This reminds me of something I recently saw on Netflix. In the documentary about physicist Abdus Salam, he sent Wolfgang Pauli a paper on parity violations. Pauli replied saying something like "find something better to do".
Later, two Chinese physicist went on to get the Nobel Prize for that same theory. Pauli later apologised.
Ericsson said last week that "an initial root cause analysis" had indicated that the "main issue was an expired certificate in the software versions installed with these customers".
I suspect I'll never know, but I would be really interested to know what sort of certificate. Was this part of some larger public system or was it a purely internal PKI? If internal, did the certificates _do_ anything of value or did they purely make the system more fragile because somebody thought it ought to have certificates?
One of the arguments in favour of abusing the Web PKI to do other things is that tooling for the Web PKI is in a relatively good place. And a lot of other things that you might ideally hope exist actually DO exist for the Web PKI. There's independent oversight, somebody is actually reading those yawn-making audit reports, it isn't perfect but it's not just make believe either.
But on the other hand, the Web PKI is ours, and so if it suits us to change it we don't really care that this is annoying for your payment card systems, jet aeroplanes, nuclear submarines or whatever else you've duct-taped the Web PKI into. This was fun to watch with SHA-1 for example and is currently causing some fallout for names with underscores in (DNS can handle a name with an underscore in it but they're prohibited for hostnames. Lots of people ignored that, but that's their problem, not ours and they are not happy about that).
Ericsson have both their own PKI infrastructure[0], at least for software integrity checking (however that certificate is valid since March this year, and the CRL[1] it refers to is empty), in addition to using other certificate authorities for everything such as the hosting of websites to internal infrastructure[2]. I suspect it wasn't any of the above - rather it is the PKI that is used in running the IPSec networking done between carrier's RANs and other parts of core network[3], which is probably Ericsson's own internal CA.
Further expanding. GPRS Tunneling Protocol (GTP)[1] is what gets used to connected to the provider's data/voice network. This could be over any medium (wifi, GSM, UMTS, or LTE). It's likely this was the cert protecting GTP-C's ipsec tunnel[2] as without the ability to signal, pretty much everything on the network goes down.
Mmm, rather than the behaviour being "removed from browsers" the important thing is that Certificate Authorities were told that issuing such certificates could cause them to be distrusted as a whole by browsers.
Part of the reason to do this is that if CAs issue the certificates then their customers buy them, and create pressure to accept them. If none of the CAs are willing to issue this never comes up.
Another is "unknown unknowns". Security systems don't play well with undefined behaviour, if we explicitly forbid everything we don't want to exist that minimises the risk of such undefined behaviour anywhere in the certificate handling code getting exploited. It's a defence in depth.
I was confused for a bit..I thought hang on "Prometheus" ( https://prometheus.io) is a time series data base, how can it support genetic data. Turns out you probably meant Promethease (https://promethease.com)
One problem I have with pan-spermia is: Why is there only one tree of life? Not several independent trees. If life evolved in one of the exo-planets, is not possible that several independent forms of life evolved in several planets and some ended up on Earth.
The individual nucleobases (cytosine [C], guanine [G], adenine [A] or thymine [T]) are made from the 4 most common elements, and appear to be modestly simple molecules. Is it so unbelievable that they naturally occur like methane or sodium glass?
One tree (us) either appeared first and dominated resources, or we wiped our the other trees. Evolutionary forces work at levels above species. Two trees can compete with each other.
If this happened it did so at the microbe level. Physical evidence would be extraordinarily difficult. If we did find evidence of another tree it would be so 'alien' to our tree that might mistakenly call it extraterrestrial.
And since panspermia is necessarily done with microbes, they would get outnumbered and munched by our microbes if they arrived after our tree dominated our planet. Unless other planets happened to give birth to hardier, more virulent microbes, then welcome Andromeda Strain.
I also don't subscribe to panspermia because first local origin must be reasonably proved unfeasible, but playing devil's advocate ¿what if our life tree outcompeted the others?
That's certainly possible, but not likely. Life began on Earth almost as soon as it was cool enough to do so, so we would expect to see life pop up over and over again. And it's highly unlikely that they would all get wiped out.
We're sorry but this site is not accessible from the UK as it is part of our international service and is not funded by the licence fee. It is run commercially by BBC Worldwide, a wholly-owned subsidiary of the BBC, the profits made from it go back to BBC programme-makers to help fund great new BBC programmes. You can find out more about BBC Worldwide and its digital activities at www.bbcworldwide.com.
