Wasted my time.

A lot of Windows users woke up yesterday unable to work on their code because some projects would open and immediately crash. Their github is full of reports.

Changing your passwords every so often is important, most password breaches go undisclosed, not all 'crackers' are releasing their findings.

You're plugging it in wrong.

And really haven't looked into this at all, but it seems like there are traditionally two systems of law, criminal and civil, maybe it's time there become "corporate" laws, since a majority of criminal offenses seem to stem from corporate interests. I'd rather see corporate attorneys prosecute these laws then our government persecutors who should be focused on real crimes. I'm sure there are a ton of problems with a model like this, but could a real lawyer break down the pros and cons?

While they advertised their API removal, it was a giant mess as well. They removed almost all the functionality and rather than just remove the API functions from the admin console, they left them still there and made developers go manually switch off the ones they weren't allowed to use themselves. If anything was left on, your calls just wouldn't work.

Clearly it was on purpose.

Oh wait. It's called the CVSS. Only your system admins and security folks will know how vulnerabilities apply to your organization. Temporal and environmental factors and only be assessed by people in the know. Windows shops obviously don't care about Linux vulnerabilities and vice versa. The base ratings are strictly focused on the vulnerability. Other factors you need to determine yourself... And there's already a system for that.

I hope this takes over as the defacto standard for HTTPS. I'm tired of constantly seeing SSL and OpenSSL vulnerabilities.

Isn't that where all the taxes go?

Since everyone had access to it... Seriously, this is why least access principles are so important. Encryption isn't a silver bullet, there is no silver bullet, it's a process, with many layers and technology. You need to do it all, or determined attackers will pick the weakest link.

I've always found mod or post system as a bit of a filter. If I understand the topic at hand I'll usually read through the comments before posting (and if time permits the article too). After reading the comments, if someone else already made the same or similar comments I would have made, I mod them up rather than sharing my opinion. Otherwise, if my points aren't, made I'll join the conversation. I think this system works better then hundreds of "I agree" type postings.

To sell Allen keys at premium at refugee sites.

40 million customer credit cards exposed, 70 million customer records containing PII exposed. 10 million dollar settlement over a year later? This is a joke, and a good reason to not bother with security.

I think I really misunderstood the job posting that said "works with models" then.