xocnad

Indeed they can but they are in some ways like an individual model per judge, albeit with a sub-optimal interface and very slow, but at least they are hard to game in mass.

And you are not even addressing how easily a model could hide all kinds of special treatment - either way - at the whim of its creators, be they the government or some outside "trusted" party

It doesn't look like fly.io publicly disclose who there auditor is so it is hard to judge that specific part of your experience. I'm not disagreeing with your perspective on startups. I'm saying that type 2 gets much harder when you are large. non-homogenous and lack sufficient automation and monitoring.

My experience with pen tests that you put above or on par with SOC2 Type 2 security mirrors the discussion here. It all comes down to the reputation of the firm doing the testing.

From my 8 years of working SOC2 Type 2 audits done by PwC for a large PaaS Cloud with a worldwide presence (not the big 3) saying Type 2 is almost as trivial as type 1 is absolutely false. This might be true for someone running their own low volume SaaS in one region but for someone the size of Apple they are investing a lot of resource to stay on top of the controls, especially patching and permissions. If you've invested heavily in homogenization and automation your less likely to fail and the audits will be simpler. Even with significant investment I expect there are many aging corners in any "cloud" that make audits subject to failure and require a lot of work to avoid qualifying exceptions.

As the comment you are replying to does not, on its face, seem to have a political bia you should be explicit about where/how you identified that bias. Without this you are the one injecting politics not the OP.

This does not jibe with my experience with my long-in-the-tooth Garmin when it cannot connect to my phone and has been recharged after a total power down. It can take minutes but not hours.

US equity assets are generally available to most. Where I earned my savings is also irrelevant.

This also happened to me about a week ago and I had the same reaction/discovery process you did. OT but I wonder if there was a recent ramp up in these attacks. It was done against an email I do not regularly use that was attached to my account as an alternate and haveibeenpwned confirmed was in a data breach back in 2020.

Got burned by exactly this when on a high deductible HSA plan.

I am not knowledgeable at all about the structure or internal politics but on the face of it (based solely on the representations in this "article") wouldn't the staff that were directly dedicated to implementing the communities priorities be a "worthy cause"?

The US does not require women to register for the draft. And our current political leadership over the military is actively attempting to take women out of combat and leadership roles.

> What do you think is supposed to happen when a warship is destroyed with a cruise missile? There are people on this thread arguing in a way that makes me think the answer is "you're not allowed to strike warships with cruise missiles".

This thread has many tendrils. I'm not sure what this has to do with any of my replies as I've not said, nor implied that.

> From what I've read, the practical obligation to survivors is met once the attacker is confident that some SAR team somewhere has been notified, which was the case here.

Can you point to that in San Remo which you've referenced multiple times - or somewhere if appropriate? I cannot find sections that deal with requiring the rescue, or notification of the need for, of shipwrecked survivors in San Remo - perhaps I am not using the right terms.