eMudhra is exiting the global SSL/TLS certificate business and is offering customers Sectigo-issued replacements [ ... ]

...Sectigo? Née Comodo? They haven't always been the sharpest tools in the shed, either.

And our children will live, Mr. Beale, to see that... perfect world, in which there's no war or famine, oppression or brutality. One vast and ecumenical holding company, for whom all men will work to serve a common profit, in which all men will hold a share of stock. All necessities provided, all anxieties tranquilized, all boredom amused. [emphasis mine]

-- Arthur Jensen, Network (destroying his golden goose)

Further viewing.

Elon, Sam, Mark, Peter, et al... You are cordially invited to go fsck yourselves.

The magnitude of destruction you have wrought upon this industry, upon our livelihoods, and upon society as a whole, cannot be calculated, much less excused. You have stolen the corpus of human ingenuity and creativity from its creators without recompense, and now are trying to sell a provably shittier version of it back to us at a markup.

And, let's be honest, this is what you wanted to build -- a barely capable servant who will do your bidding, whatever it is, immediately, without question or compunction. It's extremely telling about your moral compasses that you studiously sat on your hands when your customers were creating graphic sexual imagery of celebrities over their vociferous objections; or impressionable young people (who needed help, not encouragement) were being driven to suicide by your chatbots; but "torturing" a memory block of neural net constants is somehow the bridge too far?

I repeat: Go fsck yourselves.

I have a wildcard cert from LetsEncrypt, which I install on all the services on my home LAN. However, because it's a wildcard, LetsEncrypt insists that I prove domain ownership by updating some DNS TXT records. My DNS provider doesn't support automated updates to TXT records. So ACME won't work, so I have to do that bit by hand.

Next, I have to distribute the cert to a handful of local services, including pfSense, TrueNAS, Postfix, the Unifi Controller (extra annoying, because Java), Forgejo, and probably a couple others I've forgotten about. None of that is automated, either. It hasn't been so painful that I've bothered to write scripts for the process, so I get to do a little SSH dance every three months.

"Deploy your own!" Couple of issues there: 1) Everyone treats self-signed certs as suspicious, so they're inappropriate for Postfix TLS; 2) Every time I've tried that, Firefox and/or Chrome complain about some obscure feature not being what they expect. The latest headache had to do with OCSP stapling, which has to be turned on -- oh, whoops, now it has to be turned off... Bleah. LetsEncrypt certs Just Work, so I haven't revisited building my own CA.

This "new" site is part of a larger effort by that slob to kneecap or compromise US government Web sites, and steal your personal data.

I first read about the effort here: https://thedreydossier.substac...

Yesterday, she took a look under the hood of America.gov, and yes, it's as bad as everything else the DOGE vandals have been doing: https://thedreydossier.substac...

Up until this point, government Web sites were designed, built, and maintained by the agencies responsible for that government service. For example, if you wanted to apply for or renew your passport, you would go to state.gov, which is run by the US Department of State, which is responsible for processing applications for and issuing passports. No other department has lawful jurisdiction over passports.

From the point of view of the law, that's still true. But the slob, without anyone's permission, kluged together passports.gov. This site was built and is run by the White House's "National Design Studio," completely outside the law and without any independent oversight. The State Department was not consulted and has nothing to do with it. Further, the site is filled with third-party trackers, analytics, and some custom code that copies every page you view, including form contents, to an unknown third party.

Oh, and the guy leading the National Design Studio and in charge of building these fake sites? He's Joe Gebbia -- cofounder of Airbnb. Read both articles for more details.

In short, you should treat America.gov as a malware site and stay well away from it. Under no circumstances should you feed it any of your personal information.

what's the point?

The point is to be able to use your hardware in the manner you deem appropriate, and to ensure it is not doing sneaky shit behind your back.

If, instead of a Playstation, we were talking about rooting LG televisions to run custom Linux builds stripped of pervasive privacy-violating code and "apps," I suspect your opinion might be rather different. (And no, when the entire industry has turned to the Dark Side, voting with your wallet doesn't work.)

But the purpose of the stop was not enforcement of the vehicle code.

"When there is not probable cause to believe that a driver is violating any one of the multitude of applicable traffic and equipment regulations 24 -- or other articulable basis amounting to reasonable suspicion that the driver is unlicensed or his vehicle unregistered -- we cannot conceive of any legitimate basis upon which a patrolman could decide that stopping a particular driver for a spot check would be more productive than stopping any other driver." Delaware v. Prouse, 440 U.S. 648, 661, 99 S. Ct. 1391, 1400 (1979)

In California, as I suspect in most states, the driver is required to produce a license and registration when being pulled over for a traffic stop.

California Vehicle Code 12951(b) states: "The driver of a motor vehicle shall present his or her license for examination upon demand of a peace officer enforcing the provisions of this code."

Since the vehicle was not involved, the stop would not require a license to of produced. Of course, the cop would lie and make up a reason.

You are conflating a consensual encounter with a detention.

No, when they decide not to show up or release someone that they should have detained.

Read Terry v. Ohio | 392 U.S. 1 (1968) and Hiibel v. Sixth Judicial District Court of Nevada (2004) 542 U.S. 177

I have reported crimes, but LAPD refused to make arrests.
I had a cop argue with me and tell me that I was not authorized to have an arrest made because I was a building manager. I had to explain real property law to him.

In many states, there is no requirement to show ID unless arrested. In other cases, there still has to be reasonable suspicion (the Terry standard).

Detaining someone for 1 second without reasonable suspicion violates the 4th amendment. Pulling someone over is not a consentual encounter, but the officer is probably trained to turn it into one. Extending the stop is unconstitutional. See Rodriguez v. United States, 575 U.S. 348, 135 S. Ct. 1609, 191 L. Ed. 2d 492 (2015),. I suspect that even a diminimus extension would be unconstitutional. So, a false report could be argued a civil wrong, even when causing a deminimus delay.

The "might be armed?" might not be a crime. The defense would argue that there is a possibility and argue that it might not meet the standard of reasonable doubt. But in a civil case, it could meet the preponderance of the evidence.

How much would you like to bet that Flock's lawyers told them what exactly to say when calling the police?

ok so maybe a little general knowledge helps...

This looks to me like a copy and paste from the a USA legal team to the UK... why ?

the USA courts routinely ask for backups from ANYWHERE in the world and even when they are encrypted they appear to use standard tools to decrypt

when you consider the number of American FISA (Foreign Intelligence Surveillance Act) requests to APPLE number over 500 and cover over 77,000 USERS

this starts to look a little silly and if I was to guess the legal team at Apple pushed back knowing that if they did not the rest of the world would all start this...

the USA agencies routinely takes requests and executes on them but "extracts its pound..." for doing so... the the UK pushed using their own laws and got given the run around...

have fun...

https://www.apple.com/legal/transparency/us.html

https://www.reuters.com/article/world/exclusive-apple-dropped-plan-for-encrypting-backups-after-fbi-complained-sour-idUSKBN1ZK1CO/

Iovine, the music executive and Dr. Dre's partner in Beats by Dre, [ ... ]

...Yeah, thought so.

Sony MDR-V6 forever, dudes...