ZoFreX

This seems to be an internet meme, because it's repeated in every discussion on this topic but I never see any citation for it.

It also doesn't seem to hold up to scrutiny - even if the initial packing of the vehicle holds everything in place, what happens once a few packages are removed?

Largely yes. Or at least a lot less of a problem.

The biggest risk from space garbage is that the small stuff is not trackable, so at any point it could slam into satellites or, god forbid, people or space stations. It's going fast enough that despite being small this would have dreadful consequences.

Larger items can be tracked, and therefore can be avoided, so they don't pose a risk any more than non-junk large items like other satellites and so on. There's quite a lot of room so if you know where things are it's not hard to avoid them.

Some amount of garbage is sadly unavoidable at this point in our development of space travel. For example many rockets are multi stage and jettison those stages, farings to protect satellites are jettisoned, and so on. That all falls into the "large and trackable" category so it's not a terrible problem, at least not yet. So the main current strategy for avoiding creating problems is to avoid creating small garbage, and people work very hard at that - being careful not to lose tools or even a single nut or bolt.

And yes, before you mention it, "lots of room" is a relative statement and this is not an infinitely sustainable strategy. But people are working on methods to capture and clean up garbage, and as those get more feasible we'll be able to go and clean up all this large garbage that we are tracking. So even with a long-term perspective, the large stuff is less of a problem.

Also, to prove a rocket you need to have a dummy payload of some kind. Whatever you think about the stunt of using a Tesla as that dummy payload, there was going to be a payload of some kind however that decision went. The fact it was a car doesn't change the collision risk or debris amount compared to using a mass simulator.

Windows doesn't have fine-grained permissions for adding to or changing certificate stores, though. When you run "mkcert -install" you'll get a generic prompt for mkcert requiring admin permissions, not a prompt for it changing certificate stores.

I believe the point is that any software asking for admin could fiddle with your certificate stores, so there's no sense in asking for a higher standard of integrity from software that tells you it will do so.

Counter-point, I haven't had a single Apple keyboard fail on me yet (although I do not own the new Macbook, so I don't have the dreadful one) and my Matias broke after just 1 year.

It's not, necessarily.

It's a tradeoff between usability and security, and each site should make their own decision about what is right for them.

It obviously makes attacks like the one in the article easier, but there are other ways to mitigate that.

An example often given for when revealing an email is registered would definitely be bad is dating website and pornography websites - where identifying someone is a member alone could be embarrassing or compromising.

Outside of such scenarios, websites may decide the increased conversion from a more streamlined registration process and lower numbers of support requests for login issues outweigh the marginal security gains from hiding that information.

If people are using it, not paying attention, with the expectation that it will beep to tell you to take over that's a big problem. In situations like this divider issue it won't beep, it thinks everything is fine right up until it rams you into a stationary object. I think people may not be fully aware of all the potential failure modes of this tech?

This should help you to have a backup next time you get locked out!

The official authenticator also displays a backup code which it tells you to keep a copy of somewhere safe...

The difference is (according to the article) that there is an abundance of objects at 0mph - signs, litter, barriers - so the system filters all of these out to avoid constantly braking. There is no such abundance of ignorable items going at 20mph.

it pauses with an incorrect password for a few seconds, then visually shakes indicating it's a wrong password

This is also the behaviour of the App Store preferences in version 10.13.1

Hopefully their mobile apps use HTTPS for everything too?

Well, HSBC's didn't: https://threatpost.com/banking-apps-found-vulnerable-to-mitm...

NatWest are particularly terrible. Last time I checked, in-branch they were still using Internet Explorer to visit an http (not https) site on their intranet to launch via Java Web Start a thin client to log in to their (I assume) mainframe to actually do things.

There's a number of places in that chain of events that something could go nastily wrong, despite them owning every part of that chain.

Being a jerk and disagreeing are orthogonal. You can be a jerk while agreeing with someone, and be a not-jerk while disagreeing.

I'm curious, in reference to the post, how you would have no problem working with a "Bob"? Is there really no behaviour there that would bother you in a coworker?

Hence tilting - high speed vehicles tilt, low speed vehicles don't, and everything works out ok.

Lateral acceleration is much more annoying to deal with than longitudinal or vertical, even if it's constant. Perhaps they could tilt in bends to convert some of that lateral to vertical?

with a reputation as huge and important as Google's

Not trolling: What reputation?

Among non-techies, their reputation is one of creepy and spying.

Among techies, it's that company that keeps killing loved products.

Among developers, it's one of terrible support and awful job interviews.

Common to everyone is they are impossible to get hold of, a faceless and heartless machine that makes decisions you can't argue with.

None of this matters because they have the best products on the market in a few key areas and everyone keeps using those regardless of their reputation.

So what reputation do they have to lose? Their reputation is already bad, and it doesn't matter anyway, and they presumably know this as well as everyone else does.

Anyone who hasn't seen this yet should take a look, it explains in detail:

- Why they are doing this - What the potential passenger benefits are - And bonus, it includes lots of cool infographics on passenger journeys

They go into a lot of potential benefits in their paper here: http://content.tfl.gov.uk/review-tfl-wifi-pilot.pdf

How would tracking the Oyster card ID that's registered to my name, address, and credit card # in their system be an improvement compared to tracking the hashed MAC address of my phone?

Why do they need to do this?

This is explained in detail here:

http://content.tfl.gov.uk/review-tfl-wifi-pilot.pdf

If you would rather buy a paper ticket with cash you can still do that, and you won't be tracked if you put your phone into wireless mode. Personally I'm happy for them to collect limited amounts of data, with restraint, if that means they can improve the effectiveness of the network. But if you're not, that's understandable, and it's not that difficult to avoid it.

Yup, I'm happy with it. Can't see how else you would get this amazing data which is obviously going to be extremely helpful for managing an increasingly overcrowded train system.

Even the article says they're using this to assess the value of advertising spots, rather than some of the more nefarious things that _could_ be done with this technology.

In that one scenario yes, that communication could save the day. I think the article is more about what happens if you multiply that by 100, and one person is disproportionately making that communication happen.

In the circles I hang in (as in, both people I talk to, and articles I read) the term "emotional labour" is used like it is in this article.

Sometimes terms mean different things in different circles or groups or contexts, it doesn't mean either usage is "wrong" necessarily.

And how many of your passwords need to leak for that scheme to be completely transparent?

I highly recommend the essay "The Programming Systems Product" from the collection "The Mythical Man-Month" which provides an answer to this exact question.

A use-case where it makes a big difference: bad internet. My internet is not fast, and not super-reliable, which is why I download TV and movies overnight so I can watch them without being at the mercy of the ADSL gods.

The "power" to ban people isn't up for debate, though. Reddit have that power, whether they exercise it or not. If they did not exercise it today, it could still be inherited and abused by a future actor tomorrow. There may be arguments about how to change that, but arguing Reddit should not ban users for their speech would not be one of them.

Further, it's hard to imagine a world where websites cannot ban users. Reddit's "power" extends over their own property and who they admit to it, I can't imagine it being possible to run a website without that "power" - how would you deal with spammers and so on? How could you possibly compel a website to admit all people whether they want to or not?

If HL would have been a EA game

It was! I know EA are the go-to bad guy in these comparisons, but EA is the distributing publisher for physical copies of Valve games, and Valve are on record as loving working with EA.

it's amazing that Valve continues to ignore it

Valve isn't a monolithic entity nor a top-down controlled company though. This argument doesn't reflect how they make decisions.

They have spoken on a few related points in the past:

* Their projects often change dramatically during development, even being scrapped or started over again from scratch (Half-Life is a rework of a scrapped project, Team Fortress 2 was completely rebooted)

* They prefer not to talk at all about things that are very hyped because they believe it's more painful to the community to go through those twists and turns than have radio silence

* If they aren't happy with the quality of something they produce it doesn't see the light of day, rather than release something that isn't great

* For it to happen requires enough people within the company to decide to work on it, and see it through

I would have to read their source code to answer that question (I know almost nothing about 1Password). Some password managers just call a PGP executable. Others are assembling crypto primitives into larger pieces and making choices like "let's use CBC mode" themselves.