ashray

Another great and somewhat sad read is Flowers for Algernon.

I'll post an example for the parent just in case they are honestly confused about use cases. Here is one that happened to me. I had an eSIM on my iPhone. My iPhone broke (screen became somewhat unusable, and the phone was stuck in a restarting loop). It was an older model phone so I checked the repair cost and thought I'd rather buy a new one.

Bought a new phone. Now, to transfer my eSIM from the old phone to the new phone, I needed the carrier to approve. But I was away from my home country and on roaming. So I tried to call them. They needed me to use a verification PIN they would send via SMS on the old phone, to verify the transfer to the new one. Impossible since the old phone is unusable.

Back in the day, I'd have just taken out the sim from the old phone and moved it to the new one. Easy peasy.

The only other option in this case now was to visit one of their stores thousands of miles away. Eventually just ended up doing that when I returned weeks later but during this time I could not access several services due to lack of access to my number plus 2 factor codes being sent there.

Moving a sim from phone to phone was seamless. Now the carrier needs to approve this swap. Even with two working phones sometimes it's a hassle and there will be delays while carriers decide to approve the move. There is a new feature that allows you to transfer eSIMs easily between phones but carriers seem to be holding onto their power in this regard and not every carrier will let their sims move so easily. This possibly requires regulators to step in and solve the issue - make it up to the user to move eSIMs. I would count on the EU to make this easier at some point.

On the plus side, eSIMs are nice to be able to signup and provision them through an app. Helps with travel and roaming. So there's that too.

So for Visa Waiver countries one of the requirements is to keep that number under 1% or so to stay in the visa waiver program. For visa required countries, if the visa vetting process wasn't so strict, probably the numbers would be a lot higher.

This was already the case for almost every other country. Most embassies required you to be resident or a national of the country you are applying in.

So oddly, the US was far more permissive than other locales in this one aspect. All this change does is bring it in line with security practices that other nations already had in place.

Honestly am quite surprised that the US didn’t already have this restriction considering overall it’s one of the toughest countries to get a visa for or even enter with a valid visa.

The US visa vetting procedure is known to be so strict even for tourists that many nations give visa free access to nationals who would otherwise require a visa - just because they hold a valid (or sometimes even expired!) US visa. It’s a highly regarded sticker if you can get one in your passport and seriously ups the power of your passport if it’s a weaker one to start with.

Thanks for posting context. I was pretty annoyed at Revolut after reading the twitter thread but didn't know about this part of the situation. Of course, it's not obvious from the twitter thread at all.

Thank you for having the time and patience to reply to everyone about psychotherapy and how it's not a one-stop-shop to fix all your issues. I feel the same but honestly do not have the patience to take on this immense debate with mostly people who blindly believe that some person with a basic degree has the knowledge, insight, authority, etc. to solve your life's problems. I personally cannot reason with people who have based their beliefs on 'blind faith'.

They do. Teslas come with two NFC card keys. The phone unlock is optional but really convenient.

This makes sense but why are some people able to cope better with this system than others? Why do some get depressed and others fare okay?

What’s the reason this is happening? I’m yet to understand this..

The context of this discussion is smaller publishers/bloggers/etc. If you see the grandparent post it's clear that industry leaders will not find it technically challenging to get on board with both TLS and HTTP/2. The question I asked about economic incentive is not in the context of the NYT homepage but thank you for the unnecessary snark.

A local script injecting an ad is not the same kind of MITM attack and is no way mitigated by enabling TLS.

The discussion here is not about whether encryption is bad. My aim was to ask about whether no encryption = no HTTP/2 for you and why this is the case. I understand that the technical reason at the protocol level is because of obsolete proxies often sitting on port 80 and also the protocol negotiation that needs to take place.

No, of course not. What would be the economic incentive towards carrying out a sufficiently complex MITM attack on a blog or a newsfeed?

In my experience the times that I've had users complain about "injected" information or weird ads, it's usually come from malware that resides ON their system. There's no MITM required for this. The injection happens client side through a browser plugin or some other resource that gets loaded up along with the page. TLS wouldn't fix this in any way as far as I am aware.