Zak

I'll have to give that a good look. The concept sounds good.

I do, however question the taste and judgment of any project that tells users to run `curl ...|sh`.

Bank apps do checklist-oriented security, and nobody has put that on the checklist yet.

I'm disappointed that issue tracking inside the VCS (probably as a separate repository, or at least a special branch) never got popular. That would reduce the importance of web-based code forges and make moving between them easy.

I expect law enforcement agencies to act like professional public services, not venomous insects.

That's a good point. The USA has many counterproductive restrictions on immigration which should be repealed.

To "surveil" a law enforcement agency is usually described as journalism or public accountability in democracies.

A rational employer is interested in how much value they can get, not how hard you work. In most cases, in the short term, an increase in efficiency means they can get more value from you working the same amount of the same pay.

I don't think it should be allowed without a court order. Extrajudicial punishments are bad.

I do think a court order should have been issued in this case. The offender's conduct was severe enough to earn him 15 years in prison, and the risk of continuing/future harm to the victim was substantial.

Seizing and selling or destroying property used in the commission of a crime is common. It doesn't seem unreasonable to me if the value of the property is in proportion to the severity of the crime, and the owner of the property has been convicted of the crime (i.e. it's not civil asset forfeiture).

It seems to me that the correct remedy in this case would be to have a representative of the court preserve specific data requested by the offender, as long as it isn't criminal or harmful, at the offender's expense.

I don't think wiping an offender's phone is justified in most cases even if it might hinder them in potential subsequent crimes, but it does seem justified in this case where the phone contains significant material harmful to the victim of a serious crime.

I was recently surprised to notice a PDF download link on a blog post from Anthropic. My first thought was "would anybody want to read a blog post in PDF rather than HTML format?"

This comment suggests the answer is yes.

Not using remote attestation requires exactly zero effort, but some jerk put it on a checklist and now middle managers want it.

That's my first instinct too. I've seen a claim that devices with root, which is distinct from degoogled, both of which are distinct from using a third-party Android distribution, have an increased probability of malware. I suspect that statistic includes things like secondary devices people use for cheating in pay-to-win games and the like.

Only if it has a place to put the result.