I see he's trying to win back Republicans after putting 5G in their COVID vaccines.

If the system is designed so that a couple of routers in one spot can make it necessary to ground everything, the design is bad.

For me, the bigger question is who the fuck authorized replacement of network equipment in the middle of the day? When I worked on an FAA contract, we had to perform even basic software updates overnight.

Saying they need $50B stat is wild when it clearly wasn't done right the first time with however much was spent so far.

Indeed. If this really was a network issue, there is already a contract well under way to replace FTI with FENS. But if the story about the L3Harris contractor is true, then the problem was human error. If Mr. Duffy wants us to believe it takes $50 billion to fix human error during maintenance that shouldn't have been approved to be done during the day in the first place, then maybe he needs to spend more time in the Real World.

There is still a colloquial difference between the use of "hacker" and "security researcher". A "hacker" usually refers to someone who puts the exploit into active use to gain unauthorized privileges on machines they do not own. Hackers generally don't disclose the vulnerabilities to anyone else, especially the publisher, because that would prevent future use of that exploit. A "security researcher" is someone who finds vulnerabilities using equipment that they own and then discloses it. While it's considered responsible to disclose the vulnerabilities privately to publishers, it's also considered responsible for publishers to pay the advertised bounty so that researchers have an honorable way to make a living from their findings rather than resorting to selling them to parties with sinister motives. Nightmare Eclipse claims MS didn't pay some bounties, so now he's making them pay in other ways. As bad as you and the OP may perceive that, it's still far more honorable than selling the vulnerabilities on the dark web.

Those unpaid bounties have paled in comparison to the continuing cumulative effect of his findings. Microsoft has tens of billions in cash and still refused to pay this person. It's proving to be one of the most boneheaded moves Microsoft has recently made, and that's really saying something.

The problem is that Nightmare Eclipse has a unique style of privilege escalation. While most hackers attempt to find weaknesses in the code, such as buffer overflows, reuse-after-free, and timing attacks, he often finds creative ways to combine the use of normal features of privileged Windows components to create a novel exploit. I don't know if AI is as good at finding these types of exploits because they require a lot more ingenuity. In addition to that, they're harder to develop a long-term fix because they rely on the valid use of Windows components. If those components aren't critical, you can easily mitigate the issue by disabling them, but in an OS as crusty as Windows, who knows what downstream effects you'll experience.

I don't know about that - this guy seems pretty easy to compromise. If I was a leader of a rival country, I'd rather him at the helm than most other options.

I need to buy a leather jacket!

Yes, you should use certs. That way when a hacker gains access on an admin's device, they can access everything on the network.

You realize you can just lie about all of it, right?

Not if they require verification with the only option being SMS.

sudo lynx https://www.faa.gov/

One of my favorite parts about using AI instead of StackOverflow is that I don't have to justify my request to a bunch of pompous people who pretend they know all of the details of my requirements and that I'm an idiot for wanting to do something a particular way. AI will often have some great alternative suggestions if it questions my proposed implementation, but at the end of the day it gives me solutions to the exact scenario I specified.

Trump's order effectively serves two purposes:

• - Shows which oligarchs are willing to put themselves on leashes for him
• - Projects more power for Trump than the law actually bestows

Under normal circumstances, it would be entertaining to watch the world's richest and most powerful people utterly humiliate themselves just for the opportunity to gain a little more wealth and power. However, the fact that their capitulation bolsters Trump's power robs me of all enjoyment. Power can't be taken without being relented. If people come to believe that Trump actually has the power to do things that the law doesn't allow, they won't resist being robbed of that power.

The whole thing is nothing short of amazing: you can be worth more than a trillion dollars and it still can't buy you dignity, autonomy, or self-respect. They've completely enslaved themselves to greed and I have zero sympathy for them since it's a choice they continuously opt to make. Keep dancing, puppets! We can't enjoy it now, but we can put it in the vault and laugh at you after all of this shit finally blows over.

I'm pretty sure I can't just go climb up on traffic light support arms and install my own cameras without some kind of legal authority - why can these guys?

Because you didn't get the local police department to agree to ToS which one party can change on a whim to say whatever they want after you initially agreed. I have no idea what their ToS actually state and I'm not sure anyone in the police departments do either. Who wastes the time to read what I imagine is 20+ pages of legal documents written to be purposely difficult to understand and can be changed whenever one party of the agreement wants?

We all thought the road to fascism would paved via authoritarians handing over power in pay-to-play schemes (and there's certainly been a lot of that in the past two years) but another avenue is for private organizations to fuck over the government using the same means they've been using to fuck over private citizens. These companies are effectively writing their own legislation with no oversight and no legal recourse other than "take our latest terms or leave". Eventually they're going to push the wrong people too far and get what they deserve, but they've been pushing for a surprisingly long time with virtually no repercussions.

Retirement? The guy worked at IBM for nearly 30 years and ended employment in the 90s - he was very likely collecting a fat pension on top of those fat contractor paychecks. And healthcare was far cheaper then as well. This guy definitely wasn't hurting.

It is typical behavior for American companies to do whatever they want regardless of the laws. The worst they'll suffer is a fine that is often less than the cost of complying, and much less when you factor in the opportunity cost incurred by the inevitable delays caused by complying. In most cases, you'd be better off saying "no" to data centers, although that would get in the way of your data sovereignty ambitions. Before allowing projects like this, you need to realize that American companies are not going to comply with your laws unless you dramatically increase your penalties first.