sam1714

The first scenario is due to anti-trust complaints forcing Apple to treat their pre-installed apps identically to third-party ones. (Also why you can "delete" system apps.)

The printer is subsidized by the price of the cartridge. If you want to pay the hardware subsidy without getting any hardware, they're fine with that.

Any LLCs and PLLCs (physicians, attorneys, lawyers, accountants, architects, etc.). An owner of a LLC cannot be an employee of it and therefore is pass-through.

>faculty research overhead pays for department TAs

The majority comes from tuition budgets, which are assigned per credit-unit. This also pays for faculty salaries. Math is heavily dependent on tuition because they get little overhead. Life sciences is buying millions of dollars of equipment, chemicals, animals, lab staff that incur overhead, none in math.

>departments with rich professors maintain their TAs even through budget cuts

In fact the University of California does not get to keep any overhead. It goes right back into the State of California General Fund and the CA Legislature, as part of the budgeting process, decides where it goes (obviously considering where it came from). During a budget squeeze, overhead can be diverted elsewhere.

Because of this, for a number of years, it was unknown whether the research enterprise at the University of California was actually covering its overhead costs or operating at a loss.

>This is common practice among tenured professors with grant money to spend and graduate students beholden to them (I’m not making a moral statement, just noting this is common practice).

No, that's not common at all, nor how the system works. Use of graders/TAs are on an institution basis.

"Grant money" has absolutely nothing to do with it. Grant money is earmarked for specific research and cannot be spent for teaching purposes. When grant money is used to hire graduate students, they are research assistants and must work on the research project which the grant money was given for.

TAs/graders come from separate tuition budgets. Tuition dollars are much more preferred anyway because they're stable and faculty do not have to work for them, they show up based on enrollment.

The fact you have TAs/graders at all is by institution. Large R1 institutions have grad students and undergraduate population to fill these roles. In these institutions, 1 minimally sized undergrad class = at least 1 TA, with additional TAs and graders after some enrollment threshold.

Tenure has absolutely nothing to do with it. Adjunct faculty get TAs/graders all the same.

You can do that, and I'm sure people already do. But you can't truly test things at scale. Are OCSP servers going to get overloaded? What about IoT devices and things out of support? You have deployments which configure their systems in non-standard ways, maybe some corporate manager decided to mandate cert pinning.

The original comment was to do a fire drill and revoke live certificates to force everybody to participate in the test.

You can have a fire drill and evacuate an office building, but you can't hold a full-scale forest fire/volcano/hurricane drill and evacuate 3.5 million people to test mass evacuation routes, and also you got the edge cases that don't participate in drills, like homebound seniors or hospitals, where disaster strikes.

The problem isn't revocation of end-user identity certificates. There's hundreds of millions of those floating around at any given point, so revocation happens very regularly. The issue is revocation of intermediates and roots, which involves invalidating tens of millions of certificates and often find themselves in embedded/non-web applications (financial, legal signatures, medical data exchange).

An analogy would be shutting down neighborhood streets versus shutting down major highways in a state for a hurricane evacuation. You can't test the latter at scale.

Giving them way too much credit... it's probably for a bug discovered in 2024.

My impression is "why" is political, with regulations like EU's eIDAS and other national digital sovereignty efforts setting the rules. It's not even WebTrust that's the target in most cases, it's the ETSI EN 319 series and ISO 21188.

Is it possible to convince the EU to say that, no, each one of your 27 member states isn't allowed to have a PKI? I don't think so.

That does happen with downversion software. Red Hat may distribute a backported patch to some component which isn't the same as Canonical or Debian's.

Most users, who don't know the answer to your questions, rely on the distro to figure this out (and often pay good money for it).

Because you're testing pre-release software on a dedicated machine... right?

My city sales tax dollars should not be used to fund the maintenance of a fancy median in some neighborhood on the other side of town.

You can put in a special district, that's an HOA under a different name, with even more government powers and bureaucracy costs. For example, you vote on stuff via the general election, they can seize your home for unpaid property taxes, they can impose zoning laws, and in some places they can impose criminal ordinances (dog pooping in the park).

>Vote... where? In what state, in what county, in what precinct?

No, you misunderstood the comment. It has nothing to do with residency, that's solved.

During a normal election year in the US, you have two elections: a primary and a general. The primary is not solely for political party nominations either, often other state and municipal questions get put on it.

Some places commonly end up getting a 3rd because, e.g. a senate seat becomes vacant and the state has a requirement to hold a vote on the replacement. Sometimes the seat becomes vacant as a result of taking a position in the new administration, so you end up having 3 elections a couple of months apart.