When I rode the train in to work this morning, the app failed miserably when I tried to find the best place to park it in the rail yard. Also, the conductor's goons stopped me from getting to the locomotive.

Hmm... I have a fully updated 10.6.8 (Snow Leopard) box that's been my media server for a number of years - it doesn't get used for anything else, even web browsing (it's an old MacBook Pro with a non-functional screen). Just now I connected to it using screen sharing, opened up Safari and went to the CloudFlare Challenge website. It loaded just fine, with no warnings whatsoever.

I put Firefox on it and went to the same URL - Firefox tells me the certificate has been revoked.

On iOS I get no such warning...

And actually, the default OS X settings don't check revocation lists either. To enable that you need to open up "Keychain Access", go to "Preferences -> Certificates", and set both OCSP and CRL to "Best Attempt".

I do have to wonder if the task was made easier given the purpose of the server. After all, I'd think it wouldn't get traffic at all except for those people responding to the challenge. But, still, this proved it's possible.

So not only do those of us responsible for web servers need to generate new server certs for all of our servers... pretty much every current web server cert in existence also needs to be revoked. Are the CAs even willing/able to do something on that scale in a short amount of time?

Given no one will want to compensate them... how will they live?

As opposed to taking advice from people on Slashdot?

How does he do these tests without electricity?

Wow, that was quite a logical leap you made there! You must be really impressed with that uncited study you're referring to!

There was a study, only about a decade ago, that claimed vaccines cause autism! So make sure not to get your kids vaccinated - vaccines obviously do more harm than good!

The author of this bug and the reviewer of the commit have both been very forthcoming about the mistake. There's little reason to suspect malicious intent in this particular instance.

That doesn't mean the NSA didn't know about it or exploit it, though.

Well, just off the top of my head - if these teachers don't push their students into using Chromebooks, Google will need to find some other method of collecting data and building shadow profiles on those people.

So, right there, you've got a significant benefit to specifically promoting Chromebooks.

No - see the last paragraph in the post you're responding to.

No, they weren't intentional; but, given the submitter was a Harvard graduate, any spelling errors were understandable.

Okay, but we're talking about Kate Mulgrew.

I was thinking more along the lines of "how else will they share pics of whomever they're having for dinner?"

They really need access to Facebook.