goldpizza44
Joined 3 years ago
Joined 3 years ago
I don't think HSTS will help if he is running his own WWW site on his laptop with a proper CA signed cert. If I understand correctly his laptop was presenting a proper WWW login page presumably over HTTPS after victims connected to his WIFI. What he was probably faking was the redirect to the Identity Provider (IDP) by staying on his own properly credentialed HTTPS site which would pass all HSTS checks. He may have also been faking DNS responses to keep users where he wants them.
I always suspicious of these flows for specifically this reason. The flows are secure as long as you know you are talking to the correct identity provider, but I think most laymen would not understand that concept.
The question is who is paying for these treatments? Drug companies are not shy about charging tens of thousands of dollars a year for a course of treatment that may or may not help. Insurance companies and Medicare partD will probably be reluctant to reimburse. Drug companies have large incentives to get patients to pay out of pocket, and no, they won't refund if the product is not effective.
Perhaps if the FDA were to create a new class of approval that states: Drugs under this class are shown to not cause harm but are also not proven to be helpful. They may be taken, but drug companies may not charge for supplies until efficacy is shown in controlled conditions.
The primary issue here is there are plenty of Snake Oil salesmen ready to tell you anything you want to hear and have no qualms about taking "somebody's" money.
I am sure creating a new class such as this, will also create a host of unintended consequences though.
At this point in the EV marketplace the I would say the answer is no to both questions. Tesla is far better concentrating their engineering teams on new products that can continue their growth.
Now if some competitor comes up with a perfectly quiet car and that becomes a selling point, then it is time to revisit the engineering.
When she is agonizing over some color scheme (which in most cases doesn't interest me much) she will explain what she wants to achieve, and I can ask "stupid" questions that lead her to the answer...or in the odd case I make a suggestion and the lightbulb pops on.
It seems to me the mental health professionals do the same thing.
Together we have tackled installing over a 1000 sqft of hardwood flooring, removing popcorn ceilings (yuk), re-engineering built in cabinetry to accommodate an 82" TV, gutting and rebuilding 3 bathrooms, re-upholstering a livingroom suite that has no right angles (all curves), running a 90ft PEX pipe through a ceiling crawl space after receive a quote from a plumber for $8000 (took a day of our time).
The problem I have with "professionals" is that they all tell me a different story of what I need, and the "other guy" is always dead wrong.
I need a new roof and am getting quotes from multiple vendors....Just today I had calls with a couple of the vendors and they told me opposite stories of what "I need". One told me I need to replace all the wall flashings (which is very difficult and expensive given the siding must come off), and the other said don't touch it if its not leaking. Who to believe?
At the end of each project we are amazed at our accomplishment (note youtube helps). It certainly took 5x longer than a professional might take, but the end result was unique, we could change direction mid project, and in the end I know it is not crap work from some guy who left a leak in the wall. I believe the elation we achieved (and compliments from the neighbors), far exceeds the sweat equity that we put into the projects.