Can you seriously imagine a disaster that would destroy all of these locations (and thus all of their knoweledge and infrastructure) entirely and near simultaneously that would also leave any significant number of human survivors such that they'd have a shot at rebuilding society anyway?

My suggestion is that for the first 20 or 30 years after the apocalyptic event; there might be no use for the knowledge contained in those books. People will largely prioritize survival over the preservation of the pieces of their former civilization.

When you are freezing to death.... the materials in old buildings, such as libraries... are attractive firewood

The apocalpytic event may have been a meteor shower that compromised the roofs of all these buildings, so by the time the knowledge is useful in over 100 years --- these places have all been torn apart

That's assuming they even have a vaccine. Ebola has no cure and has a 90%+ kill rate.

Yes.... well.... there have been cases of the Ebola fever in 6 African countries since 1976.

But so far, the survival rate is so low and the death rate so high, that the virus tends to kill its hosts, before the disease can spread much, and the infectious dead bodies have generally been in isolated areas --- thus limiting the spread of the virus so far.

Of course.... in the event of a worldwide infectious disease pandemic, the #1 survival trait to have, would be a unique biology, and (by pure luck) resistance to the infection....

In an apocalypse scenario... those libraries might all burn to the ground, or targetted by insurgents for book burning, so the information could still be lost. How many redundant copies of the information are available to educated people but Protected and adequately vaulted against both natural disaster and human sabotage?

This is solely for the IRS' purposes, to ensure that you cannot subtract losses related to your non-profitable business, from your other income or inflows into your business: in other words, the IRS "HOBBY" definition is for the purpose of maximizing government tax revenues.

Other regulators are not beholden to their position. IRS Will also reclassify as non-Hobby when it is in their interests to do so.

Correct. If your organization engages Geotrust with that service, then you can setup a certificate authority within your own organization chained to their certificate.

However, you have to follow rules that are even more restrictive than what that a CA has to follow with their root certificate, and you have to be audited like a CA.

This is very expensive, and it is not immediately clear: what organizations would be willing to go through the tremendous expenses, and not take the additional few steps to get on the browser trust lists.

It is certainly not something you will see Mom and Pop firms doing. Perhaps some companies in the top 50 of the Fortune 500.

I do care that we've created a pool of privileged drivers who are no longer receiving any feedback when they engage in higher-risk driving behaviors.

I don't think that's true. If they are driving recklessly, they are still going to get pulled over.

"Go ahead and drive as fast as you want; we'll trust your judgement on that until after your first high-speed collision..." probably isn't a real solid basis for road safety.

No. However.... speeding tickets for drivers apparently going 75mph in a 70mph zone are bullshit. There are a large number of tickets that have everything to do with generating revenue for police officers and government, which have absolutely nothing in fact to do with "road safety".

The arbitrariness of "Well.. you gave to these charitable causes" is no more arbitrary than the basis for the speeding ticket in the first place, in many cases.

There are plenty of miscreants engaging in high-risk road behaviors such as tailgating, drunk driving, cutting other drivers off --- turning in front of oncoming traffic, slamming on the breaks for no reason, repeatedly swerving around traffic from lane to lane (with high-risk lane changes directly in front of another driver), that manage to never get any tickets ----- and they don't seem to need special stickers or license plates to get away with it.

I'm not entirely sure they get special treatment. I have heard stories about cops saying they'd pull people over, just because they saw the special license plate frame adornment.

They might get leniency on some offenses.... but they might also be more likely to get pulled over and issued a minor citation

No one really cares about the tickets themselves. For someone making $200k a year, they would gladly pay $200 every week for the right to zip through crawling traffic.

Did it not occur to you that someone making >$200k a year might feel some obligation or desire to contribute sizable amounts to some charities, in order to bolster the community, not because they expect to be exempted from enforcement of the law?

Especially law enforcement, since their expensive cars and other bling put the high-income folks at greater risk of a crime targetting them: the availability and cooperation/assistance from law enforcement is potentially very important to these folks' safety and peace of mind.

If indeed they were speeding to a ridiculous degree, and it was a safety issue, and it caused them to be at fault in an accident --- some silly license plate frame is not going to get them out of it, or protect them from the multi-million$ personal injury lawsuit from the impacted driver.

So which OS that has a large marketshare has never had a privilege escalation bug?

VMware ESXi. (*Privilege escalations within a Windows guest operating system don't count; only, escalations from a lower privileged user, or OS running in the hypervisor, to privileged hypervisor control).

If they refer you a close friend or relative, hire that person on the spot.

This can backfire, if their friend or relative turns out to be a terrible employee, and your business incurs the expense of paying them with little benefit and perhaps net harm...

So what he is saying is you DO get love (aka get out of jail free) if you show the card.

He is implying that you might get some love on a one-off stop; perhaps a warning or a more-lenient ticket.

On the other hand... is donating $2500 to a charity, really worth avoiding a couple potential traffic tickets?

If you're a company that is not a CA, then the intermediate key signed by the CA is pretty much your root key.

If you're a company that is not a CA, then a CA is not supposed to be issuing you a certificate that subordinate certificates can be chained under in any circumstances, in the first place.

For each certificate you need, you apply to your CA and present the Certificate Signing Request to be validated and completed.

The myth that the 'security' industry is at the root of the problem

I would argue: not entirely a myth; while it may be unintentional on the part of players in the security industry (at least ethical ones). Much of security researchers' work can enable and facilitate attackers. Some researchers even SELL exploits, AND attackers may be the buyers.

In many cases... they share too much information with attackers that attackers can use to improve their processes. They also in some cases PROVIDE motive. By giving a media channel for the discussion of the results of their exploits --- this can give publicity to an attack or an attacker, which results in bragging rights or "pride" as a reward for the malicious acts that would otherwise provide negative social connotation to their activities.

6). Revoke the old intermediate certificates as soon as 5 is complete.

I believe the CA/Browser forum and Mozilla program rules require you to do this immediately. You don't get to wait until you've reissued all customer certs; time is of the essence, with regards to the revocation, and failing to do it promptly can get BOTH your intermediate AND your Root permanently removed from the browser trust stores..

That intermediate signing key should be treated with the same level of security you would treat a root key with.

No... the Root key should be designed with physical security safeguards and an airgap requiring multiple authorized humans to conduct each signing.

The intermediates should be used for automated signing needs. When an end user requests a certificate, they require a prompt turnaround.