I'm waiting for Bruce Schneier's final take on this.

Right now he is throwing up his hands and saying "WTF?"

https://www.schneier.com/blog/...

And now I try to imagine all the brainpower wasted on getting a handle on how git sees things rather than using the best tool for the job at hand.

Or you could start using Mozilla NSS (mod_nss). Not only independently written, it also aggressively protects private keys unlike any version of OpenSSL/SSLeay does.

All this episode does is to remind us that security is hard. Encryption is even harder.

About three thousand like-minded individuals are wondering why this article was conceived and assigned to someone to write for ANY reason and why whatever that publication happened to be, why did they feel the need to publish this drivel?

ACARS may have been turned off, but the radio interface used by the ACARS system was still pinging.

The article does not make it clear that the satellite signals in question are those of ARINC's ACARS data system, developed in 1978.

ACARS

The CANDU reactor program got it right decades ago and keeps getting better, but since it's not from the US, and has the false reputation of promoting nuclear proliferation, the US is not interested.

CANDU also, unfortunately, has a politically-fueled false perception of promoting nuclear proliferation partly because it was falsely accused to have aided the Smiling Buddha program (that was CIRUS, not CANDU, but who's paying attention?).

Oh, there is that unavoidable 1% tritium release rate, though.

It is not "coal sludge." It's coal ash slurry.

Did the OP even read the article? Even TFA refers to the flood as consisting of coal ash slurry.

There is no such thing as "coal sludge," but there is "coal slurry" which is something entirely different from coal ash slurry that allows transport of coal through pipelines in a very expensive process.

This is cool but let's not delay commuter rail and subway construction.

Yeah, I agree, but many folks' computers with checkbook software are also used for lots of other uses, including games. My opinion of SELinux still applies.

Thanks for your thoughts.

I would have recommended the excellent Lindows/Linspire, then gOS, but, oops, they've been forced out of existence.

After that I gave up.

Simply put, gaming and the security model enforced by SELinux, just don't mix. The whole idea of SELinux is to provide fine-grained control to system resources. You can't have that and expect acceptable gaming performance. The specialized way that Miles' uses memory is just one example. The modern "direct" graphics drives are another.

How to solve this? Simple. Don't play games on your security assets. The security provided by SELinux isn't really intended to protect your checkbook from buffer overflow attacks.