• 0 Posts
  • 30 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • You can vote from overseas in whatever location was your last permanent US residence.
    People in DC get to vote for president because a special law was passed giving them electoral votes.

    People in Puerto Rico have a US permeant residence that doesn’t let them vote for president, so they can’t legally vote from a different jurisdiction.
    One of the proposals that’s come up occasionally is to make a similar law for Puerto Rico as we did for DC, but there’s never enough consensus on any plan to go forward, up until relatively recently.


  • if you technically pull people out of poverty by outsourcing to the lowest paying, least labor regulated parts of the world, is the fact that extreme poverty went away in those areas even a good thing?

    Yes. Your prospects of a healthy life increase when going from not being able to provide for yourself to being barely able to provide for yourself by working in fantastically poor conditions.

    If a sweatshop didn’t provide more worker value than extreme poverty, people just wouldn’t work there.

    The bare minimum of improvements is still an improvement, and that we should strive for better than the bare minimum doesn’t make the bare minimum worthless to the people who got it.



  • Depends on the vendor for the specifics. In general, they don’t protect against an attacker who has gained persistent privileged access to the machine, only against theft.
    Since the key either can’t leave the tpm or is useless without it (some tpms have one key that it can never return, and will generate a new key and return it encrypted with it’s internal key. This means you get protection but don’t need to worry about storage on the chip), the attacker needs to remain undetected on the server as long as they want to use it, which is difficult for anyone less sophisticated than an advanced persistent threat.

    The Apple system, to its credit, does a degree of user and application validation to use the keys. Generally good for security, but it makes it so if you want to share a key between users you probably won’t be using the secure enclave.

    Most of the trust checks end up being the tpm proving itself to the remote service that’s checking the service. For example, when you use your phones biometrics to log into a website, part of that handshake is the tpm on the phone proving that it’s made by a company to a spec validated by the standards to be secure in the way it’s claiming.


  • Package signing is used to make sure you only get packages from sources you trust.
    Every Linux distro does it and it’s why if you add a new source for packages you get asked to accept a key signature.

    For a long time, the keys used for signing were just files on disk, and you protected them by protecting the server they were on, but they were technically able to be stolen and used to sign malicious packages.

    Some advanced in chip design and cost reductions later, we now have what is often called a “secure enclave”, “trusted platform module”, or a general provider for a non-exportable key.
    It’s a little chip that holds or manages a cryptographic key such that it can’t (or is exceptionally difficult) to get the signing key off the chip or extract it, making it nearly impossible to steal the key without actually physically stealing the server, which is much easier to prevent by putting it in a room with doors, and impossible to do without detection, making a forged package vastly less likely.

    There are services that exist that provide the infrastructure needed to do this, but they cost money and it takes time and money to build it into your system in a way that’s reliable and doesn’t lock you to a vendor if you ever need to switch for whatever reason.

    So I believe this is valve picking up the bill to move archs package infrastructure security up to the top tier.
    It was fine before, but that upgrade is expensive for a volunteer and donation based project and cheap for a high profile company that might legitimately be worried about their use of arch on physical hardware increasing the threat interest.


  • So, you’re correct that active emergencies take priority.

    That being said, in essentially every place that has 911, both numbers connect to the same place and the only real difference is pick-up order and default response.
    It’s the emergency number not simply because it’s only for emergencies but because it’s the number that’s the same everywhere that you need to know in the event of an emergency.

    It should be used in any situation where it should be dealt with by someone now, and that someone isn’t you. Finding a serious crime has occurred is an emergency, even if the perpetrator is gone and the situation is stable.
    A dead person, particularly a potential murder, generally needs to be handled quickly.

    It’s also usually better to err on the side of 911, just in case it is an emergency that really needs the fancy features 911 often gives, like location lookups.



  • Google analytics is loaded by JavaScript. There are also other things like Google analytics that are also loaded by JavaScript.

    Updating a website can take time, and usually involves someone with at least a passing knowledge of development.

    Google tag manager is a service that lets you embed one JavaScript thing in your page, and then it will handle loading the others. This lets marketing or analytics people add and manage such things without needing to make a full code deployment.
    It also lets you make choices about when and how different tracking events for different services are triggered.

    It’s intended usage is garbage tracking metrics and advertising. Some sites are built more by marketing than developers, and they’ll jam functional stuff in there which causes breakage if you block it. These sites are usually garbage though, so nothing of value was lost.


  • For the military thing, I think there’s coverage for that. The constitution gives Congress the authority to govern the conduct of the military, as well as when it may be used. The president’s “just” the commander, but they’re bound by the same rules for the military that Congress made. I think the best case a rogue president could make there would be that they should be court martialed rather that tried in a civilian court, and I’m unsure if that’s better.

    Since Congress has authority over the conduct of the military, I can’t actually think of a situation where “being commander” was the defining thing, and not their conduct as commander. Closest I got was some sort of negligence resulting in death, but that’s derilection of duty and part of conduct.

    I believe the executive power thing is essentially “control of the executive branch”. I think that one is actually fairly well fleshed out since it’s the leading source of disputes, since it’s all about what the president can tell a part of the executive branch to do.
    It would essentially be “the president is not criminally liable for firing the attorney general”.

    So yeah, I think the sane conclusion would be that the president is de facto immune to laws that currently don’t exist, and likely never will that are insanely narrow in scope.

    I unfortunately don’t think the court is playing a game.
    I think their slow handling of the case was partly avoiding claims of the courts influencing the election, and partly it just being complicated and unprecedented.
    I think they were very clear that the other acts are basically anything the president does “as president”, particularly since they ruled that it’s okay for the president to ask the justice department about options for replacing electors, because the president gets to talk to the justice department.

    I think it’s also worth reiterating that this doesn’t prevent the courts from preventing an action, or other checks against presidential actions, only the consequences the individual may face afterwards.
    The president has the same authority to order the military to disband Congress as they did before, I just might be harder to sue them for it.



  • Those are all great points.

    To be clear, I don’t agree with the notion that the president requires immunity in order to be “undistracted” while being president.
    I think that immunity for explicitly delineated powers makes sense purely from a logical point of view: the constitution says the president can do a thing, therefore a law saying they can’t do that thing is either unconstitutional, or doesn’t apply to the president.
    If they’re impeached it wasn’t a valid use of their powers and they are potentially personally criminally liable.
    I feel like it’s less traditional immunity and more an acknowledgement that the legislature can’t criminalize things in the constitution, and someone can’t be guilty of a crime under an unconstitutional law.

    It’s the not-enumerated official acts bit that’s wonky to me.

    I don’t think anything that trump did would even remotely fit under an enumerated power of the president, which are pretty clearly and narrowly defined. Nowhere does the constitution empower the president to futz about with elections. If Congress delegated that power to the president, then the president is acting in the bounds of a law they can break.



  • Because the legislatures power to impeach and convict isn’t dependent on the judiciary.

    Criminal and civil charges are a judicial branch thing. Impeachment is a legislative branch thing. The legislature does not answer to the judiciary, and the judiciary doesn’t have the power to tell the legislature how or when they execute their constitutional authority. Basically the only restriction is that the need some manner of “due process”, or to be basically fair.

    There’s the office of the president and the individual who is the president. Both are often called “the president”.

    In this case, it was ruled that the individual cannot be criminally charged for doing actions defined as a role of the office in the constitution: constitution says the president can veto bills, so a law saying it’s criminal to do so is unconstitutional.
    There are other activities listed, the “official acts” bit, that are to be presumed to be immune unless you can prove otherwise, like the president communicating with the justice department.

    The ruling didn’t change the ability of the office of the president to be sued or constrained, only delineated when you can legally go after the individual. “Delineated” because this has never been relevant before, so it didn’t matter that we hadn’t answered the question.

    It’s a bad ruling not because it makes the president unremovable, but because those “other official acts” are given way too much slack.


  • The rationale is that the powers aren’t unchecked, but that the check for official constitutionally listed acts of the president is Congress, not the courts.

    Article 48 gave the presidentisl office the power to unilaterally bypass the legislature.
    This supreme Court ruling delineates the line between the individual and the office with regards to the judicial system, not the relationship between the office and the other branches like article 48 did.
    Rather than granting new powers or preventing restraint of the executive branch, it purely limits the consequences the individual can face out of office.
    The concept of presidential immunity existed prior to this case.

    The ruling essentially listed three categories and their immunity status with regards to the courts. In my opinion, two of them are reasonable and the third shouldn’t exist.

    It’s reasonable to me to say you cannot sue the president for vetoing a bill, or criminally prosecute the president for commanding the military. The constitution says the president can do those things, and that the check on presidential power is congressional acts including impeachment. The office of the president or the government as a whole may be prosecuted, and Congress and the courts can hammer out the exact meaning of the core powers, but the individual is only liable if Congress uses their power to assert that something was definitely not a valid presidential act.

    It’s reasonable to me to say that being the president doesn’t grant you broad immunity for non-president things. The president does not have the constitutional authority to drink and drive, so if they do they’re just a person subject to criminal prosecution.

    It’s unreasonable to me to say that in areas where the president acts officially, but their authority is shared with Congress or an inherent power of the office that they might not have immunity depending on how it impacts the role of the president.
    It’s weird to say it, but in this case I agree more with Coney Barrett that the more appropriate test is to see if the law applies to the official act and then determine if in this case it would interfere with a delineated core power.

    In her own separate concurrence, Justice Amy Coney Barrett agreed with the majority “that the Constitution prohibits Congress from criminalizing a President’s exercise” of his core constitutional powers and “closely related conduct.” But she would have courts approach the question of immunity for other official acts differently, by focusing first on whether the criminal law under which a former president is charged applies to his official acts and, if so, whether prosecuting the former president would interfere with his constitutional authority.

    Applying that principle to the facts of this case, she suggested that at least some of the conduct that serves as the basis for the charges against Trump – such as his request that the speaker of the Arizona House of Representatives hold a special session about election fraud claims – would not be immune. “The President,” she concluded, “has no authority over state legislatures or their leadership, so it is hard to see how prosecuting him for crimes committed when dealing with the Arizona House Speaker would unconstitutionally intrude on executive power.”

    https://www.scotusblog.com/2024/07/justices-rule-trump-has-some-immunity-from-prosecution/

    I ultimately think that it would have been better to say that the president (individual) cannot be criminally prosecuted for exercising specifically enumerated constitutional powers unless Congress has impeached and removed from office and send it back to the lower court. They’re perfectly capable of deciding if a particular act was an executive overreach or not on a case by case basis, and the fact that this has never happened before is a pretty solid argument against needing to worry about a “chilling effect” on the exercise of presidential power. The president should be chilled, it’s practically in the constitution. Any power not given to the government is reserved to the people, clearly implying that the constitution should be read as stingy with power to the government, and generous with rights to the people. The president, as a member of the government, should be encouraged to worry about wandering around in legal grey areas.



  • That’s not the case, you just need to be able to make an outbound connection.

    The minutiae of how certbot works or if that specific person actually did it right or wrong is kind of aside the point of my “intended to be funny but seemingly was not” comment about how sometimes the easiest solution to implement is the one you remember, even if it’s overkill for the immediate problem.



  • This is confusing to me, because the point of the request seems to be “get a certificate”, not “get a self signed certificate generated by running the openssl command”. If you know how to get the result, it doesn’t really matter if you remembered offhand the shitty way or the overkill way.

    Is it really more helpful to say “I remember how to do this, but let me lookup a different way that doesn’t use the tools I’m familiar with”?


  • Do you think that, in this example, using certbot is fucking shit up, or breaking something?

    The thing about overkill is that it does work. If you’re accustomed to using a solution in a professional setting, it’s probably both overkill and also vastly more familiar than the bare minimum required for a class project that would be entirely unacceptable in a professional setting.

    In OPs anecdote, they did get their certificates, so I don’t quite see your “intentionally fucking things up” claim as what’s happening.