That's a tad pedantic. Everyone takes sand from the beach. That's simply the nature of going to a beach. The spirit of those laws is to prevent people from taking large quantities of sand for some personal or commercial purpose.
Private artifact repositories also help to mitigate supply chain risk since you can host all of your screened packages and don't have to worry about something getting removed from mvn-central, PyPI, NPM, etc.
Plus the obvious need for a place to host proprietary internal libraries.
> You have a substance that you know, for a fact, a certain proportion of the population will abuse, to the detriment of both themselves and society at large.
I can understand why someone may take this stance, but I think this argument is something of a hasty generalization when it comes to drug policy. For starters, the policy alone (prohibited vs decriminalized vs legalized) does not appear to be the determining factor in the "certain proportion" of the population that use drugs problematically or otherwise. The US consistently has some of the highest drug usage and abuse rates compared to our western counterparts in Europe. I don't know of the exact reason for this. Could be other cultural differences between the US and Europe. Could be the fact that most European countries approach drug abuse as a public health issue opposed to a criminal one, and focus on harm reduction and rehabilitation instead of jail time.
We are currently seeking a staff or senior staff SW Engineer who is technically savvy and is excited about working within a SoC development team to produce customer-facing software to enable our end users. This position involves a wide range of challenges from interfacing with IC and firmware designers to working with marketing to present the IC products in intuitive ways. As part of one of Renesas’s fastest growing product lines, you will have the opportunity directly impact customer experience and build new software to enable feature rich hardware to shine. If you like problem-solving, working with systems involving Software/Firmware/Hardware, and challenging the status quo, we’d like to hear from you. Your opportunity to influence product architecture and our business success is limited only by your technical ability and creativity. If you seek a place to excel with no artificial barriers, apply now!
We are currently seeking a staff or senior staff SW Engineer who is technically savvy and is excited about working within a SoC development team to produce customer-facing software to enable our end users. This position involves a wide range of challenges from interfacing with IC and firmware designers to working with marketing to present the IC products in intuitive ways. As part of one of Renesas’s fastest growing product lines, you will have the opportunity directly impact customer experience and build new software to enable feature rich hardware to shine. If you like problem-solving, working with systems involving Software/Firmware/Hardware, and challenging the status quo, we’d like to hear from you. Your opportunity to influence product architecture and our business success is limited only by your technical ability and creativity. If you seek a place to excel with no artificial barriers, apply now!
* Position is mostly remote but will require occasional onsite meetings in Austin, TX.
> a similarly impairing dose of cannabis results in 0.00001 ppm of the drug in breath.
Would you mind citing a source? My understanding of why this has been a difficult problem thus far is that THC concentration is not inversely proportional to motor function (unlike alcohol). I.e. the drug effects people differently and simply measuring THC concentration alone is not enough to indicate intoxication or lack thereof.
I just brought up the CRCs as an example of due diligence. This attack, as I understand it, hinges on a design and BOM change to the board. So my question is how did that change manage to make it past both Supermicro and Elemental?
This is why I am skeptical. I will not presume to know how Supermicro and Elemental operate but I find it unlikely that this would go unnoticed by both of them. The guys I work with raise hell if CRCs on firmware images don't match, much less a BOM change. There are a lot of QA breakdowns that have to happen after manufacturing for this sort of attack to be successful. Could it happen? Sure, but there should be some sort of available evidence. What about the rest of Elemental's customers? Did the government manage to quietly take all of their servers as well?