> Unless the service you are trying to use requires that you use a particular model of authenticator, which the service provider can enforce via attestation.
Apparently he had already been denied a work visa without explanation last year by the US consulate in Munich. However, that decision was apparently later reversed after protests from Washington University in St. Louis. Since that must have been before the Snowden leaks and NSA protests, I'd say it doubtful if those are really connected to his more recent refusal of entry.
Edit: To be clear, I am not suggesting that his refusal was not politically motivated. But the original article suggests (or rather quotes author Juli Zeh on suggesting) a direct connection to the NSA protests and their petition against NSA surveillance.
Read closely. Abdulrahman al-Awlaki was killed in a separate drone strike, two weeks after his father's death. The real target of that second drone strike is currently unknown.
I think it was mentioned somewhere that Snowden used GPG in his communication with Greenwald. At least some people inside the NSA seem to regard it as secure.
I found this part particularly interesting: "Our business is apolitical, okay? We do not generate the intelligence requirements. They're levied on us. And so if there is a requirement for foreign intelligence concerning this issue or this region or whatever, then that is [...] what we are going after. That is the intelligence target we are going after because it is the requirement."
I think as engineers, we have a certain degree of responsibility for how our work is used. To say your work is apolitical when you're in the business of spying on people is quite the statement, especially if "people" is basically everybody. (I am aware that the speaker is probably not an engineer and it wasn't an engineering recruiting program, but the same can be said about their field, I'd assume.)
Disallowing self-signed certificates doesn't improve security of unencrypted connections, but it increases security of all connections using SSL/TLS. It doesn't make you more secure (you don't have strong authenticity in any of those cases), but it certainly makes me more secure.
When Gmail fetches email from my provider, which has a certificate signed by a trusted CA, it would have previously accepted any self-signed certificate from an active MITM.
If you compare it to the number of dreams people have around the world each night, it probably is rare. But then, it's not that difficult to learn and you also find quite a lot of people whose dreams are usually lucid without really being aware of the difference.
Similar studies have been conducted by LaBerge and others for decades now. I did a brief search and found two examples: One that measured EEG for clenching hands (in 1986!) and one that measured cardio-vascular activity for performing squats. So the novelty here is probably the use of fMRI. This is probably difficult because sleeping in these things is not exactly comfortable.
Well, it depends on the hard drives you're using, and the exact access pattern, but sequential access to disk can be even faster than random access to RAM.[0] This of course doesn't really matter to average Joe, since he has little influence on how data is read from his disk. But if you're say, a database developer, it does matter quite a bit.
Nice analogy. From a technical standpoint, however, access patterns often make a bigger difference than the type of your storage device. The difference between sequential access on disk and sequential access on SSD isn't nearly as big as random access on disk compared to sequential access on disk.
Apple has had Darwin on ARM processors for quite some time. It's called iOS. The cited project was porting Darwin to a certain ARMv5 chip. I don't know a lot about the ARM architecture, but from what I understand the original iPhone was already run by an ARMv6 and ARMv5 is pretty obsolete. So this can hardly be interpreted as part of a serious effort to port OS X to ARM.
Android's implementation of passkeys currently does not support attestation. https://groups.google.com/a/fidoalliance.org/g/fido-dev/c/nh...
Neither does Apple's, I believe.