He walked through the exit. That means he left the secure area. Theoretically, he could have grabbed something that had not been screened, and taken it back in. that's why it's such a no-no - nothing or nobody that has not been screened is supposed to cross that line.

... in Australia?

You do have the option to disable these apps, however. My phone came with a bunch of Google Play Music/Games/News shit I don't want, and Google+ stuff. The apps are all disabled, now, excepting a few that I do use such as the actual Play store, gmail, etc.

My very first sentence included that. "You need to have a network service listening that passes data to bash" though I suppose your DHCP client isn't technically listening.

That sounds right from the things I've been reading since.

If you DO use those headers to pass things to your code (eg cookie handling with the Cookie: header)... bad stuff can happen there when you go to use the cookie later on in the script.

You need to have a network service listening that passes data to bash (or arbitrary shells, though that would be far rarer). For example, an Apache HTTP server using bash as a CGI to process requests.

In general this is a bad thing, with a few exclusions for items that require it by their very purpose - for example SSH.

Note however that in the SSH example, the 'passing-stuff-to-shell' is post-authentication - so if they can exploit it, they can already log in as you anyways and do what they want.

Really? Operational security is a concern for you on a daily basis? Foreign states might try to coerce, corrupt, or disappear you?

The mantle is available, as well. We don't dig very deep.

It's not just the science. If you don't see that yourself, I don't know how to make you see.

That's the question I ask myself, and I don't have a satisfactory answer. I use the proprietary drivers.

Yep, unless you've got one of a quite small list of well-supported cards. Those are not so powerful these days, but if you've got one then you're still worlds better off than with an Intel.

I've tried... two ATI (back then) cards, one I never got to work, and the other found all sorts of interesting ways to crash and malfunction. Have to admit I haven't tried again since - the devil you know and all that.

Working with a complex scene in Blender with a Intel "graphics" is about as fun as rubbing sandpaper in your eye.

HTTPS, as a protocol, seems fine. The flaws seem to have been specific implementations of the protocols, or with their algorithms (reminder that HTTPS is modular in that regard).

Annoyingly, my astigmatism makes me see three of the damn things for every one - that wavelength seems to pass right through my glasses without any refraction.

Obligatory linkage.