the network, with no access to the network?

This would allow the convenience of file:// and IMHO eliminate many if not all of the risks.

Cloudflare should write a guide to doing post-event communication. Or perhaps they shouldn’t, as this seems to be a potential differentiator.

This is direct and doesn’t attempt to avoid blame. Well done.

Is there something in the OpenID Foundation membership agreement that might raise concerns for Apple?

I hadn’t realized this. So, we can pack .edu full of for-profit degree mills, but myriad respectable research universities the world over are forbidden. Mind boggling.

I continue to be against this and similar transactions as it is antithetical to the hierarchical design of DNS.

We are approaching a model akin to AOL keywords. Instead of a business directly controlling the namespace, we have a quasi-public institution that likely will continue to act at the behest of corporate interests.

For those who say the ship has sailed: I say this is only another chipping away at the democratic nature of the net. We must push back, or the beatings will continue.

Those whose data was compromised are not equal participants in said “market”.