They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

The email wasn't even too good to be true. The nasty phishing emails are the ones where the recipient is supposed to get a real email on the topic, but it's because of a publicly known event and outsiders could easily make up the content, so they just need to find a bunch of likely recipients.

I think the "you've been assigned the mandatory phishing training" emails should come from an external sender and contain a link to get into the extended training, and you should only get the short refresher by finding it through verified sources. Not only would this be a good placement test, it would test that official communications are actually hard to fake and possible to verify using the process in the training.

"In response to the embarrassing data breach that hit the news recently, we've assigned every employee at the company an online training session about phishing at this link. By sure to take it immediately, because it's a legal requirement for our settlement and delays could affect your employment." --Russian Hackers

I agree with you but there are different types of travelers. I'm still trying to figure out where I want to retire, so local stays make sense. But not everyone wants to experience a location as a local does, some people just want everything taken care of with 0 effort on their part.

The Howard Hughes Corp is still around. Eccentric billionaire, hands into several different sectors, unachievable promises, suspicious government contracts, all the similarities. Howard Hughes Corp does different things now compared to back in the day, but large corporations with physical presence rarely disappear completely.

Trump is the nastiest of vengeful dirty old men. I don't think there's conclusive evidence of pedophilia however, and harping on that takes away from all the shitty and horrible things he has undisputably done.

We went through the immigration process under K-1, then adjusted status to a permanent resident. No lawyer. Many people have done this and there is information out there how to do it, but it can be outdated, especially in the current era. There wasn't a great "here's the overall workflow" back when we did it, and their probably isn't now either.

The forms have instructions, and if you read carefully (together with all reference documents) it isn't too difficult. But I'm a contract guy, most people likely will have difficulty. It would be nice for them to have an official place to ask questions and have all the relevant forms and instructions considered together.

For a more "routine" example, the forms to apply for or renew a passport for a minor are a huge pain. Not all the required documents needed to be brought to an appointment (minor passports must be applied for in person) are listed in one list as of late last year. You have to go deeper into the state department website than you probably should have to. They should just fix all forms which are confusing or have incomplete instructions, but having generative AI assist the user is probably a lot faster to implement.

It's not stealing if you take a little bit from a large number of people.

Must be amazing living in a place where unexpected traffic accidents never cause delays.

Most full-service restaurants will have things on the menu which are just there as an option for an audience who doesn't want their core offerings. The Sysco truck makes this very easy- take a recipe (from Sysco) and they will bring the ingredients right to you. I wouldn't expect Joes Crab Shack to have great pasta, some menu items are just minimal effort to satisfy picky eaters in a party of people coming for your specialty options.

GFCI outlets, which are required outdoors and in garages in most places, often have issues with backfeeding. Mine won't handle it and I had to install a different outlet.

Doing it in software means you can move CPUs from one machine to another based on the time of day. Your CI infrastructure can lose some resources from its UI at night and make another server for nightly builds when most of your users are away, without either having a VM layer in between or needing the builds to happen on a kernel configured with the features needed by the UI.

And the weather. There is a limited amount of pleasant temperate climate in the US and California has a big chunk of it.

You might be surprised. Louisiana is an industrial facility powerhouse, probably just behind Texas in terms of manpower depth for a facility like this.

The real issue is that the packaging process used to create vaccines in quantity is a process where you mix a tank of mRNA with a tank of other stuff and get a tank of lipid nanoparticles. Getting different mRNA in each dose means you only get one patient's vaccine per time you start and stop the machine. There's also a step where one copy of mRNA is used to make a macroscopic quantity of copies in a bioreactor that needs to be flushed in between different sequences, but can just run when making enough of the same thing for a large population. It's likely that the cost for each different sequence will come down if it's worth designing and building equipment that switches every dose, but there's an intermediate time between proving that the treatment is useful and being able to provide it in a cost-effective way.

It's clearly all the superfans who hear that there's a new album and immediately drive into their local record store. (Rather than doing the sensible, calm thing and entering the store on foot.)