Given the "kernel" requirement coupled with the design of these devices in general, any real non-interactive RCE will be claimed to not be "in the kernel"... it was a Qualcomm or ARM binary blob not the kernel!, It was the Baseband firmware not the kernel! It was libXYZ not the kernel! etc.

Why don't you drive an 18 wheeler to work every day? They are used by millions of professional people every day who's job it is to drive! Why would you be different from all those people that you think you need to use a little car instead?

The answer is obvious in both cases; You don't need it and it would be wasteful. If I don't have a huge database with constant read/write calls, If I don't have to try to manage multiple end users submitting content, if I don't need super async real-time snappy UIs to compete with the latest android app fad or session tracking of tens of thousands of users, why would I need laravel?

If nobody rolled their own specifically for what they needed, we would still be writing ASM/APL/Raw hex.

i'm sorry but i'm really not convinced by this argument. there are many frameworks available in various languages/platforms, some created specifically to be light and fast (in the PHP example above, lumen is a possible choice). my other argument would be- why are you spending so much time on plumbing when you could be concentrating on the parts of your application that make it special?

Most people are making CRUD apps that aren't all that special.

This analogy sort of falls apart in the details. Rolling your own is more akin to building your own vehicle. You might have all the right parts to have a functioning vehicle but you probably don't have the experience of a team of engineers and designers of a commercial vehicle.

In most cases you can buy a modestly sized vehicle from a manufacturer that still has a team of people ensuring the performance, utility, and safety of the vehicle.

The vested interest media and political parties have in making it seem like there is an insatiable thirst for white supremacy in America.

It's on average not any worse than it ever was, but showing us how bad its always been right now serves a useful political goal in division and diversion.

Its not a conspiracy, just stupidity and greed. Outrage generates views and votes, no cartel required.

Installation in buildings. Try pulling a bundle of CAT6 cables from a comms closet with huge plastic blocks from zipties jutting out every other foot through 10-50 feet of drywall and/or drop ceiling. Loom doesn't even warrant a sarcastic comment in that context. The biggest advantage is of course the string takes the brunt of the stretch stress.

I'm not gonna go lace up a DC but it's still useful enough that every hardware store around carries rolls of twine right next to the cable spools and zip ties.

Lots! Tons and Tons and Tons! S3 is super secure and CAN NOT be hacked when properly configured and used according to our standard!

You got hacked? You must have configured it wrong because we already told you it was unhackable; Good luck proving it was our fault not yours.

> Good luck proving it was our fault not yours.

Seems like it would be incredibly easy to prove that an S3 bucket was misconfigured in such a way that the data was publicly accessible. In fact this has been the case in the recent high-profile cases that I can recall.

The S3 bucket was not public.

The hacker got ephemeral keys by remotely exploiting the WAF. The WAF had no reason to have privileges to read from S3, that was a mistake.

I’m unclear if data in bucket was encrypted at rest but I guess if you get keys to read it’s a moot point.

Can you actually substantiate a S3 security problem that wasn't user error? Because I've yet to hear of one.

not sure if serious

If there is a gold cartel to enforce it, yes.

For a humorous example see the origin of "processed cheese".

Cheese is a bad comparison, since cheese is different from what “processed cheese” contains. But gold is gold, and diamond is diamond – i.e. elemental particles in a regular structure.

“The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.”

Nah. Computing sensitivity has always been easy enough, flip bits and watch output. This is about how to do it in a generalized way that fits in with related work in the field.

Absolutely nothing, It's worse with fewer features. Mozilla itself says as much. This is for playing around with stuff, not general usage.