The right way to do this is to hire a group of developers and have test volunteers report workflow problems - then FIX them - then iterate. That's the point of choosing an open source solution.

Eventually there would be no problems remaining.

But so many possible scenarios exist that it's impossible to guess what happened here.

PS _NSA_KEY

There are apparently other unpatched vulnerabilities that are known but 'too busy':

It sounds like this fix got done because it was 'accidentally' posted as a public PR.

https://github.com/tianocore/e...

Yeah, the threat actor would need a foothold on the PXE network, which is a private VLAN (or better) in the competent case.

That's why we worry about APT's and such.

Granted, you'll find people on certain cloud providers who do far too much on a public IP.

What if someone has fifty windows open with fifty tabs each?

Asking for a friend.

Solid effort - good job.

It's a bummer if any of the employees got rug-pulled but many of the best employees will strike out on their own, form new companies with working conditions they value, and likely hasten Skydance's demise.

nah, a RS code can correct a tiny bit of loss but two metadata copies can correct a bad sector or even track if you're lucky.

Different requirement spaces.

The idea this guy has might make embedded devices slightly more long-lasting.

They usually have quantity one of a cheap storage part and a bad block in the wrong place could brick the whole thing.

It would only be useful in the case where maybe the build is 12MB and the chip is 16.

Most vendors won't ever pay extra for this.

I suspect the people who hate it don't have problems it solves.

Maybe a very basic home laptop is fine with SysV today and they don't want to learn anything new.

Personally I've been able to retire thousands of lines of scripts I'd written to handle complex things with many edge cases and ugly devops modules that are no longer needed with more recent releases.

There's just no userland interface to many of the events it can respond to and it's not easy to write a new C++ daemon to handle each need that comes up.

At this point it's largely a functional API to kernel events in the way I use it. That's the DOTADIW perspective for me. I still have services call my scripts where it doesn't handle what I need. It would be crazy to ever expect it to handle everything.

But just because I need to handle complex things at scale sometimes doesn't mean everybody else does. If I want to run debian with X11 and emacs and you want to run Devuan with Wayland and vi, you'll get no argument from me.

Who has time for drama these days?

This discussion on their inclusion in Mozilla is quite revealing:

https://bugzilla.mozilla.org/s...

Elsewhere it's claimed that they used a FIPS HSM to generate their keys.

I did not see who their auditor was.

Did eMudhra lie?
Did the auditor lie?
Are FIPS HSM's backdoored?
Do we have another Dual_EC_DRBG situation on our hands here?

If nobody is lying we could have just seen a huge cyberwar or false flag averted. Essential crypto gear could be totally buggered still.

PS Remember when Mozilla gave CACert absolute hell for years when they were tremendously more competent?

I don't think I have ever had or have any device that does ethernet over HDMI.

>"5. Mandatory network connections. TV won't work unless it is connected to the internet. "

That is the only problematic one.

My TV, like all the previous ones, is a display. It is connected to a single HDMI cable. I don't give a F about anything else. I don't use audio, I never connect network, or anything else.

I simply won't buy a TV that requires a network connection (or includes one inside out of my control). I assume many others would feel the same. And if this starts to be a thing, I will do my best to educate everyone I know why it matters and why they shouldn't buy that model/brand.

Cry me a river.

Comcast/Spectrum just bought Cox. And my Cox bill is already over $200 a month for BASIC cable, downsampled to just 720p, at a low bitrate, and 300Mbs down internet for one person. And that is with their best "loyalty" discounts. So yeah, I am right on the edge of dropping cableTV, especially since the only reason I have it is because of love TiVo. TiVo is essentially dead (I still have service, but they don't sell boxes anymore). Cable TV has always been very hostile to cablecard devices, and they keep hiking prices more and more for worse service and content. It won't be long now before it goes bye-bye for me as well.

Coax/cable modems really suck when it comes to reliability. So yeah, that "fiber to home" part they are missing really does matter now. Crap, even if it was Ethernet from the pole to my house that would be much better. Numerous times I have had to get them out here, with great difficulty, to fix their crap on the poles so I can get a proper signal. Amplifier issues, water in their equipment, improper signal balancing, interference from stuff in other homes ruining things, etc.

>"It may just be me but I don't want ANYTHING to do with Elon Musk. "

It isn't just you. If you want to be an ideologue, that is your right as a consumer. And that does have power. Me, I prefer to look at what is being offered and decide if it is a service/product I need/want/like. Generally, more competition in this market would be a good thing. I have no great love of any of the current carriers. T-Mobile was my favorite for a very long time, but they have been kinda sliding downhill now.

I thought we lured them all onto Facebook then ran for the hills?

Maybe the jacket has a kevlar fiber for support?

Of course they would do that.