Someone already did - the Comodo CA hack issued a cert for addons.mozilla.org

Don't forget that the automatic untrusting in Windows doesn't affect browsers with their own CRLs which ignore the OS, like, err, Chrome and Mozilla, those needed to be updated separately.

it's basically impossible to get out of debt by declaring bankruptcy, the way you can in the US.

Not true at all. I'll use the UK as an example because that's what I know. When starting in business you simply create a Limited company And Limited means limited liability. So the company can be sued for debt, but your exposure as a director is limited to the amount initially invested (most typical), or the amount you guarantee when you take on directorship.

Personal bankruptcy works much like the US with a credit history ding for six years, and debts written off after a year.

our agency simply couldn't hire interns and pay them nothing anymore. So no we hire Externs. Change one letter and now their work is Free

Interns -> Externs is two letters. No wonder the patent office is fucked.

Microsoft is only attacking WebGL because it competes with their interest.

Does it compete with John Carmack's interests? Doubtful, but he agrees

I agree with Microsoft's assessment that WebGL is a severe security risk. The gfx driver culture is not the culture of security.

.

My employer uses Iron Mountain and their onsite shredding servers. What happens is a truck comes out with what looks like a huge vacuum cleaner pipe and hooks it up to the bins. The paper gets sucked up and is shredded at that point on premises (each bin takes about 10 minutes to process) before making it into the general container in the truck, and then is taken back and shredded some more. So, for paper, the authorities would need to get the materials before it's collected.

It sounds familiar, it's almost based on Kim Cameron's seven laws of identity and claims based authentication.

His list was

• User Control and Consent - where the user can stop information flowing from the identity provider to the system asking for it.
• Minimal Disclosure for a Constrained Use - if a system needs to know if a user is over 21 then send true or false, not a date of birth
• Justifiable Parties
• Directed Identity
• Pluralism of Operators and Technologies - standardise it, and let everyone play
• Human Integration
• Consistent Experience Across Contexts - a client side app, no more changing login pages depending on where you are

It's interesting reading, but CardSpace, the sole implementation of this, isn't being pushed any more.

Who says it has to be the banks own software? Have a standard way of reporting PC health, and then prompt to let it report to the bank. It could be signed so known signatures of software the bank trusts could be validated, but you couldn't fake it out with software of your own.

This is already built into Windows, kind of. Network Access Protection won't assign IPs until the results of a health check is sent. If the health check fails machines can be switched to a segment which only allows access to the corporate update servers, so users can update the OS/AntiVirus and then resubmit.

My final concern: how will my word processor know the difference between an abbr. and the end of a sentence (so it can stretch the sentence for me)?

Given that we're not on typewriters any more, where two spaces after a sentence terminator came from, why does it matter? Proportional fonts, automatic full justification will vary the spaces between words to make the margings align.