Any security measure will have a gap.
Yes. But some safety measures will have lower probabilities of bad things happening than other safety measures. The fact that it is always possible for bad things to happen has no bearing on the fact that some safety measures are more effective than others.
The effectiveness of a measure of course has to be balanced against its cost and impact.
Not only do they see that message, but the alert pauses the loop that keeps loading the pages.
Well, the acronym for Socialist In Name Only is "sino".
Writing.
I had no idea Mesopotamia was part of China.
Say, a $10 tax credit if you submit your poll receipt? Or maybe civic minded companies could provide incentives: Starbucks gives you $2 off your next purchase with a voting receipt?
Quite a few companies do this. There are a bunch of places where you can get a free cup of coffee if you show your "I Voted" sticker.
in Australia, you turn up to the polling station (usually a local school or whatever), go to the desk and tell them your name. they look it up in their lists of voters, and cross your name off. Then they initial and hand you your ballot papers which you take to a private voting booth and fill out. Then you fold them and drop them into the ballot boxes (one for the house of reps, one for the senate). done.
In the last few elections, the Australian Electoral Commission (an independant govt body who have the responsibility for running elections) have been mailing out helpful voter cards with your name and IIRC your address on it which you can show at the desk. These cards are completely optional, you can still vote if you forget to bring it or have lost it or never got it, and you still don't have to show any ID.
Incidentally, this is how it works in the state of New York. Except it's a scannable, bubble type of form, so you don't fold it, but rather feed it into a little scanner that then drops it in a box.
Wait. The fourth one (ID card) is the thing you're applying for. So if you can't drive, you have to have a passport? What are the documentation requirements for a driver's license?
This is the most dangerous time in my living memory to be an American citizen.
So, born after the Cold War ended, then.
As I understand, in the US you get to choose one from two candidates (unlike in my country where there are 20 or so parties etc you get a lot to choose from in the first round). What if both choices are bad?
Well, that's very complicated. What people and parties are listed on the ballot is essentially controlled by the individual states. The two major parties and all the minor parties essentially agree internally (usually with public voting, though) what people we be on the ballot under that party -- so for them, it's actually that what parties are on the ballot is controlled by the individual states. Rules very by state, as does success, so the ballots are not consistent from one state to another. (So yes, a minor party could be on the ballot in some states and not others.) In my opinion, this is all for historical reasons.
In practice, in most states, there are actually quite a few Presidential candidates on the ballot. However, for a lot of reasons, it's very rarely the case that anyone other than the major two parties' candidates have any hope of winning. Slightly more likely is that one or two minor parties act as "spoilers" that draw a small but significant group of voters away from one of the major parties (see: Green, Libertarian, Tea, Ross Perot). So functionally, there are two candidates, but the ballot actually has quite a few entries.
It can only disclose information within the web server process. If you're serving static web pages, is there any security-relevant information about the server within that process?
How is it not a real cert? Qualys indicates the cert on the HTTPS site is issued by GoDaddy.
Static pages for a personal site work fine. Lack of SSL means heartbleed didn't touch my server.
Heartbleed is a data-disclosure vulnerability. If you're not using SSL and you purport to host only pages that contain no sensitive or private information whatsoever, then what would Heartbleed--if it affected you--even disclose?
I'm okay with reducing the man-in-the-middle attack surface to such a small group.
I'm going to guess that the proposal to adopt HTTPS for Federal websites does not apply to an individual's personal SMTP and IMAP servers, even if they're used for Federal business. Just a guess.
Her webmail did appear to use HTTPS.
If only there was some method of validating that party on the other end of a connection is the party you want to contact instead of a man in the middle.
Never test for an error condition you don't know how to handle. -- Steinbach
