It's been a decade and a half. Just because a person knows how to compile a kernel doesn't mean they can't also be a Luddite at the same time.

Well that escalated quickly.

These points are all flawed, and if I thought you wrote them, or even understood them yourself, I'd bother writing a full rebuttal.

Not half as violent as allowing obsolete approaches and flawed architecture to remain out of some weird combination of concern for backwards compatibility and sentimentality.

Python 2 users were supported for more than a decade after 3 came out, and there was a LOT of migration tooling released. CIOs may not want to be forced to upgrade too often, but if they think upgrading once every 10 years is too much, then they need to quit and get into something more aligned with their expectations. Perhaps blacksmithing.

They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

The email wasn't even too good to be true. The nasty phishing emails are the ones where the recipient is supposed to get a real email on the topic, but it's because of a publicly known event and outsiders could easily make up the content, so they just need to find a bunch of likely recipients.

I think the "you've been assigned the mandatory phishing training" emails should come from an external sender and contain a link to get into the extended training, and you should only get the short refresher by finding it through verified sources. Not only would this be a good placement test, it would test that official communications are actually hard to fake and possible to verify using the process in the training.

"In response to the embarrassing data breach that hit the news recently, we've assigned every employee at the company an online training session about phishing at this link. By sure to take it immediately, because it's a legal requirement for our settlement and delays could affect your employment." --Russian Hackers

Man, I'd love to be that blissfully ignorant and naive.

You know, there just might be ways to structure our society so that businesses can be profitable without destroying the whole planet. But I guess that's commie talk.

Holy idiotic assumption from hell batman. And a huge side helping of whatabboutism garnished with the biggest lump of straw man I've ever seen.

That's a SHITLOAD of stupid in one reply. I'm honestly impressed.

Also, MBA don't violently protest, but they absolutely DO lobby government to send in the military to do their bidding. Which as far as violence goes is worse than a riot.

Broken politics, a destroyed environment, debased social fabric, and a degenerate business culture prove his point.

Yes, the planet will eventually recover from our damage. That doesn't help us if that process takes a million years. We need working biosystems now, not in a million years.

Also, you're a fucking retard.

Why the fuck can't we root out this sort of ignorance? It's dumbasses like you voting for dumbass policies that has landed us here. You should not be allowed to vote.

lol. Every time someone points out that the USA is just as much of a repressive propagandist as China, some guy gets butthurt and jumps in with some highly specific thing that apparently makes it totally different.