No Whole Foods here.

Less than 50 listed for all of North America, that's hardly a counter-argument.

Yeah, and if enough people start trying to pay in tulip bulbs, and if they reeeeally believe...

I couldn't believe Victoria's Secret takes bitcoin, and sure enough they don't. They take gift cards.... that can be purchased with bitcoin. Which is exactly what the parent was arguing, "I can exchange BTC for my local currency and then go about my business, but that's about it."

Things get more interesting with the second category: "non-personal" information, which is any user data that isn't associated with a specific individual. We're talking about details like customers' jobs, real-time location, habits, and the like. That data, the company says, is collected anonymously. Apple has free reign to share, sell, or store it however it damn pleases.

Just because Apple hasn't explicitly tied a name to the information doesn't mean it's anonymous. Even a fragment of the location data is enough to identify most people.

The point is no longer "What $COMPANY does with the data it collects", though that might be unsettling on its own, it's what the NSA (or any other data aggregator) can do with it.

They're not providing any value, they're summarizing a release announcement -- and the only things they left out are three bullet points that are just version number bumps for major apps/libraries in base.

Surely the same criticism came up during the alpha? I know I gave almost the same complaint (minus the Digg threat) in the survey, and other than being a bit more feature complete, the layout looks almost the same.

You're looking in the wrong place.

The public-key algorithms are only used to auth servers/clients and during the negotiation of a session key for a symmetric algorithm. Thanks to the BEAST and CRIME attacks, and the dismal uptake of TLS 1.2, once you rule out the block ciphers in CBC mode the most secure symmetric cipher that clients/servers can be expected to support is RC4, which now accounts for some huge percentage of HTTPS traffic.

Nobody is suggesting that RSA is broken, but there is speculation that the NSA has broken RC4.

You CAN run your own identity-provider, but good luck using it anywhere. OpenID and OAuth are federated standards too, but most "relying parties" only accept a handful of major providers.

I just bought a new Thinkpad. I went with Intel hardware because I know they put effort into Linux driver support. Guess I should have looked a little closer.

I installed Ubuntu 13.04 and immediately ran into an ethernet bug (yes, fix released, but not actually available in the distro yet) and a wireless bug (looks like it might have been fixed, then unfixed, but it's hard to tell. It's broken now, anyway.) ... And that's leaving aside how the touchpad behaves worse under Linux, or how I have to screw around with kernel boot options for decent power management (that will still be worse than Windows.)

The kicker is that these are the same problems I've been having for years, every time I try to run Linux on a laptop, despite the huge advances that have been made. It feels like one step forward, two steps back.

Maybe next year...

Not to mention with access to a privileged account the malware becomes substantially harder to remove.

Research doesn't bear that out. Multitasking reduces efficiency, interrupts and context switches hurt. If, for your specific workload, you find it's a net gain... well, more power to you. It's not one-size fits all.

That's the point. 'My way' allows my coworkers to decide when they can be interrupted. 'Your way' allows people to demand focus.

It probably varies by job and by person. I find it helpful to talk with my coworkers, but a distraction to overhear them.

A mailing list, irc channel, xmpp muc etc. allows me to collaborate on my terms. I can rethink and edit my response, and if I'm in the middle of something I can read it later and respond then. Conversations typically don't work like that.

It doesn't?

Client support is a bit spotty (iOS Mail.app didn't support it, stock Android client doesn't either, alternatives like k9mail do), but that doesn't mean it's not there.

I don't think that's entirely true.

Since... iOS 5, I think it is, Apple maintains a signing window for devices. Assuming you never have any problems with your phone, you can keep using iOS 5 indefinitely. If you ever need to restore the phone though, I believe you will be forced to update to a current version of iOS.

I hadn't thought of that, that seems much more likely.

If the infections are targeted, perhaps the font is dropped to allow found printed documents to be linked to one of the targets?

Not that they're total shit from a security POV? (warning: pdf)