Arghblarg

The paranoid in me wonders though… can DRAM be backdoored? I’d bet ‘yes’, and this would be a perfect opening to introduce a huge amount of compromised hardware to the world market…

I was being lazy, I admit – something I could have looked up myself ;)

Cloudflare has caused too much of the internet to be centralized under their whims. There need to be more alternatives for DDoS protection; I don’t use any at all for my self-hosted site, but if I ever do, it won’t be Cloudflare.

Thank you for linking via xcancel.com rather than to that service directly. Wish more posters would do this.

Reddit API apocalypse and their plan to IPO to sell everyone’s posts for data.

I think people are in some denial downvoting this. It’s a pretty hard take, but accurate. The real progressives in the Democratic Party (Sanders, AOC, etc.) are definitely not establishment Democratic members, remember how Sanders was railroaded out of any chance to run as President?

The USA needs a third party, and the Democratic party needs a real fumigating.

EDIT: Did Biden really increase ICE funding? (Or at least allow it)

Might actually be a good idea if everyone registered as Republican. Then there’s no way to tell who’s really going to vote for them. Hah, sorry I forgot there probably won’t be any more votes.

Is this in Minneapolis? If so, will the mayor order the police force to stop acting like they’re allied with ICE? (Let’s be honest, they mostly are I bet). At some point a city is going to need to force their police force to officially choose sides, or resign if they are unwilling.

May the vengeful ghost of Fred Rogers come strangle Trump and Miller in their sleep.

So what’s the floor here realistically, are they going to lower it to 30 days, then 14, then 2, then 1? Will we need to log in every morning and expect to refresh every damn site cert we connect to soon?

It is ignoring the elephant in the room – the central root CA system. What if that is ever compromised?

Certificate pinning was a good idea IMO, giving end-users control over trust without these top-down mandated cert update schedules. Don’t get me wrong, LetsEncrypt has done and is doing a great service within the current infrastructure we have, but …

I kind of wish we could just partition the entire internet into the current “commercial public internet” and a new (old, redux) “hobbyist private internet” where we didn’t have to assume every single god-damned connection was a hostile entity. I miss the comraderie, the shared vibe, the trust. Yeah I’m old.