Mandatory military service, too. You have to imagine that the US would have a similarly disproportionately-scaled cyber-warfare industry if it also had mandatory military service and good sorting of capable people into those units.
This is the one case I don't mind it. Suggested responses feel like they cheapen human interaction, but here I'm talking to a robot that really does tend to know what I want next, and also is highly unlikely to be offended by a less-than-heartfelt response.
The suggestions in the box where I put my text push me out of flow. Bad enough it says “want to do X?”, but when it’s in my own text box it screws me up. It’s not more efficient. It actively makes things worse for me.
This seems like a really good example of Base CVSS scores not telling us much on their own.
For the Wordpress RCE (nominally CVSS 9.2), it looks like many standard deployments of WordPress would be affected, barring extra mitigations. But in the case of these Hugo ones (9.3), it looks like very specific circumstances (anti-mitigations, if you will) are needed. E.g. running arbitrary builds of untrusted user content without a sandbox; running it in a GitHub workflow against PRs from untrusted contributors, etc.
Parler was "ripped off the Internet" because it was delisted from app stores and dropped by AWS for violating their ToS due to having (If I remember correctly) approximately zero content moderation, which is not really compatible with the mainstream distribution model they wanted. The owners were not subjected to sanctions by a foreign government.
That part seems to qualify as an unsolved problem. But could anyone have taken the scanned data (or the GIF file) and used it to open a bank account in your friend's name? That seems like the main issue that is genuinely solved by correct implementation of this type of system.
Already today nobody can open a bank account in my name with just a picture of my passport, as the original would be required. My passport doesn't have any of the "eID/CAs/ZKP/PKI", so the question of "what exactly the addition of it solves" remains open.
My national ID card supposedly has some of it, the 17-year olds who want to pass as 18-year olds usually show a doctored gif file of their ID card, with a year of birth one or two years before the actual one; this works in ~98% of the cases.
Actually it does. Biometric passports (and IDs) have a chip which is read via NFC and the information the NFC provides is signed by a CA which is the government that issued the passport. ICAO compiles a database of public keys corresponding to each government (plus countries exchange their public keys via bilateral agreements). Unless somebody is doing purely visual inspection, any time a passport is scanned there's PKI involved to validate if the information is genuine.
Private entities get to use whatever name they want. In this case, there is the option to use the longstanding name that matches the one used by the other neighboring territory. Or to have a wait period after the name is changed unilaterally by executive order, because it'd be silly to change it back and forth. Or to put "a.k.a..." after it. Or to wait for the relevant government to update its own map and geographic names database first (https://edits.nationalmap.gov/apps/gaz-domestic/public/searc... is not yet updated as of now). Or to wait until local signage can be updated so it mostly matches the map (though I don't think Rochester will be in a rush to do this).
Being overly trained on comments in documentation could be one of the reasons why Claude models write frustrating comments (which often manifest as written justifications of how the code satisfies the prompt). A comment in a tutorial is going to be geared to explaining how the code relates back to the tutorial task or restating what the code does, rather than documenting the "why" of surprising code.
I have a long-held feeling with Trump that his most ardent haters don't hate his specific policies, merely that he's so gauche about it, that he has no class.
I have no doubt that Ben-Gvir has a similar segment of haters in Israel. They want the same things, but they don't want to do it in the style of a leering hooligan fishing for a fistfight.
From what I can see, most people hate trump as a solid bloc. The fact that he, as every populist everywhere in past centuries, pointed out to some real problems but didn't do a squat about it when he came to power and in his case massively worsened the situation, is hard to escape from. He certainly didn't rise above other populists in this.
His form is just a tiny cherry on top of very big rotting cake. Make form smooth and underlying crap won't change a bit. Hating trump ain't emotional, purely rational approach is sufficient.
Definitively not a solid block. It's tempting to believe that, but no, John Bolton probably hates quite different things about Trump from you (and definitively from me). A lot of the opposition both outside the republican party and inside (such as it is), is probably entirely fine with bombing Iran for instance. Not mad he's bombing it, mad he's bungling it.
> I have a long-held feeling with Trump that his most ardent haters don't hate his specific policies, merely that he's so gauche about it, that he has no class.
A bit of an extraordinary belief to hold, to be honest
reply