yardstick

Yes agree a lot do include education. But, not all the jobs there come with such perks.

In the UAE, you pay for your kids education from day one to the end. There’s no free ride, unless you’re a local. I’m not sure how many other countries are like this.

I’d say most countries provide free education to their residents. But, not all.

> Governments in general are pushing for capital gains tax normalization where instead of requiring a taxation event the capital gains tax would be levied yearly.

You’re alluding to wealth taxes, right?

Because taxing unrealised gains are wealth taxes.

Or maybe I’ve misunderstood?

From a network operators perspective, endpoints can be compromised. How can I trust the endpoint will enforce all the security rules required to be attached to the lan? How can I trust they won’t try send data to malicious hosts?

Well, just give up using shared hosting for services that need to be locked down. Ain’t going to happen though, because a different and at times overlapping group of people would be inconvenienced.

Encrypted SNI was never about hiding which specific articles in Wikipedia you are looking at. It was about hiding the fact you are looking at Wikipedia at all.

There are valid use cases for TLS middleboxes. Anyone having to secure a networks outbound access to only essential services has run into the “I have to allow all of AWS/GCP/Azure/CloudFlare/…” for some critical tool to work.

Options are:

- Allow all out (nope, not secure)

- Allow all to the cloud providers IP range (still terrible)

- Filter on SNI but don’t inspect the payload (better than no security, and doesn’t require plaintext access).

- Full MITM TLS proxy (performance bottleneck, and now we have plaintext access to all your data, which we really don’t want and didn’t previously require to do the filtering).

- Try convince the third party service to run on a handful of static IPs that aren’t behind a global load balancer with access to the rest of the cloud providers customer domains. (Yeah right)

See: Hospitals. Payment Networks. IoT networks.

So what you’re saying is that for 20-30k you’d make at least 1m by holding them all for 25+ years?

That law only says the devices have to have unique IDs.

It doesn’t say anywhere (from my quick skim) that those unique IDs need to be recorded against/associated with patient records when they are implanted.

Or have I misread?

That environment was directly proceeded by WW2, which required massive capital investment to rebuild Europe[1]. In the UK we were still rationing candy and meat during the early 50s[2]. So, I’m not particularly eager to recreate those conditions.

1. https://en.m.wikipedia.org/wiki/Marshall_Plan

2. https://en.m.wikipedia.org/wiki/Rationing_in_the_United_King...

Definitely don’t set security questions to the password itself.

Use the password generator to come up with some random words, different for each question.

Thanks for the reply, and glad to know it’s something you’re already thinking about!

Yeah my thinking is even if they don’t have the users IP, knowing and seeing all the traffic associated with a specific public key would allow them to build a profile of the user.

Eg based on the specific sites visited, payload sizes potentially, domains looked up, etc you’d be able to characterise the person. Especially so if anything they did was not encrypted, or they have their own vanity domain (for emails or anything else).

> Mullvad only needs to associate each decrypted IP packet against an assertion that the packet was paid for.

The idea of Obscura is by using two middlemen (them + Mullvad) that neither party can figure out who the end user is. So I’m looking at Mullvad from the perspective of: if they were evil, what about this solution are safeguard protecting the end users privacy. And my conclusion is they’d still be able to break the users privacy in the same way as knowing the users IP, just without the IP.

Interesting concept. The blog has a lot more details[1].

One comment/question about the exit nodes. Can someone correct or validate my thoughts:

It’s a WireGuard tunnel from the user to Mullvad, so while Obscura can’t see the user traffic, couldn’t the Mullvad exit node see the traffic, and using knowledge of the users WireGuard public key, associate all that users traffic with that key? So even if they can’t associate it with an IP, they could still potentially identify and track you.

This assumes they use a customised version of WireGuard to somehow log & associate each decrypted IP packet against the users public key.

1. https://obscura.net/blog/bootstrapping-trust/

I’d mostly agree with that. After sufficient years have passed. Name isn’t the only way to identify someone.

What’s the stated reason?

And if those transcripts don’t have incriminating evidence, should they still be released?

If they interviewed everyone at that parade, what they were doing etc, and some of those people were completely uninvolved but maybe having affairs, or doing something immoral (whatever that is), then shouldn’t they be afforded privacy? Eg Imagine one would be mortified to have what sex toy was in their pocket at the time documented in public transcript.

Yeah it very much feels like a case of biting the hand that feeds. What’s the long term goal of AO by doing this?

What about the Apple account of the tag itself?

Jersey is in a vastly different geographic situation. It’s super close to UK & Europe, so cost of trade is massively more economical than these other places in the middle of nowhere. Economies of scale work for small countries in populous first world regions.

With the engine issue 1km out, seems plausible the pilot forgot while dealing with that issue.

There’s already plenty of instances of the JLE doors opening out of sequence, misaligned etc. hasn’t stopped TfL from using them.

Yes I acknowledge the differences.

We could still install PEDs with imprecise doors. Ie more doors than required. Larger doors than required. The main thing is for the door to only open while a train is in front of it, and all the train doors be unobstructed.

Ie won’t hurt much to have a PED open to the train wall or opens double the size of the current trains’ door.

Posted on April Fools… intentional or ?

Platform edge doors could be done half-height style without massive rebuilds of platforms. I’ve seen the half-heights in Japan and Malaysia. That also then avoids the need for super precise alignment which is an issue for platforms supporting multiple lines and train types.

None of the above would enable driverless trains. It’d just go towards accident reduction —maybe suicide too, depends on the individual’s determination.

The first thing I thought of when I saw this is that some mid-tier dictatorships could replace a lot of their newscasters with this approach. Can always guarantee they’ll say what they need to say, and a lack of emotion is a plus maybe? Except with the dear leader passes then you bring out a real person for the emotions.

Could also look at something like a RF and IR control hub.

Something like https://www.orvibo.com/mobile/en/product/allone.html

I’ve used it to control window blinds, projectors, projector screens, and even some basic Apple TV commands. Wouldn’t surprise me if it could do the RF used by garage doors too.

Family car, probably lots of accidents due to kids distracting drivers.

Honestly it just shows how poorly executed the changes were in 9, 11, 17 that made it so difficult for companies to migrate.

I expect 1.2 isn’t as bad as going from 1.4 or 8, not as many javax packages back then?

Paper as in stocks. Traditionally stock certificates were printed on paper.

Apples share price has taken a bit of a fall this week.