typically inside sovereign nations not at war with the US
In the case of Yemen, it's with the permission, and sometimes the assistance, of the host government, which doesn't control that area where the drones are used. In Pakistan there appears to be at least tacit permission. In Afghanistan, well, there's a war on.

In all cases, the law in the US (AUMF and others) allows it.

If Boeing was interested in getting people into space, more than a handful of them would be there. The fact is that it has taken a company that was outside of the system, with a tiny fraction of Boeing's funding, to make more progress than Boeing has.

And of course it's in the U.S. interest to make sure the Russians have an active and completely up-to-date source of rocket engines for their nuclear missles.

In this vein, I wonder what it is we are paying the Chinese to do?

T-Mobile is losing money. Something in the $100m/year range.

And cloned cards were a major vector of fraud in the Target attack.

From Page 3 of this:

The C++ STL, with its dyslexia-inducing syntax blizzard of colons and angle brackets, guarantees that if you try to declare any reasonable data structure, your first seven attempts will result
in compiler errors of Wagnerian fierceness:

Syntax error: unmatched thing in thing from std::nonstd::_ _map<_Cyrillic, _$$$dollars>const basic_string< epic_mystery,mongoose_traits < char>, _ _default_alloc_<casual_Fridays = maybe>>

internet providers are obliged to keep records of users' access for six months
Nothing like making it easy to build the list of links for an ISP by putting all the data in one place. Bet it's online accessible, too.

I rate this troll as Adequate.

Snowden is a hero, and now he is working to support Russia's effort to protect its people in Ukraine! Soon the Russian Army will complete the liberation of the Russian nationals in Ukraine and all with the help of Snowden! He has tremendously boosted the Russian security services! He is hero to the world!

I think we need to take a serious look at the "many eyes" theory because of this. Apparently, there were no eyes on the part of parties that did not wish to exploit the bug for close to two years. And wasn't there just a professional audit by Red Hat that caught another bug, but not this one?

I have to say I'm even less confident in the plan to couple it to DNSSEC.

Sure. We're better. But we need to be even better than that.

I'd say more than just the "community". We have a great many companies that incorporate this software and generate billions from the sales of applications or services incorporating it, without returning anything to its maintenance.I think it's a sensible thing to ask Intuit, for example: "What did you pay to help maintain OpenSSL?". And then go down the list of companies.

OK guys. We've promoted Open Source for decades. We have to own up to our own problems.

This was a failure in the Open Source process. It is just as likely to happen to closed source software, and more likely to go unrevealed if it does, which is why we aren't already having our heads handed to us.

But we need to look at whether Open Source projects should be providing the world's security without any significant funding to do so.

Jeff, I'm sorry that you're paying more. I'm envious that your state is implementing single-payer, though! California considers and rejects the bill every session, so far.

MVP itself is not-for-profit. Interesting that they think the pool in the two states they focus on is now that much more expensive. I can't imagine why.

Thanks

Bruce