They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

The email wasn't even too good to be true. The nasty phishing emails are the ones where the recipient is supposed to get a real email on the topic, but it's because of a publicly known event and outsiders could easily make up the content, so they just need to find a bunch of likely recipients.

I think the "you've been assigned the mandatory phishing training" emails should come from an external sender and contain a link to get into the extended training, and you should only get the short refresher by finding it through verified sources. Not only would this be a good placement test, it would test that official communications are actually hard to fake and possible to verify using the process in the training.

"In response to the embarrassing data breach that hit the news recently, we've assigned every employee at the company an online training session about phishing at this link. By sure to take it immediately, because it's a legal requirement for our settlement and delays could affect your employment." --Russian Hackers

I fly 200ish flights a year so figure 70-80 nights away.

2025 was 100% hotels but 2019 was about 80% Airbnbs.

Airbnb will never get my business back. Ever. The professional scammer hosts are so good at finding a way to nail me for a fee. Iâ(TM)ve taken perfect check out video and still had to spend hours fighting fees.

Airbnb allowed making guests do it.

They lost so much money to hotels theyâ(TM)re banning hosts from requiring it.

I just wanted to let you know that you have successfully driven me off of /., after some 25 years.

Not just you, obviously, the site has been in steep decline for a long time, but you were such a huge asshole that you managed to be the last straw. So, congrats for that. I won't be back.

More like 99.99%. Maybe need some more nines in there. Large C codebases without regular critical CVEs are basically nonexistent.

What bankruptcy-prevention actions are they asking for?

Is that on top of the 30% federal tax credit?

15-25 kWh drawn by the utility is quite a bit! I hope they're paying him well for that.

They're bringing outside scrutiny into their processes; that's going to slow them down, too.

Not "at the same time". You're conflating what AI can do now with what it will likely be able to do in a year or five, or 20.

Amodei and others are worried about what AI that doesn't yet exist may do, not about what current-generation AI can do. AI is getting better, very quickly, and unless there's some blocking obstacle that no one has been able to identify will at some point become far, far smarter than humans, individually or collectively. So before that happens, we need to figure out how to make sure that superintelligent AI wants to help us, and wants to do it in the right way.

Is this actually a substantial amount of energy? I'm in Utah (Rocky Mountain Power) and RMP also pays me to use my batteries... but the amount of energy they draw is tiny. 8-10 times per week they draw on my batteries, but it's like 4 kW peak draw (my batteries can sustain 20 kW), and generally for less than 30 seconds, so in any given week I'm only contributing like 0.2 kWh. As I understand it, this is because RMP uses my batteries not really to "serve loads", per se, but just as grid stabilization; brief backfill to keep the voltage from sagging.

Obviously my batteries do serve *my* loads, which reduces the load on the grid, but that's not what RMP pays me for.

Does CA make heavier use of residential batteries to feed the grid?

And JD Vance called him Hitler. Trump accepts changes of heart as long as they include sufficient groveling and self-humiliation. SBF's problem is he doesn't currently have any money, and doesn't have a lot of friends to put up cash for him either. If SCOTUS will overturn his fine on a technicality and he can get some or all of that money back, then he'll have the cash to buy a pardon. Obviously he needs to get it done in the next 2 years, four months.

The fact that you're unwilling to pay the incredibly low price of attaching even a pseudonym to your statement speaks volumes. Not even by mentioning it in your AC post.

You should read the actual words you quoted. I answered the question asked... then you responded saying "it's obvious they were asking a different questions". What a dipshit.