I hear ya. I canceled spotify because of it, because all i wanted was to hear my stuff i consciously subscribed to and only then, when i am in the mood, i want to explore. But no, ya at the hand of what they think is best. And now Youtube does the same. The entire industry is ripe to be disrupted. Wishful thinking. I hate it all. Haha.
Though, from a technical point of view it is top. Always working. Always crisp.
(on linux you always have the update-ca-certificates command that downloads the root certificates from a trusted™ source. but sure, it will not help, if each command starts to bring their own ca package :)
Exactly, so the title wrongly frames git as trusting certs that it shouldn't, when it's correctly trusting the system certs, and MacOS is wrongly trusting certs.
The problem is macOS has two system CA stores, keychain and /etc/ssl/cert.pem.
That is unequivocally bad, similar to Java which ships its own keystore.jks and many applications shipping its own copy on top of that. True nightmare fodder.
The thing is Apple used to do this correctly. Back when they still shipped OpenSSL (albeit some ancient version), they had actually patched OpenSSL to do cert validation against the native keychain and only ever had Keychain as the source of truth. You can see this in https://github.com/apple-oss-distributions/OpenSSL098/blob/O...
And curl was patched to use the native TLS implementation (SecureTransport) which obviously used Keychain as well.
For some reason when they switched to LibreSSL everywhere they decided to ship their own copy? I don't know what they were thinking.
> keystores in every single container, nested keystores within that
At least for that, in $OLDJOB I went and created a new keystore.jks myself to account for an internal CA, so my successors can just update that file, restart the containers and that's it...
It's also an indictment of Apple's relationship to open source software. Never mind contributing back to upstream, they haven't even made the change in their own fork to support their own keychain.
Yes, and that makes not dealing with this issue worse on Apple's part. If MacOS' setup somehow doesn't allow untangling a (still deemed trustworthy?!?) root certificate issued by eMudhra from the broken intermediate certificates, then revoke that whole chain including the root & accept collateral damage.
Failing that just provides an incentive for apps to do their own chain-of-trust implementations. Which like you said is not the way to go.
That is not the criteria of banning a party. There is the Verfassung or constitution. If you work towards the abolition of the constitution, then you will get punished.
And that AfD is against the best interest of the people, i guess, you can not be serious. It is a populist party that picks up all the things that people are not happy about and are popular, but ignored. It is actually in the very interest of the people who vote for them. But of course scary for the people, who get voted out. Majority wins.
Who is to judge? From my perspective i see everyone else walking in a wrong direction. And from theirs probably me plus everyone else. The outcome will only be known in the future. The system adapts. For some it works, for others it doesnt. That's democracy. Got to live with what is maybe not in my interest, when other people vote for their own and are a majority. That's why people leave countries and hopefully find other places.
I guess it depends. Ordered a phone last month. Returned it because of bloatware. Waiting to this day for the refund. And support line says: please wait, nothing is wrong. While the website says, we need more details.
Machines allow the city to become bigger. Cars are machines. To move stuff. And big machines like buses, trams, subways, planes can move at batch speed. But fail on granularity.
I would not say, cars are bad. For me they are the cells that bring the oxygen, to use another analogy.
What is missing is organization to avoid clogging. And i dislike the noise and the danger one has. This can be done all better.
In cities cars have no reason to exist. You can combine better scalable public transit (light rail, subways, trains) with bikes/scooters and you get best of both worlds. Have been living in one for years without a need for a car.
I agree overall, with the caveat that it really depends on the infrastructure available and sprawl. I had flown in to a city late at night, and all the subways and busses had stopped for the night. My only option was a taxi or stay at the airport.
There are many things like moving furniture or even larger amounts of groceries that are infinitely harder without a car.
And then there is also the question of the environment on that public transport. IME "good enough that complaints remain manageable" seems to be the target here unlike a car where you can have private entertainment and air conditioning (not to mention sufficient ventilation) to whatever level you wish.
And even for relatively frequent public transit routes you end up wasting quite a bit of time waiting. Even more so if your start and destination don't happen to be close to the same route.
You don't need to move furniture every week, so you can always rent a van for that. Using a car for the 500m to my nearest supermarket seems a bit silly, but these days our groceries are delivered to the front door.
All of this is a matter of how you design your cities. Some have been designed so you have no choice but to use a car, others have been designed so you don't need a car at all. I know you don't control the design of your city, but others do. They could be making different decisions.
> And even for relatively frequent public transit routes you end up wasting quite a bit of time waiting.
Either rent a van or pay a moving company. Its not like you do this every week and it will still be cheaper if you do this every few years than paying for your own car.
> or even larger amounts of groceries that are infinitely harder without a car.
In high density cities this just doesnt exist. Grocery shops are at worst a few blocks away, you can just go more often or just use your own shopping cart (or equivalent)
> And then there is also the question of the environment on that public transport. IME "good enough that complaints remain manageable" seems to be the target here unlike a car where you can have private entertainment and air conditioning (not to mention sufficient ventilation) to whatever level you wish.
I get air conditioning in my cities bus/light rail/subways and its on a acceptable average level
And imo "entertainment" is a lot better in public transit where i can not only listen to music but also watch videos/read books/play games. When you are driving you shouldnt even be listening to an audio book since you could become distracted while operating your heavy machinery that can easily kill.
> And even for relatively frequent public transit routes you end up wasting quite a bit of time waiting.
Here subways/light rails comes every three to 10 minutes, this is not a problem.
I think it has to do with the fact, that "white" hacking is illegal? I am sure people would like to help out and harden the systems.
But i am also not sure, what actually happened. Once ya in a system, all is lost.
And the culture around credentials is in my opinion a lost case anyways. I do not know where IT has gone a wrong path. Either security it is super high and you can not do anything (hello bureaucracy) or you can do more, but you become more vulnerable.
It has not worked well with fascism. You know that you basically had a gun pointed at your head, if you did not comply with the regime? To be able to keep your stuff, you had to collude with the system. And you had to be not jewish as well.
But they didn't have guns pointed to their heads. Every single time in history, they gleefully collaborated and even helped the fascists come to power in the first place.
And there are many examples of them being happy to join in. I think the best one right now is Alex Karp, Palantir CEO, who is actively rooting for and building the tools of fascism because it's so profitable.
> Palantir is here to disrupt and make the institutions we partner with the very best in the world and, when it’s necessary, to scare enemies and on occasion kill them.
> We’re going to partner with the world’s best people and we’re going to dominate. You can be along for the ride or you don’t have to be.
> Silicon Valley owes a moral debt to the country that made its rise possible. The engineering elite of Silicon Valley has an affirmative obligation to participate in the defense of the nation.
> Silicon Valley must play a role in addressing violent crime. Many politicians across the United States have essentially shrugged when it comes to violent crime, abandoning any serious efforts to address the problem or take on any risk with their constituencies or donors in coming up with solutions and experiments in what should be a desperate bid to save lives.
> The pervasive intolerance of religious belief in certain circles must be resisted. The elite’s intolerance of religious belief is perhaps one of the most telling signs that its political project constitutes a less open intellectual movement than many within it would claim.
> We must resist the shallow temptation of a vacant and hollow pluralism. We, in America and more broadly the West, have for the past half century resisted defining national cultures in the name of inclusivity. But inclusion into what?
> The ruthless exposure of the private lives of public figures drives far too much talent away from government service.
This capitalist doesn't have a gun pointed to his, he instead feels a moral obligation to provide the state with a comprehensive surveillance apparatus and ability to kill enemies of the state while also decrying holding public figures accountable.
France and Germany have a pretty good track record for developing things they want. Nuclear technology (including a weapon), GPS alternative, Airbus (arguably better then Boeing now), etc. So your statement is kind of a weird one to make.
Though, from a technical point of view it is top. Always working. Always crisp.
reply