Sure, I never said anything against offline root cert authorities. But did you do it literally exactly how this guy was saying to do it with a laptop that you load via CD-ROM for a signing key that’s being used for active transactions?
It’s as if one of the things your root certificate authority signed got compromised. It doesn’t help that your root key is safe if attackers still managed to impersonate you before you revoked that cert.
> privileged private key to sign off on how much USR could be created. Unfortunately, the smart contract itself did not enforce any maximum limit on minting – it only checked that a valid signature existed.
The offline idea simply doesn’t work because this particular key has to be online
> It’s weird to say in the same comment “it happens but as far as I know it’s rare” and “this isn’t an actual risk to anybody.”
Orders of magnitude more people are maimed, disfigured, or outright killed by:
1. Guns.
2. Vehicles.
3. Alcohol.
Weirdly, suspiciously weirdly, the people that are vehemently for age-verification to protect potential trans-indoctrination victims from any risk of bodily harm are the very same people that are very much in favour of those three things. Or at least, show zero apparent interest in using age verification to block 2nd amendment nuts spreading their propaganda -- and I use the word very literally -- because the NRA is funded by Russia[1], or blocking young impressionable kids watching Nascar and being influenced to engage in dangerous speeding, or blocking alcohol advertising from ever being seen by a minor.
I looked into that one, because it was so outlandish but repeated by multiple sources and reported by reputable journalists.
The original reporting was carefully phrased to make it sound like IDF soldiers were "sniping" little children, taking careful aim and deliberately shooting them in the head, which is... monstrous.
Where this narrative starts to breaks down is that snipers don't aim for the head, because it's too small a target. Additionally, most of the reports mentioned that the children were shot "in the street" in scuffles with ordinary army grunts, so where were these mysterious "child-murdering snipers"? How were they so reliably hitting small moving targets in the head?
It turns out that this phenomenon was a product of Gaza's demographics combined with survivorship bias.
Half of Gaza's population is under 18! Teenagers are technically "children", but they're out in the streets throwing rocks or whatever at IDF troops, and get shot at in return. The ones that get hit by half a dozen rounds to the chest die on the spot and aren't taken to hospital because obviously, hospitals are for people that can be saved, not the dead. All of the reports of "children getting shot in the head" were coming from surgeons in hospitals, but they were seeing a biased sample: victims that only got hit once had a chance to survive. Similarly, a minor head-wound isn't instantly lethal, whereas a single round centre-mass typically is. So they were seeing victims with single shots to the head instead of multiple to the chest. They then cooked up a narrative that would explain what they were seeing, not realising that the cause wasn't "evil child murdering snipers", but simply a statistically biased view of a war that is not especially more unethical than any other armed conflict.
Here's a video of IDF in the West Bank head-shotting an unarmed elderly man who posed no threat: https://en.wikipedia.org/wiki/Killing_of_David_Ben_Avraham In this one, the man had converted to Judaism after feeling an affinity to the religion due to his grandfather saving the lives of more than 10 Jews during the 1929 Hebron massacre. His Aliyah request was denied, and he was executed while attempting to visit a settlement (by invitation) for Torah study
These are just ones that come to mind as some of the most brutal ones, but there are many, many more videos of the IDF executing unarmed Palestinians who are posing no threat by head-shot. And for every one we see there are likely 4 or 5 more which we don't see because they weren't independently recorded.
War makes people angry, and angry people are trivially swayed by propaganda.
For example, there's thousands of people still screeching online that the US deliberately bombed little girls in Iran. No, they hit a girls school by accident, it used to be an IRGC military base building and is surrounded by IRGC buildings!
I don't condone Israel's actions in Gaza, nor do I condone the US/Israeli attacks on Iran.
Having said that, it's important in a war -- irrespective of what side one is supporting or opposing -- not to believe exaggerations or outright lies.
War is bad enough, we don't have to sprinkle imaginary horrors on top of the real ones!
In the worst case, if too many people spout transparently obvious propaganda, then that discounts the believability of the true horrors. This is most obvious today with the "that's just a fake AI video" retorts, but before it was "fake news", or whatever.
You’re parroting IRGC propaganda, which is why people are arguing with you.
“We are innocent civilians and the Israelis are carpet bombing us”… said by the people that funded October 7th and killed more of their own people than the Israeli bombs did.
Iran’s government has been violently belligerent for decades, and continues to this day to bomb its Arab neighbours including hitting their civilians! They don’t get to whine about the morality of civilian versus military deaths.
Iran has absolutely not been violent for decades. And they don't "continue" to bomb their Arab neighbours - they are only bombing them now because they allowed their land to be used to attack Iran.
What exactly are Iran supposed to do here? Just give up, allow their country to be infested with ISIS and Al Qaeda, allow their country balkanised, their citizens massacred indiscriminatly?
I agree that targeted strikes which miss or take out adjacent areas is not carpet bombing.
However, the above commenter suggested the U.S. has phased out carpet bombing, and while I'm suspect of that, we know with certainty that Israel will happily "carpet bomb" an area if it can string together a few words justifying it.
Even if it's true that what they've done isn't technically carpet bombing in the sense that they may not just dropping bombs out of planes indiscriminately, the same effect can be achieved with nominally "targeted" strikes now, especially with many of these being conducted by automated "targeting" systems.
Seriously, it's unlikely in this age of advanced weaponry that we'd see carpet bombing like we did in Vietnam, when the U.S. and Israel are capable of creating the same effect, but with thousands of supposedly tactical strikes over the entirety of some densely populated area.
WinUI 3 was a step back from WPF in technology, because it panders to the virtually non-existent Microsoft .NET mobile app market.
To remain compatible with Android and iPhones they removed or simplified a bunch of features, ironically stripping out HDR support just when practically all phones got wide gamut and HDR, OLED screens, etc.
In the era when mobile phones are getting amazing, Microsoft is still racing towards the bottom along with every laptop maker other than Apple.
It is reasonably feature complete, but not 100%, so some things are absurdly difficult to automate on Server Core, such as changing the ACL of the private key of a certificate (i.e.: to give a service account access).
It also takes a solid two seconds to launch even on a high-end PC with a fast SSD. It takes much longer on a small VM with overpriced cloud remote storage.
i've stopped administrating windows some time ago so hopefully my response is still accurate -
1. deprecated lol
2. i think it can't be run on things like AD, so for very small companies this is annoying
3. ... that's not really an admin app?
4. sure, but then i might as well switch to linux if i have to stick to cli (and i did)
5. last time i checked there were two versions, incompatible with one another, not great alternative to ansible
6. if you have hybrid and are in azure already, maybe? haven't used
I mean it's not like there are not 5 alternatives in azure/intune for every thing as well that are half baked. And 365 and azure is worse with terrible migration guides, ms graph with a combination of commands and json inputs and defaults from 2016.
It's really time for microsoft to fully commit to one thing, make it good, finish it and deprecate everything else.
I was just listing stuff that generally replaced the old MMC consoles. Things like regional options can be set through the Admin app, and is weirdly difficult with other mechanisms even on Windows Server. Some critical aspects are still MMC-only or require half a page of PowerShell scripts.
> 4. sure, but then i might as well switch to linux if i have to stick to cli (and i did)
Ironically, you're missing out on PowerShell, which is more UNIX than UNIX, and blows every legacy shell on Linux out of the water.
> 5. last time i checked there were two versions, incompatible with one another, not great alternative to ansible
> 6. if you have hybrid and are in azure already, maybe? haven't used [Azure Arc]
It's supposed to replace Group Policy, Windows Update, and bits and pieces of SCCM and SCOM.
It is incredibly, hilariously bad at all of those things.
It's a level of failure that simply boggles the mind, and I can only surmise that it was developed by a small army of junior outsourced Indian developers that had never seen any of the tools they were replacing and did everything "to the letter of the spec".
4. Pwsh - i tried to install powershell multiple times on linux, it was ubuntu 24 and debian 13, both about 6 months after release (so debian in january) and it always failed to install because of wrong dependencies. They can't even keep powershell up to date so it is far from great. Linux server support should be there from day 1 otherwise it is useless
5. U gotta be kidding, what a clusterfuck
6. Thanks for saving my time with testing, wouldn't expect anything else
The problem is that there's dozens of security updates every month, so even if you can skip feature updates, you'll have to reboot every Patch Tuesday anyway.
Even the Server Core edition, which has a much smaller "surface area" needs reboots almost every month.
“Improved Feedback Hub” is a code for “The corner that we told the plebs to scream into was close enough to the executives that they could hear some of the angry swearing, so we moved everyone over to a padded room in the basement where they can’t bother anybody.”
Yes, it's a pain to operate, but if the alternative is "the bad guys get all of our money", then it can be worth it.
reply