• 2 Posts
  • 288 Comments
Joined 1 year ago
cake
Cake day: July 5th, 2023

help-circle



  • Realistically, I would grieve the loss of my children, who would never be born if I didn’t line things up just right to cause them to happen again. I’d spend more time with my parents, who are getting along in the years, and I’d make the most of my time with them while they’re healthy and happy.

    There are a few specifics where I’d try to get some loved ones out of trouble before some critical tipping point that would later cause a bunch of heartache and stress.

    There are general things about money and politics I’d probably do differently, knowing about how stocks have performed and what not, but that’s not super interesting to me, because I’m mostly content in my personal life (including my career) and wouldn’t want to upset that balance by doing anything too different from what brought me here.


  • Well they can pay compensation to people who do work for them: employee salaries, contractor work, etc. So the nonprofit structure might prevent them from paying dividends or stock buybacks or other ways of transferring directly to shareholders in their capacity as shareholders, but nonprofit structure alone isn’t a guarantee that the organization won’t steer excess cash into someone’s pocket.

    No reason to believe this is true of this non-profit, but that’s the reason why it’s important to look at the books of nonprofits that you donate to.






  • I don’t think this question really makes sense.

    DNS is centralized in that there is a root zone that determines who is the canonical authority for each top level domain like .com or .world (and the registrar for each top level domain controls who controls each domain under them). But it’s also decentralized in the sense that everyone who controls a domain can assign any subdomains below that, and that anyone can choose to override the name resolving with their own local DNS server (or even a hosts file saved on the device).

    The court case here is trying to override the official domain ownership records at specific DNS providers. The problem is that the intermediaries are being ordered by the courts not to follow the central authority.

    Federation wouldn’t fit this model: we still want DNS to be canonical where everyone in the world agrees which domain resolves to which IP addresses.





  • It’s just a type of injury. Injuries themselves don’t give you a right to sue, you have to be injured by someone else doing something wrong.

    Can I sue for blindness? Yes, if someone caused my blindness in a way that they’d be liable for. Same with other injuries like broken bones or lost employment or embarrassment or paralysis.

    So if someone drives drunk and hits you with their car, paralyzing you and causing loss of enjoyment of life, you can sue them and would have to prove liability (they caused your injury in a way that causes them to have to pay for it) and damages (the amount of money they owe you based on how injured you are). Something like loss of enjoyment of life would be part of the second part of the analysis.


  • I’m not going to pretend to be an expert on this (I worked in cybersecurity in 2000’s but was only entry level, and changed careers before cloud/mobile made things way more complicated), but the general point still seems true: security requires conscious design that discourages poor configuration by client IT, and makes bad practices unviable by not only end users, but also the sysadmins who manage the actual IT resources. Then, things should be limited in impact.

    In other words, the manufacturer doesn’t get to wash their whole hands of this thing if their design makes it easy for clients to screw up. In this case, it does sound like these systems were deployed by clients that didn’t have a solid understanding of the relationships between on-prem AD and ADFS and didn’t know how to configure them securely, that’s also a significant documentation/education issue that Microsoft owns some responsibility for.

    (Plus in the case of the Solarwinds hack, there were a few other Microsoft vulnerabilities exploited to get to the point where the hackers could traverse the system looking for keys/certificates.)

    So I don’t think this particular dude was warning about a non-vulnerability, and it sounds like the “security boundary” response he met with internally is similar to how you’re responding to this report.