Apple is the best of the bad, Google is slipping and breaking promises and as usual, the carriers are making squishy sounds in the slime pit.
But since the entire concept of the free market depends on well educated consumers, the FTC should make the market stronger by forcing them all to state the service life up front and stick to it. For the good of the market.
But the devices won't last forever, so that's not what is being asked of vendors. Support as long as the hardware can reasonably be expected to last in significant numbers is a much shorter period of time and probably not so much of an ask.
If they don't want to commit for that long, perhaps they should advertise their product as disposable.
Your brother in law was killed by hitting a moose TWICE? Resilient fellow, isn't he?:-)
We all take 'unnecessary' risks daily. Is the food network horribly irresponsible for encouraging me to use a sharp knife? After all, if I just buy the frozen dinners I need not expose myself to the minuscule risk of a fatal injury. Some of those psychos even suggest a blender! I could order the frozen dinners online to avoid the risk of driving to the grocery store.
The government was not asked to give him a microphone. The promoters did that. Meanwhile, he was never at the park.
The KKK and Neo Nazis march all the time with permits in hand because the government DOES have to let them. They are often jeered by bystanders when they do.
And then the cops will snap the leash, the dog will bark, and they will claim that means you have narcotics on you. Then off to jail you go, having never breached the peace.
This happens because they 'happen' to know that selling narcotics is illegal, not from any function of maintaining the peace.
As long as we're being pedantic, Pepper's Ghost is actually limited 3D. If you move your head, you can see around obstructions in the projected image. It's more 3D than a 3D movie is.
If the court that wants him is part of the government that blatantly violates the 1st Amendment, he may be justified in questioning if his other rights will be honored should he appear.
Like it or not, once the government starts sliding down the slippery slope, those questions become justifiable.
Then they should limit themselves to that. If one guy hands another money and the second guy gives the first guy a nondescript envelope, the peace has not been broken at all. But you better believe the cops will be questioning you about it in intense detail if they see it.
It's a pretty straightforward ban on free speech. The supposed purpose of a permit on public land is to allow for appropriate planning on the government's part for the added crowd, avoiding conflict with other people's free speech when they have an event (by making them not happen on top of each other), and making sure the non-speech activities are legal (no smoke ins, narcotics sales, etc). That's all it is supposed to be. A permit that restricts speech is unconstitutional on it's face.
Really, it depends on the environment. If you have servers in a lights out environment rather than 24/7 on-site staff, less moving parts is good.
It's a shame if where you are asking HR to do all of their job is too much, especially with employees identified as security sensitive.
If the machine normally doesn't need to allow ssh, you can always choke it down to a pair of very reliable admin servers (Perhaps atom based systems with no moving parts) that authorized users can use as a jumping off point using the ssh-agent (so that the admin servers contain no private keys).
If HR fails to notify IT to remove an account for someone who has access to root in any way, the same problem happens. That's why I leave it accessible through RSA authentication.
That same old script would have worked if you used sudo or an IP KVM.
This. When the dress code gets strict and the SciFi posters and paraphernalia come down, the company is sinking. When I see that happen at a vendor's place of business, I start looking for a new vendor.
However, because the state itself is filing suit, it is claiming ownership of those annotations. That's fine, but the state is not permitted to hold copyrights because it is a body of the people.
So, either Georgia owns the annotations and so they're free for all or Georgia does not, and so has no standing to sue.
Less than 1% is an understatement. You haven't even shown that it's more likely than a moose related fatality or a deer attack. (look up man killed by moose and see how many hits you get despite the extreme unlikelihood of the event).
Even when you do see a fatality related to a stalled car, it's a car that wouldn't re-start and where someone got out of the car.
I will point out that if we're down to the range of inconvenience being enough to justify a risk, we're already far away from the screeching about being extremely irresponsible that started this thread. It's very likely the author accepted a larger risk of an accident in the process of going to see Valasek and Miller than he did during the test.
I don't think the idea that hackers might have excessive fun with a computer controlled system is such an obscure thought to have in the 21st century. Especially since they have been REPEATEDLY warned in public and in private about the risk for over a decade.
This wasn't just ignorance, it was WILLFUL ignorance.
Hey, look out for that piano! It's about to fall on your head!!! MOVE!!!...RUN FOR YOUR LIFE!!!!!!!!!!!
(5 seconds later) CRASH! Well, to be realistic, how could he possibly have anticipated a piano falling on him?
It wouldn't be so bad if they would place a proxy between the critical systems and the infotainment such that the critical systems were effectively read only (so long as the proxy was a separate box that NEVER accepts commands from the infotainment side), but HEY, what's a few fatal brake failures when they can save 5 bucks?
During post, the keyboard lights will tell you if the BIOS did/did not get far enough to reset the keyboard controller or enumerate the USB tree (depending on the keyboaard). I have seen some BIOS that will output diagnostic info deliberately on the keyboard lights if it can't get video up.
It's enough that answering A and B shouldn't be considered wrong.
Apple is the best of the bad, Google is slipping and breaking promises and as usual, the carriers are making squishy sounds in the slime pit.
But since the entire concept of the free market depends on well educated consumers, the FTC should make the market stronger by forcing them all to state the service life up front and stick to it. For the good of the market.
But the devices won't last forever, so that's not what is being asked of vendors. Support as long as the hardware can reasonably be expected to last in significant numbers is a much shorter period of time and probably not so much of an ask.
If they don't want to commit for that long, perhaps they should advertise their product as disposable.
Your brother in law was killed by hitting a moose TWICE? Resilient fellow, isn't he? :-)
We all take 'unnecessary' risks daily. Is the food network horribly irresponsible for encouraging me to use a sharp knife? After all, if I just buy the frozen dinners I need not expose myself to the minuscule risk of a fatal injury. Some of those psychos even suggest a blender! I could order the frozen dinners online to avoid the risk of driving to the grocery store.
That's because it gets shoved in there by the OEM and can't be removed without rooting the phone.
Doubtful. People doing password guessing attacks don't use an actual browser to do it.
The government was not asked to give him a microphone. The promoters did that. Meanwhile, he was never at the park.
The KKK and Neo Nazis march all the time with permits in hand because the government DOES have to let them. They are often jeered by bystanders when they do.
I presume your sig is meant ironically?
And then the cops will snap the leash, the dog will bark, and they will claim that means you have narcotics on you. Then off to jail you go, having never breached the peace.
This happens because they 'happen' to know that selling narcotics is illegal, not from any function of maintaining the peace.
As long as we're being pedantic, Pepper's Ghost is actually limited 3D. If you move your head, you can see around obstructions in the projected image. It's more 3D than a 3D movie is.
If the court that wants him is part of the government that blatantly violates the 1st Amendment, he may be justified in questioning if his other rights will be honored should he appear.
Like it or not, once the government starts sliding down the slippery slope, those questions become justifiable.
Then they should limit themselves to that. If one guy hands another money and the second guy gives the first guy a nondescript envelope, the peace has not been broken at all. But you better believe the cops will be questioning you about it in intense detail if they see it.
It's a pretty straightforward ban on free speech. The supposed purpose of a permit on public land is to allow for appropriate planning on the government's part for the added crowd, avoiding conflict with other people's free speech when they have an event (by making them not happen on top of each other), and making sure the non-speech activities are legal (no smoke ins, narcotics sales, etc). That's all it is supposed to be. A permit that restricts speech is unconstitutional on it's face.
Really, it depends on the environment. If you have servers in a lights out environment rather than 24/7 on-site staff, less moving parts is good.
It's a shame if where you are asking HR to do all of their job is too much, especially with employees identified as security sensitive.
If the machine normally doesn't need to allow ssh, you can always choke it down to a pair of very reliable admin servers (Perhaps atom based systems with no moving parts) that authorized users can use as a jumping off point using the ssh-agent (so that the admin servers contain no private keys).
This is WAYYYYYYY beyond lobbying. This is a state AG committing state resources to a private business vendetta.
Arguably, by publishing on Twitter, a medium well known for re-tweeting being normal behavior, you have implicitly granted permission.
If HR fails to notify IT to remove an account for someone who has access to root in any way, the same problem happens. That's why I leave it accessible through RSA authentication.
That same old script would have worked if you used sudo or an IP KVM.
That's why calling someone a 'suit' is not a complement.
This. When the dress code gets strict and the SciFi posters and paraphernalia come down, the company is sinking. When I see that happen at a vendor's place of business, I start looking for a new vendor.
However, because the state itself is filing suit, it is claiming ownership of those annotations. That's fine, but the state is not permitted to hold copyrights because it is a body of the people.
So, either Georgia owns the annotations and so they're free for all or Georgia does not, and so has no standing to sue.
Set PermitRootLogin without-password
Then control access with authorized_keys. If someone leaves, remove his key from authorized_keys.
Next step, laugh at the 'hackers' wasting all that effort trying to guess the root password.
Less than 1% is an understatement. You haven't even shown that it's more likely than a moose related fatality or a deer attack. (look up man killed by moose and see how many hits you get despite the extreme unlikelihood of the event).
Even when you do see a fatality related to a stalled car, it's a car that wouldn't re-start and where someone got out of the car.
I will point out that if we're down to the range of inconvenience being enough to justify a risk, we're already far away from the screeching about being extremely irresponsible that started this thread. It's very likely the author accepted a larger risk of an accident in the process of going to see Valasek and Miller than he did during the test.
Apparently we do considering all the multitasking devotees running around with an effective IQ of 80 or less.
And experts in security have been warning them repeatedly that something like this was inevitable for many years.
I don't think the idea that hackers might have excessive fun with a computer controlled system is such an obscure thought to have in the 21st century. Especially since they have been REPEATEDLY warned in public and in private about the risk for over a decade.
This wasn't just ignorance, it was WILLFUL ignorance.
Hey, look out for that piano! It's about to fall on your head!!! MOVE!!!...RUN FOR YOUR LIFE!!!!!!!!!!!
(5 seconds later) CRASH! Well, to be realistic, how could he possibly have anticipated a piano falling on him?
It wouldn't be so bad if they would place a proxy between the critical systems and the infotainment such that the critical systems were effectively read only (so long as the proxy was a separate box that NEVER accepts commands from the infotainment side), but HEY, what's a few fatal brake failures when they can save 5 bucks?
During post, the keyboard lights will tell you if the BIOS did/did not get far enough to reset the keyboard controller or enumerate the USB tree (depending on the keyboaard). I have seen some BIOS that will output diagnostic info deliberately on the keyboard lights if it can't get video up.
It's enough that answering A and B shouldn't be considered wrong.