Then they should limit themselves to that. If one guy hands another money and the second guy gives the first guy a nondescript envelope, the peace has not been broken at all. But you better believe the cops will be questioning you about it in intense detail if they see it.

It's a pretty straightforward ban on free speech. The supposed purpose of a permit on public land is to allow for appropriate planning on the government's part for the added crowd, avoiding conflict with other people's free speech when they have an event (by making them not happen on top of each other), and making sure the non-speech activities are legal (no smoke ins, narcotics sales, etc). That's all it is supposed to be. A permit that restricts speech is unconstitutional on it's face.

Really, it depends on the environment. If you have servers in a lights out environment rather than 24/7 on-site staff, less moving parts is good.

It's a shame if where you are asking HR to do all of their job is too much, especially with employees identified as security sensitive.

If the machine normally doesn't need to allow ssh, you can always choke it down to a pair of very reliable admin servers (Perhaps atom based systems with no moving parts) that authorized users can use as a jumping off point using the ssh-agent (so that the admin servers contain no private keys).

This is WAYYYYYYY beyond lobbying. This is a state AG committing state resources to a private business vendetta.

Arguably, by publishing on Twitter, a medium well known for re-tweeting being normal behavior, you have implicitly granted permission.

If HR fails to notify IT to remove an account for someone who has access to root in any way, the same problem happens. That's why I leave it accessible through RSA authentication.

That same old script would have worked if you used sudo or an IP KVM.

That's why calling someone a 'suit' is not a complement.

This. When the dress code gets strict and the SciFi posters and paraphernalia come down, the company is sinking. When I see that happen at a vendor's place of business, I start looking for a new vendor.

However, because the state itself is filing suit, it is claiming ownership of those annotations. That's fine, but the state is not permitted to hold copyrights because it is a body of the people.

So, either Georgia owns the annotations and so they're free for all or Georgia does not, and so has no standing to sue.

Set PermitRootLogin without-password

Then control access with authorized_keys. If someone leaves, remove his key from authorized_keys.

Next step, laugh at the 'hackers' wasting all that effort trying to guess the root password.

Less than 1% is an understatement. You haven't even shown that it's more likely than a moose related fatality or a deer attack. (look up man killed by moose and see how many hits you get despite the extreme unlikelihood of the event).

Even when you do see a fatality related to a stalled car, it's a car that wouldn't re-start and where someone got out of the car.

I will point out that if we're down to the range of inconvenience being enough to justify a risk, we're already far away from the screeching about being extremely irresponsible that started this thread. It's very likely the author accepted a larger risk of an accident in the process of going to see Valasek and Miller than he did during the test.

Apparently we do considering all the multitasking devotees running around with an effective IQ of 80 or less.

And experts in security have been warning them repeatedly that something like this was inevitable for many years.