Hacker Newsnew | past | comments | ask | show | jobs | submit | dlgeek's commentslogin


This isn't due to coercive mandates as OP mentioned though.

> After fixing internet for some neighbors and older relatives, I've wondered if people would pay for a home network / internet handyman service.

That's what I did for pocket as a kid in high school (in the mid-2000s).


Yes. All CAs trusted by browsers have to go through WebTRUST or ETSI audits by accredited auditors.

See https://www.mozilla.org/en-US/about/governance/policies/secu... and https://www.ccadb.org/auditors and https://www.ccadb.org/policy#51-audit-statement-content


As I understand them, these are accounting audits, similar (if perhaps more detail) to a SOC2. The real thing keeping CAs from being gravely insecure is the CA death penalty Google will inflict if a CA suffers a security breach that results in any kind of misissuance.


It's not just Google, but also Mozilla, Apple, and Microsoft. They all work together on shutting down bad behavior.

Apple and Microsoft mainly have power because they control Safari and Edge. Firefox is of course dying, but they still wield significant power because their trusted CA list is copied by all the major Linux distributions that run on servers.


Sure. I think Google and Mozilla have been the prime movers to date, but everyone has upped their game since Verisign/Symantec.


that's good news about the CA's , but how about the publisher certificates that are in use?


> There is absolutely no company-wide mandate to use GenAI.

There is an STeam goal for adoption and usage. There is a QS dashboard for SDMs to see statistics on their org's adoption and abandonment rates. There is BT guidance being propagated out to VPs and directors on how to roll out programs. As placardloop said, there was a mandatory OP1 FAQ question on GenAI usage.


I have an uplift arm and while I'm not at my desk right now, it's height adjustable and I can get it pretty close to my face (without sacrificing the height adjustment) - I have both the range and the crestview (Upgraded when I got a bigger monitor).


Between this and https://www.haproxy.com/blog/state-of-ssl-stacks, I think we need to start accepting the idea that OpenSSL is not the right way forward for anything performance sensitive.

Given how aws-lc powers both of these articles, I'm curious how Rustls compares to s2n-tls - AWS's TLS library to go along with aws-lc.


They don't have a choice - the decision comes from Chrome's root program and if they don't comply, LetsEncrypt would be distrusted by Chrome.


Is it really that clear that Google has more power here? Whom would users blame if suddenly half their pages are falsely accused of being "untrusted"? Probably the browser, not LE, right?


That's not leverage that a CA can use. If half the internet suddenly displays TLS warning interstitials, it doesn't make people mad at the CA, and it doesn't make people mad at their browser: it just _trains them to ignore such warnings_. That's a bad outcome all around, and one that a CA whose core purpose is improving security for end-users cannot condone.


SPOILERS AHEAD

SPOILERS AHEAD

Today's challenge ("Sports Teams") was particularly easy because each one was plural. That made each one "unscramble a 4 letter word" instead of a 5. Might be a consideration for the future.


Check out the big brain on Brad!!

I didn't spot this :-)


Realize they have over 1.5MM employees and who knows how many contractors.


The latter class would have been called "Home Economics" ("HomeEc") back in the day.


Both these (sløyd /woodworking, heimekunnskap/cooking and home economics) were mandatory for everyone in Norway back in the nineties(although to be fair shop time was limited to wood, we weren't allowed to use metal lathes etc anymore), as was sewing (both with hand and machines).

I'm still thankful because of all the stuff I can relatively easy cook, fix or make thanks to those few hours in school.

(I'd also say they made for extremely welcome breaks between boring stuff in other subjects and being bullied during breaks.)


Still mandatory in Finland.

They have "soft materials" (fabric, sewing, knitting) and "hard materials" (wood, metal working, 3d-printing etc).

In upper classes they have cooking and more of the same.


Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: