appendix-rock
appendix-rock on Hacker News
You’ve taken your own situation and used it to paint a very very broad, and wrong, generalisation.
No. They might trust your professional judgement, and not all professional judgement has roots in academic publications.
Yep. Not that it’s necessarily happening here, but I always…sigh deeply, let’s say, when something that’s described by Americans as “an $x industry problem” is actually ‘an America problem, manifesting in the $x industry’.
There’s a (wrong, very wrong) contingent of people that see computer behaviour varying in any way from what they got used to in 2002 as a nuclear attack on their personal freedoms.
That is not at all what’s happened with shortened expiry date requirements so far. Industry has proven that it can largely put these systems in place.
In the time it took you to write that comment, you could’ve educated yourself on the justification, which has been built over decades of industry experience.
If you were at all experienced yourself, you’d known that the “ceremony” involved in certificate renewal has decreased over the past decade or two, not increased. These set and forget automated systems are a world better than “shit, our cert has expired, and the last person to renew it doesn’t work here anymore!”
I think about my CA an order of magnitude less now than I did 10 years ago. If the goal is to ask sir if you may have some more, how do you reconcile this with this reality? I don’t go to my CA’s website. I certainly don’t give them any money. Can you please reconcile this with your half-baked analogy about church?
Your reasoning is borderline schizophrenic and is certainly largely departed from reality. It can’t be explained away with “tinfoil hat”. It’s utterly naive.
Can i suggest that you please drop the political BS and use your engineering brain to answer your own questions? I’m sure that you’re a smart person that can find it within yourself to think this through, but as soon as someone mentions “freedom” you dig your heels in RMS style.
How about we just turn this around and you can explain to the class how your personal freedoms are being attacked by this trust system not letting you do what you want? Again, this trust system. No part of this is stopping you from doing what you want on your machine. Even iOS (which I have a feeling that you’d never let into your ~basement~ command center) lets you install custom roots. You’re really just getting your knickers in a twist over how others’ machines treat your certs. So how are your personal freedoms being attacked again? Or does this stupid political ideology extend to “nobody wants to sell me what I want to buy, fuck you!”?
Huh? How do you see that this aspect of the PKI has at all changed with this change?
This, combined with your other responses to this thread, makes it very apparent that you’re more interested in asserting your ignorant view rather than actually learning anything. Please don’t bother commenting.
TLS cert prices have crashed to…in most cases, $0, as average certificate validity times have shortened. If there’s any cost relationship at all, it’s the exact opposite of what you’re implying.
If re-signing adds material complexity to your architecture (including the ‘hidden complexity’ of a dev / ops person needing to remember to manually renew a cert every two years) then frankly it sounds like you’ve got larger problems on your hands.
Cynicism doesn’t make you smart.
OpenSSH does it “nicely” for you maybe. I’ll maybe even accept “for most users of an SSH client”. This behaviour implemented in a browser is utterly unacceptable. The average user is orders of magnitude less technically capable.
You are not the only user of the software that you use.
No. Didn’t you hear? There’s zero benefits to working in an office, at all. It’s all lies because of commercial real estate or something. /s
This sounds like some sort of attempt at Ultimate Scope Creep. How did we get from ‘licensing faux-issue’ to ‘a complete rebuild with a very complex architecture just to support the plugin ecosystem’?
I’m sorry that you ran afoul of a CoC or whatever, but this sounds like a real ‘airing dirty laundry’ tangent.
God. Yeah. I’ve always hated #IAMPolicies on Freenode :)
I mean, this thread has itself very clearly turned into some crypto-fetishist fan fiction, completely departed from reality. I guess it’s just what came to mind.
Add several more 9s to that.
No. That is just naive pattern-matching against a hot-button issue that you read a lot about on HN. For both this story AND Boeing, the explanation is more complicated than “outsourcing bad!”
No they wouldn’t. You just dislike Apple.
Still naive enough to buy into the lie that they can just be “left alone to do the REAL work” and a business just…spontaneously appears around them.
I don’t buy this article.
> Clients are often influenced by hype. A few years ago, it was "Linux is a toy." Now, it's "Why bhyve and not Proxmox?" They ask, "How can they sell FreeBSD? There's no AI, there's no Cloud, there's no Kubernetes, there's no blockchain – there's nothing!"
I am very confident that this is more ‘fan fiction’ than the author would like to admit. The sort of hypothetical that someone cooks up on their head to anger up the blood and to then self-soothe by thinking about how much better than everyone else they are.
Why does everything have to be so bloody religious? If you like boring tech, stop politicising it.
Yep. Not rebooting for a decade is in most cases an irresponsible ‘advanced rookie’ move. I’m more than aware of the greybeard-era uptime fetishism. I’ve more than dabbled in it. I’ve typed /exec uptime into my IRC client more times than I dare admit.
But come on…
All that’s been said about security updates etc aside (some of which can be mitigated with that fancy in-place kernel update stuff), If something hasn’t rebooted in 10 years I’m going to be a bit nervous about what happens when it does reboot. If it’s in an uptime fetishist environment, chances are that it’ll be rebooted at a time that’s…inconvenient to say the least. Are you SURE that nothing has changed in that time? Some people are! Moreso than others at least. But that’s extra work, and my bet is most places with these high-uptime machines aren’t putting that work In, or think they are and are doing it poorly.
“Boring” in this instance obviously means some weird tech culture virtue signal. The situations in which Linux isn’t at least ‘just fine’, and a BSD is better enough to justify SWITCHING, are, well, I’m skeptical of the author’s reasoning.
That’s not evidence. It’s as baseless as the other side’s arguments. You’ve just heard it on HN enough times and are parroting it. I assure you that there’s not a person on this website that hasn’t read essentially your exact comment 100 times. OP is saying that one nerd’s reckoning doesn’t constitute evidence.
Americans relating everything back to “freedom” is so jarring for literally everyone else.
> It’s intended to be a safety tool. A way for people in unstable, potentially violent, domestic situations to quickly leave the page.
An upsetting but nonetheless incredibly interesting abnormal UX problem to solve. I appreciate seeing this much thought being put into things like this.
Just a reminder that AI tried pivoting to much more clear-cut legitimate piracy, presumably because they got bored or something, and certainly put ‘donations’ toward that effort.
IA is an incredibly valuable resource, but let’s not put them on a pedestal.
All things that aren’t remotely unique to running your own mail server.
Because language is rarely if ever prescriptive. It evolves organically and without much rhyme or reason beyond “because that’s how things went”. The fact that you think that software neckbeards, err, greybeards, are somehow exempted from that is a hilarious example of ‘tech exceptionalism’ brought to its natural conclusion.