If you live here (and wfh), you ski on the days when it's kick-ass, and that's a lot of days. It only sucks if you have to ski on the snow that's there the week you have to travel to ski; that's why Colorado used to be better (I hear they've had some bad years recently).

Your disk is signed. USB devices are not automatically trusted, and do not automatically get DMA access. DMA is done through an iommu.

How does the user validate that the change did not compromise the hardware?

The sad fact is that you do have to trust somebody. That somebody could be Canonical, or it could be Apple. But if you trust Canonical, you also have to trust whoever makes the software you're running Ubuntu on. So now you have two companies you're trusting. If you trust Apple, you are trusting one company. And unfortunately in practice we actually have no way of validating whether or not these companies are trustworthy. This is a really nasty problem.

How do you differentiate between a legitimate repair and an evil maid "repair"?

That you are okay with this and want devices that prefer repairability to security means that you aren't the customer Apple is targeting with this marketing campaign.

Do they really? [citation needed]

This is bad UI design. What you want is to fail if security is compromised. You don't offer a warning. You just fail. As soon as you start offering warnings and bypasses, you've created an attack surface. And yes, the typical end user will succumb to the attack. So if you want to be elitist and watch your users get pwned, sure, put in a bypass. Otherwise, make your software fail safe.

If your computer is ever taken by the TSA, and you care about them accessing your files, you should just recycle it.

It doesn't have to be one or the other, you know. Yes, this works out well for Apple. If you have a problem with that, you either have to give up on that security feature, or get some new regulations passed (good luck with that!) that constrain the markup companies are allowed to charge for doing repairs, such that you stop feeling like it's a problem that you can't get an aftermarket repair.

Yes, it's really that hard. The T2 chip prevents the evil maid attack. Put a switch in, and you've re-enabled the evil maid attack. You can have protection from this attack, or you can have repairability. It's a crappy choice. If you prefer repairability, you have options.

Oh believe me, I have. I've tried several. But I used to work for a small company with no cafeteria, and we ate a lot better. It took a little longer to get to the food, though, and cost more. That's what I mean when I say it's an attractive nuisance. :)

The big argument in favor of this in Silicon Valley is that the food you drive to isn't close by, and there's two car starts and the associated fumes, so it really makes sense to have these cafeterias in Silicon Valley. And to be fair, the neighborhood under discussion here is not an organic neighborhood with existing good food like you'd see in New York, and when I worked in that neighborhood back in the late nineties, it was a virtual food desert unless you like sandwiches. So I get why this is happening. But the influx of well-paid employees actually could seed an ecosystem of good restaurants and services, so I'm really sympathetic to the supervisor's position, despite that I doubt he's going to succeed.

Hm, well, speaking from experience, the corporate cafeteria is more like an attractive nuisance. It's good enough that you don't bother to go out, but not as good as what you'd get if you went out. And because everybody is doing it, if you don't, you stand out, which a lot of people aren't comfortable with.

I don't think this ordinance has a chance in hell of passing constitutional muster, but I actually think the idea behind it is good. Sometimes the only way to get the right result for individuals is to have a collective norm.

Yup, the reason reddit is the third most trafficked site on the Internet is that it mostly doesn't suck. I don't mind buying reddit gold to kill the ads; hopefully they won't get rid of that in their quest to monetize my eyeballs. If they do, oh well, it's not like reddit would be that hard to replicate.

Huh, you haven't paid much attention to weather forecasting recently, have you? It's downright spooky how good it is. It's not 100% accurate, sure, but if you bet against the weather report nowadays, you're much more likely to lose than win.

As for research can't show us how much CO2 and other gases affect the climate, that's not at all true. The physics aren't that complicated. It's not the effects of CO2 that's in question—it's the capacity of the rest of the system to absorb the captured heat, and the amount of time it can do so before it stops being able to.

Unfortunately solar panels are less efficient when they're warmer. When we lived in Tucson, our panels generated more power in the shoulder seasons than in the dead of summer.