vtlynch

16 ms·

91.
by vtlynch 11y ago
Agreed. Journalism is one job that robots will never replace. Even if software eventually could, what company would write it.
92.
by vtlynch 11y ago
The article mentions this, but its really unbelievably that until recently, at least one major CA was using Flash for their site seal. Incredible how they can justify the security risk and the bloat of Flash in 2015 just so that their logo
93.
by vtlynch 11y ago
>#2 and #3 are just because Google and browser vendors simply limit these things to HTTPS Seems like a pretty real and legitimate reason to me.
94.
by vtlynch 11y ago
>And I guess being a first class citizen of the CA space, which is good because it brings audits, participation and accountability. Just to clarify on your last point. If Amazon wants to issue certificates it has to conform to industry r
95.
by vtlynch 11y ago
>That most of us have times we dedicate to thinking about the things that make us money and times we dedicate to thinking about other things? I'm not sure what's wrong with that. Obviously we don't have the strict control
96.
by vtlynch 11y ago
>They may happen to think about their work during those activities but ,if they do, it's only by accident This says so much about how we think about thinking
97.
by vtlynch 11y ago
Shkreli is indeed referring to the Clan's RZA. Shkreli recently bought the single existing copy of their newest album.
98.
by vtlynch 11y ago
This "article" is a great advertising win for this company. Clearly, independent.co.uk picked this up from another site which probably originated as sponsored content or a press release. >The company started marketing the prod
99.
by vtlynch 11y ago
>so "your" certificate may have 20+ other CloudFlare clients' domains included Just to clarify here, "your" certificate will definitely have around 90 or so other domains listed in it as SANs.
100.
by vtlynch 11y ago
>In my experience, scientists are like extremely junior developers with PhDs. So from your experience, you are assuming every scientist disdains coding and does it poorly, and every programmer is a master at writing clean and working cod
101.
by vtlynch 11y ago
>It's also unique is that when an authority has a hole, breach or is an incompetent actor, it's very difficult to remove them from authority. There is no proof of this. There are lots of systems in place to deal with mistakes a
102.
by vtlynch 11y ago
exactly. thats what makes the parent comment so preposterous.
103.
by vtlynch 11y ago
Is the system problematic? Yes. Does it have room for improvement? Tons. Is it broken? No, I dont think so. I dont think the CA system is unique in having breaches, holes, or incompetent actors.
104.
by vtlynch 11y ago
If an alternative, such as Convergence, was perfect, it would have taken off.
105.
by vtlynch 11y ago
Google distributes Chrome, and it is 100% their choice to determine what certificates they want to trust and how they will do so. Just as its Microsoft's decision to do the same for Windows.
106.
by vtlynch 11y ago
I believe Chrome uses the underlying system trust store but also has its own list that it uses where Google wants to be stricter/do its own thing.
107.
by vtlynch 11y ago
No, its not. This problem detected by a third-party due to a recent industry initiative (Certificate Transparency). Now Google has doled out appropriate punitive measures which will greatly reduce chances of this happening again. The indust
108.
by vtlynch 11y ago
You mean client-side authentication? And how would this have helped.
109.
by vtlynch 11y ago
Stats like that may be available but I can not think of anything at the moment. I will look into that and let you know. >Thanks about the warranty clarification, so it only protects you if the /CA/ does something bad to you? In
110.
by vtlynch 11y ago
No that is not the entire point of a CA. The insurance that the big commercial CAs offer now is a farce. No end user has actually received the money for two reasons: 1. breaches that qualify are often written off by the underwriter as &quot
111.
by vtlynch 11y ago
What types of stats are you looking for? "Different types" meaning different CAs? The warranty is odd. Its required to provide a warranty in certain situations by the CA/B Forum (industry standards body). This is partially b
112.
by vtlynch 11y ago
Yes I'm sure thats exactly the situation lujim was describing
113.
by vtlynch 11y ago
"sold equity to finance their venture." Oh yes, I forgot about the masses of un-wealthy people who have equity.
114.
by vtlynch 11y ago
First of all, there is not "far less personal risk" for employees. If the company you work for goes under, every employee is hurt by that, not just the founder. The founder may have lost more money, but he had more money to gamble
115.
by vtlynch 11y ago
Wow, I never thought of that before! Though it would not protect from factoring because most EV roots are the same key length/hash. For anyone else reading, this works because the root programs give authority to issue EV certs separate
116.
by vtlynch 11y ago
>Now anyone who wants to setup a website, for whatever reason, has to go thru some central authority Which 99% of people already do when the buy a domain name. There is NO evidence that using SSL restricts your freedom of speech. There i
117.
by vtlynch 11y ago
Let's Encrypt's DV certs will be validated the same way that any other CA's DV certs are, so im not sure why this should be the "one place" where its adopted. They are also planning on support CT.
118.
by vtlynch 11y ago
Absolutely pointless and irrelevant. This is the same logic that Donald Trump uses to dismiss all Mexican people as rapists.
119.
by vtlynch 11y ago
But surely their is value in the brand when it comes to customer perceptions about how good Amex support is or how easy chargebacks are. I agree that thinking Amex can be a "status" symbol is foolish unless they really up their ma
120.
by vtlynch 11y ago
I dont think shifting your weight around really counts as movement

More ›